URLhaus Database

You are currently viewing the URLhaus database entry for http://106.14.68.26/Server.exe which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry

ID:	3549998
URL:	http://106.14.68.26/Server.exe
URL Status:	Online (spreading malware for 1 year, 0 month, 10 days, 6 hours, 56 minutes)
Host:	106.14.68.26
Date added:	2025-05-22 20:09:19 UTC
Threat:	Malware download
Reporter:	BlinkzSec
Abuse complaint sent (?):	Yes (2025-05-22 20:10:10 UTC to anti-spam{at}list[dot]alibaba-inc[dot]com,abuse{at}12321[dot]cn,abuse{at}alibaba-inc[dot]com)

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

Firstseen	Filename	File Type	Payload (SHA256)	VT	Bazaar	Signature
2026-05-07	Server.exe	exe	2f594319a309856874dfdb8d24ba38f96e73882f6028f316ef05a1ed95646133	n/a
2026-04-22	server.exe	exe	51673b45b07c1b0453a20ccff31f50b1f17bd2acc20758ddd2641cf08bc44d5a	n/a
2026-01-20	Server.exe	exe	edb294b608ec1b0a94354c7961f4e43da892d804a59bececcb17941bd58c1643	n/a
2025-09-26	Server.exe	exe	2ffccb1af7276d4773891305e4c6a36a96f4648c949188521cd9869334d24e49	n/a
2025-08-29	Server.exe	exe	71362f935782eabfbd18eace4f6bf940e25775a0408277d751f1cd645d3f3293	n/a
2025-05-22	Server.exe	exe	fb42e29e808bd6c2f837834b402bc19c70e0641f6d0affbca1309fc3c1a07591	84.72%