URLhaus Database

You are currently viewing the URLhaus database entry for http://91.92.240.38/sh4 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:3748915
URL: http://91.92.240.38/sh4
URL Status:flame Online (spreading malware for 11 days, 11 hours, 37 minutes)
Host: 91.92.240.38
Date added:2026-01-02 07:09:08 UTC
Threat:Malware download Malware download
Reporter: s1dhy
Abuse complaint sent (?): Yes (2026-01-02 07:10:14 UTC to abuse{at}lanedo[dot]net)

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2026-01-12sh4unknown 14dd0a53df345d987416d8510c20e26381abd008c1c4c86d040a7af309c0b03bn/a 
2026-01-12sh4unknown 5ae44faec28b1904d2036544bcf41e9185aabadff99ac59f82067df927e51ea5n/a 
2026-01-05sh4unknown d507ffc2c116e7f381e5ee9a1dcf78abef840ff892964c7be3e55899397546e5n/a 
2026-01-04sh4unknown 073eead9bb91cfcb5a6e4db56c06e75978309498ed348e5c6d5eaf9c41bb8af5n/a 
2026-01-02sh4unknown e0f16a01cd0e42a8a24a4f0b4a9033c74121989efad06b606df2b61ace7c847en/a