URLhaus Database

You are currently viewing the URLhaus database entry for http://147.50.253.3/run.exe which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:3784166
URL: http://147.50.253.3/run.exe
URL Status:Offline
Host: 147.50.253.3
Date added:2026-02-23 09:59:09 UTC
Last online:2026-03-13 21:XX:XX UTC
Threat:Malware download Malware download
Reporter: abuse_ch
Abuse complaint sent (?): Yes (2026-02-23 10:00:14 UTC to csl-ip-admin{at}ais[dot]co[dot]th)
Takedown time:18 days, 11 hours, 40 minutes Bad (down since 2026-03-13 21:40:29 UTC)
Tags:BABADEDA exe

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2026-03-03run.exeexe 6de74d9e38c026c4f3c4181545a8e92ffd35e6a5caa10619e362e258ce26fc89n/aBabadeda
2026-02-27run.exeexe 4b16baf674e02084875303e4ae72066d7b6431340efe58a37b7840eb36b6a026n/a
2026-02-25run.exeexe ea33418e5ff8a0bab6cf0455ce466cea1c2f81715980ac66e0822425c73a7d6cn/a
2026-02-24run.exeexe 24c778c57d8ecb9e3190a7140703dd709aa485398aae5b8e0b9f6552fe62284dn/a 
2026-02-23run.exeexe 784ca47ba6241fb31afaded057d2f98b58854e6b7ca3209d5eee6e2c84302345n/aBabadeda