URLhaus Database

You are currently viewing the URLhaus database entry for http://43.161.245.186:79/02.08.2022.exe which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:3734704
URL: http://43.161.245.186:79/02.08.2022.exe
URL Status:Offline
Host: 43.161.245.186
Date added:2025-12-16 13:11:09 UTC
Last online:2026-07-16 18:XX:XX UTC
Threat:Malware download Malware download
Reporter: DaveLikesMalwre
Abuse complaint sent (?): Yes (2025-12-16 13:12:19 UTC to abuse{at}tencent[dot]com)
Takedown time:7 months, 2 days, 4 hours, 58 minutes Bad (down since 2026-07-16 18:11:06 UTC)
Tags:censys CobaltStrike link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2026-07-1602.08.2022.exeunknown 61c56d3e470dd8793459ae5de8dc53620bf942d73bd81e1e5278f5a977c76b8bn/a 
2026-06-3002.08.2022.exeunknown 4da5b629ed1d60fbd965134be30c14b76618a17a6d112b015b72a1a484cd01dan/a 
2026-06-2602.08.2022.exeunknown 347deddd476bba89c5b3c2bdba103a4926aa190e40353ac6ae6df068ce07e714n/a 
2026-05-1502.08.2022.exeunknown 1c0853739062ea7817264c6e695bea0f1e20d872f0bf13446251c37a0d891175n/a 
2026-05-1302.08.2022.exeunknown 48644a13ac8b56655c98caaad60541ebccb7adb6464ce6d29f27cbd4197a2f56n/a 
2026-05-1102.08.2022.exeunknown 5a45030e056a3c5c60ad0b99cf6f2c96797efb6e3a965fe40d810073fdf6a956n/a 
2026-03-2402.08.2022.exeunknown 2aa16dfa715c400f26482e06c0f0193391d15521ed22feb1eb54e5a02420dd6en/a 
2026-03-1002.08.2022.exeunknown 6248a83ce4a53d0edbf4a0e4ea25418f593b737d3287a32c9038141a1ebb81cbn/a 
2026-01-1902.08.2022.exeunknown 34718c37b79a68571d659041dbdc02a42b413c467386198d95e56129f6056558n/a 
2025-12-1602.08.2022.exeunknown 26ad9d95606c419c69ac7cfafbff573b0b9fcc416ace29a3a25ff900ef4826ddn/a