URLhaus Database

You are currently viewing the URLhaus database entry for http://178.16.55.189/files/380743829/ITAwKmx.exe which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:3729326
URL: http://178.16.55.189/files/380743829/ITAwKmx.exe
URL Status:Offline
Host: 178.16.55.189
Date added:2025-12-08 15:16:10 UTC
Last online:2025-12-17 23:XX:XX UTC
Threat:Malware download Malware download
Reporter: c2hunter
Abuse complaint sent (?): Yes (2025-12-08 15:17:21 UTC to abuse{at}lanedo[dot]net)
Takedown time:9 days, 8 hours, 30 minutes Bad (down since 2025-12-17 23:47:57 UTC)
Tags:c2-monitor-auto dropped-by-amadey Vidar link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2025-12-14ITAwKmx.exeexe 646c3687b0dda52d92ec8201031b29286bd447570c57f1cc6edbfdae4ed286e9n/a Vidar
2025-12-14ITAwKmx.exeexe 85bf5d3179e5f3aac3bd4c1e12dca189677575ff791a462fc06899e5f2d9cff6n/a Vidar
2025-12-13ITAwKmx.exeexe 7024029850a338e0c74137172135da42e5f3b155a13fdf892b966328363ca525n/a Vidar
2025-12-12ITAwKmx.exeexe dc8fc689b12c3ac420166e18b9e276a7783b2824cae87e04976dd6aa17378cc0n/a Vidar
2025-12-11ITAwKmx.exeexe 025a46239afe313682acb887cb504b27db076331dc4e0692469cbbac55553465n/a Vidar
2025-12-10ITAwKmx.exeexe 0530273e0285d0431830ef4f03f6dc35531b7f9dea5e0121e7c76b59058f16a9Virustotal results 27.27% Vidar
2025-12-09ITAwKmx.exeexe 937ac1bdf44771e83e042f1ed52a13cab0fffb738906e640d565f89f19d3f7f6Virustotal results 46.48%Vidar
2025-12-08ITAwKmx.exeexe c44f0cc6dc97b53601bcfb579d3a68db5a6856ad4fb3f60d75cca2e73a178551Virustotal results 43.66%Vidar