URLhaus Database

You are currently viewing the URLhaus database entry for http://191.93.118.254/SecurityHealthSystray.vbs which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:3563297
URL: http://191.93.118.254/SecurityHealthSystray.vbs
URL Status:Offline
Host: 191.93.118.254
Date added:2025-06-17 21:22:58 UTC
Last online:2025-07-18 12:XX:XX UTC
Threat:Malware download Malware download
Reporter: Riordz
Abuse complaint sent (?): Yes (2025-06-17 21:23:16 UTC to abuse[dot]internet{at}tigo[dot]com[dot]co)
Takedown time:1 month, 0 days, 14 hours, 55 minutes Bad (down since 2025-07-18 12:18:56 UTC)
Tags:AsyncRAT link opendir

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2025-07-18SecurityHealthSystray.vbsunknown dcc5e50b7931f67538ba5a423ec6366db60c0ef297f7d93fd5bbeeb0542cc87cn/a AsyncRAT
2025-07-17SecurityHealthSystray.vbsunknown c7775ead0cefe9f3bd797b27640ae5a41ca29decb4e29804c0fa95d50e037d4dn/a
2025-07-02SecurityHealthSystray.vbstxt be0354593128fb53be687fdc30473710e21487ae60e713b29cde21485a9ecd6cn/a AsyncRAT
2025-06-28SecurityHealthSystray.vbstxt 5b3c39341d2a8d11bcb0faed02ae6aefab6d662715488b718a44647f7f828538n/a AsyncRAT
2025-06-25SecurityHealthSystray.vbstxt 9e54ba8dd61c0889d583ee0bcbb0102d161d8f7163228002bffe57486bd3d97an/a 
2025-06-23SecurityHealthSystray.vbstxt d1a018205829c2252642f0b38e61f88819df1c5a2b64825a38fa53dbe2b9198bn/aAsyncRAT
2025-06-20SecurityHealthSystray.vbstxt eebb23cecb42b5136ffc886eb336257975f2cc9159eee657b14637f0cbdd6d57n/a 
2025-06-19SecurityHealthSystray.vbstxt 046b50377c1ac078079d3d09abbde022dea938500ca68c1b48da47ee8ecf9fc5n/a 
2025-06-17SecurityHealthSystray.vbstxt 9265a6e0b26a240f1f8bffddf3b36d0e533919d0c894bd66839a90e351961464n/aAsyncRAT