URLhaus Database

You are currently viewing the URLhaus database entry for http://178.16.55.189/files/rdx/random.exe which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:3615933
URL: http://178.16.55.189/files/rdx/random.exe
URL Status:Offline
Host: 178.16.55.189
Date added:2025-09-03 04:02:07 UTC
Last online:2025-12-25 18:XX:XX UTC
Threat:Malware download Malware download
Reporter: c2hunter
Abuse complaint sent (?): Yes (2025-09-03 04:03:08 UTC to abuse{at}metaspinner[dot]net,info{at}metaspinner[dot]net)
Takedown time:3 months, 23 days, 14 hours, 29 minutes Bad (down since 2025-12-25 18:32:16 UTC)
Tags:c2-monitor-auto dropped-by-amadey LummaStealer Vidar link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2025-12-20random.exeexe 67e69f4d9f3e406a05755b547750a15ab7245471a0193325fc755aac7efe68f7n/a Vidar
2025-12-11random.exeexe ed4d68c17f93f08894b6131f438e52ba1d8b3413b00ca83dab31d116a31557b6n/a Vidar
2025-12-03random.exeexe 9467adb5639afcf994ce64a3c7f0e71590f94287a5f98a292ea85eecb073342bn/a Vidar
2025-11-26random.exeexe 8b240ae382f768eb7cb90f3c01630dbb6a3e065c44694afd710d600e2b17d813Virustotal results 47.14% Vidar
2025-11-20random.exeexe 7caae77b90ac75e20d7aed9336abf72286261544b3a757cfb3f5da330426c253Virustotal results 48.57% Vidar
2025-11-20random.exeexe 1e380e8cc9bd2b4392cb7d324c93b1a0f283ea386882552fc9ea308f6262579aVirustotal results 48.61%Vidar
2025-11-14random.exeexe 7d84f90e2ba9f5a601873d47ef79a60b43d99f96f88997d68fb8e3999aeab83eVirustotal results 49.21% Vidar
2025-10-29random.exeexe 56fe1918c477c22758d784c1be780c4704d6301106bfad9d2d0ad8cf57436d14n/a
2025-10-20random.exeexe 9dd12ff611668b5ccf5807c5fac04185988be087c65027451c61101c9aae95e6n/aVidar
2025-10-17random.exeexe d525e04de355791e45f126e241fc2adfdee57b567fe2e2b1f0bb9b20bd852244Virustotal results 50.00%
2025-09-27random.exeexe 78588db07eb869bcbd2be72dd4cd20bd9e356baf75f5a22a518211830d343458Virustotal results 44.12%Vidar
2025-09-25random.exeexe c113c6468153067d6b8380fd8d16236b0fcddcad5c64efac63a2d34db488ca06Virustotal results 47.22%Vidar
2025-09-24random.exeexe ca7b78eb54c40599aba855c763a2194849018dbd9bf91ddbf1299227c1707092Virustotal results 56.94% Vidar
2025-09-24random.exeexe 04537b68ef029a66a16e85052f829b6f6cc969fefe894e0c55f8048cc5ad74a6Virustotal results 65.28%
2025-09-03random.exeexe 13f20829a62b48bb156974b56e5d7d7b39f6660ddbe9716b97ba9cac435617feVirustotal results 58.33%LummaStealer