URLhaus Database

You are currently viewing the URLhaus database entry for http://176.46.152.46/1.exe which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:3590322
URL: http://176.46.152.46/1.exe
URL Status:Offline
Host: 176.46.152.46
Date added:2025-07-26 10:02:08 UTC
Last online:2025-11-12 09:XX:XX UTC
Threat:Malware download Malware download
Reporter: abuse_ch
Abuse complaint sent (?): Yes (2025-07-26 10:03:10 UTC to abuse{at}as214351[dot]com)
Takedown time:3 months, 18 days, 23 hours, 12 minutes Bad (down since 2025-11-12 09:15:54 UTC)
Tags:Amadey exe RedLineStealer link Rhadamanthys Stealc

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2025-10-301.exeexe b8d05cd721d0ab36c13f14a6b397c198f721f50c126e7dd90ecdb76187b76429Virustotal results 22.86% 
2025-10-211.exeexe 9d1026657594e588eee1b713f4280c20f5f8fef0c837b03231406c623abbb3acVirustotal results 47.14%Rhadamanthys
2025-10-161.exeexe 3230ed070a4c89b23bc0a3b0f37a18c97bba130904c904f940a50b82ed35580cVirustotal results 54.17% Rhadamanthys
2025-09-071.exeexe be96ac7547b444840fca35813de86be152dc6ca612544055d2fc979459a92400Virustotal results 45.83% Stealc
2025-08-311.exeexe cb9bd04a140f01165856fc726e03801c3d757a63bfda2b8b4638d2bfb726d089Virustotal results 51.39%Amadey
2025-08-141.exeexe ffbc6b4d798a9755203d14efb72bc64c34c92cd759083561b6f6e8064bb1eff0Virustotal results 11.11% RedLineStealer
2025-07-291.exeexe 2a9cd95dea7e44cba7056a7a0f38c002399e9af16d0773462f2dd9bb487da8afVirustotal results 79.17%RedLineStealer
2025-07-281.exeexe ea414b89e9acddff6c4e515ef7c643832493bf2e70b7f9756458f9539015534an/a
2025-07-271.exeexe 56af409e02eb80450505fdda34609fc7808ab4a22073cebe3c0643a1175ca919Virustotal results 16.67%RedLineStealer
2025-07-261.exeexe 6d869187927e0c562dd0ade47e3b39f580c59ae84808bd723c68e421ad747b6bVirustotal results 85.92%RedLineStealer