URLhaus Database

You are currently viewing the URLhaus database entry for http://130.12.180.132/bb/x86 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:3759647
URL: http://130.12.180.132/bb/x86
URL Status:Offline
Host: 130.12.180.132
Date added:2026-01-18 02:26:17 UTC
Last online:2026-02-21 08:XX:XX UTC
Threat:Malware download Malware download
Reporter: botnetkiller
Abuse complaint sent (?): Yes (2026-01-18 02:27:11 UTC to abuse{at}virtualine[dot]org)
Takedown time:1 month, 4 days, 5 hours, 43 minutes Bad (down since 2026-02-21 08:10:41 UTC)
Tags:elf geofenced opendir ua-wget USA x86

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2026-02-18n/aelf 4d96d9cdae5b7b14829d6a68834c9178630894309c1553a182a88856e30b16d2n/a
2026-02-14n/aelf 16b7b3a5b3e0a7de6d9cedaab4fe4a6ae1c61ef839f1583d6af9eb5f6ab2ca72n/a
2026-02-05n/aelf d350784f395372385c51ac1419d7bd9f7c3f8723ed79da3227b7c5431ee51e27n/a
2026-02-05n/aelf 8e17045440eca602af6fd5a4ab08e915e473c8253fbcfc9be2edcebd47f575c6n/a
2026-02-03n/aelf 31341b8a0fd327a98c4208b690640a3afce52abe9a9c598b497bc611af55f92cn/a
2026-01-18n/aelf ecb9ad7995344c9984893d419d3cf5580970ab201da3fbee3071dd5f9dde5917n/a