URLhaus Database

You are currently viewing the URLhaus database entry for http://130.12.180.85/file/bbc which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry

Add tag Remove tag Perform URL rescan Delete this URL Report a False Positive
ID:3753785
URL: http://130.12.180.85/file/bbc
URL Status:flame Online (spreading malware for 3 days, 7 hours, 35 minutes)
Host: 130.12.180.85
Date added:2026-01-09 06:48:06 UTC
Threat:Malware download Malware download
Reporter: geenensp
Abuse complaint sent (?): Yes (2026-01-09 06:49:16 UTC to abuse{at}virtualine[dot]org)
Tags:script

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2026-01-12bbcsh 0720514d06068d8bde716df23d65510924ae5472c5983e1e7d02b4f2b8729e81n/a
2026-01-11bbcsh 59e6fd149ca6818266cbf07402ae02d1afad35af9e45a68732b74546ee5a1681n/a
2026-01-10bbcsh 4b167516eeedb2b4bcf48eb05ab480e6783833c9b00ca33aa41d6260b25109e1n/a
2026-01-10bbcsh d551258eb86a16d2962dc3815e7a1e79171a8e1cbfcd6b223be928b7dea887fen/a
2026-01-10bbcsh 373bb1eae163c5766e0ed061f2373ef79866f10eae441657fc54cfcac9996224n/a
2026-01-09bbcsh 67c213e529b659f5889b3cce2d3e461f24e7dd31e5d9e6885d7ba0ff7ac75ae0n/a