URLhaus Database

You are currently viewing the URLhaus database entry for http://86.54.24.25/Renewable.exe which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:3631825
URL: http://86.54.24.25/Renewable.exe
URL Status:Offline
Host: 86.54.24.25
Date added:2025-09-25 13:30:09 UTC
Last online:2025-11-19 17:XX:XX UTC
Threat:Malware download Malware download
Reporter: abuse_ch
Abuse complaint sent (?): Yes (2025-09-25 13:31:11 UTC to noyobzoda[dot]far{at}outlook[dot]com)
Takedown time:1 month, 25 days, 4 hours, 13 minutes Bad (down since 2025-11-19 17:44:53 UTC)
Tags:exe GhostSocks

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2025-11-17Renewable.exeexe ea9389463bfd678e43de2eb0d559f679c41a245884b7d9bc3acb493795b15ac7n/aGhostSocks
2025-11-13Renewable.exeexe 110c4f6f4b6276deecfa59627ce9a659907852aed392df5dd8600a2ea2ce11bdVirustotal results 32.86%GhostSocks
2025-11-09Renewable.exeexe 23349e142eb22254dd055d7f40be3329af50630c23188104ae2a4128d9d98f5bn/a 
2025-11-05Renewable.exeexe a12a94bffabebc1759a2e50600da543c077aa66da33e3881767d547d1b367bd6n/a GhostSocks
2025-11-04Renewable.exeexe 2d42f44cb857540a05b76c65c8085acb682340470acedd65367fa370a1161ecfVirustotal results 21.13%GhostSocks
2025-11-01Renewable.exeexe 13ef9363e161a1ac323bf113344637f7cb37359d287113804d877929f237baebn/aGhostSocks
2025-10-30Renewable.exeexe bfe77f7c95e9167608393bfe9c73b0193eee92247ce3f2defa20a51f7bd06fd7n/a GhostSocks
2025-10-29Renewable.exeexe 9034e28c65a1c41749efdebca02c0e6b15ea073bf076edcc759f3c9dd705d17bn/a GhostSocks
2025-10-27Renewable.exeexe 3e9f2ba5503a3a9ba04d3bae7432ed39a430bc30b0554808739997f7cb136114n/aGhostSocks
2025-10-23Renewable.exeexe 9c1cab10d63910cc5ae78feec430ac8a2faeb3e823533220c47dc9f7f97dfc47Virustotal results 5.63% GhostSocks
2025-10-22Renewable.exeexe b1bb7b501a17e261becfea6938a4e3fad559210b10f8913ac49ed04439da7a62n/aGhostSocks
2025-10-19Renewable.exeexe 896e08e119f69a64ba961da9e80aacda460ba2a6ad8c21b032dbe1d44c543c42Virustotal results 34.72% GhostSocks
2025-10-16Renewable.exeexe d270c1978c43e04f5703ae199dd1b2fa030d4b219990bdcb06ef96c5536a5247Virustotal results 55.56% GhostSocks
2025-10-14Renewable.exeexe f77c8c9d3f4837be54e215e2bda2e7ff5ff1c5b08fdb924546faad6c7497da02Virustotal results 38.57%
2025-10-05Renewable.exeexe e7220eb1a906f01d98c15c5aed21e8c8e6aa0a1635bc2a6575738b4f77836758Virustotal results 27.78%GhostSocks
2025-10-03Renewable.exeexe 0a8196783e9b795e7e780641ffcc6b5848267256f05ca332ff9334218745d88cVirustotal results 27.78%GhostSocks
2025-09-29Renewable.exeexe 8bcf2cabebf87a922bb0615f2e607e527fb98580f142416c9220a32a46b9cf23n/aGhostSocks
2025-09-27Renewable.exeexe 35b81ff95ed6bb5e6db62d351e74b27448c032c64b443b85b90cfa34dd0289f7Virustotal results 29.17%GhostSocks
2025-09-25Renewable.exeexe f52fa1b8be929a42aafab8f0a80932e52b949ee35498f22b6d58e5e6ed107b99n/aGhostSocks