URLhaus Database

You are currently viewing the URLhaus database entry for http://158.94.211.222/final/random.exe which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry

ID:	3790644
URL:	http://158.94.211.222/final/random.exe
URL Status:	Offline
Host:	158.94.211.222
Date added:	2026-03-06 12:52:09 UTC
Last online:	2026-03-12 02:XX:XX UTC
Threat:	Malware download
Reporter:	Bitsight
Abuse complaint sent (?):	Yes (2026-03-06 12:53:13 UTC to abuse{at}omegatech[dot]sc)
Takedown time:	5 days, 13 hours, 47 minutes (down since 2026-03-12 02:40:41 UTC)
Tags:	dropped-by-amadey fbf543 NirCmd

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

Firstseen	Filename	File Type	Payload (SHA256)	VT	Signature
2026-03-11	random.exe	exe	5828a1d8d8db9762f48cfbbfae3f5bffcbd3f88f78735f3ac6a568252f69813b	n/a	NirCmd
2026-03-11	random.exe	exe	10cadb48e6bdd8663d17af7426795760c6b221ca58a06625c3bbe7a6945b96ae	n/a
2026-03-11	random.exe	exe	d331d3850e5849e3eb22deddb45334d6bd9dbf6b00c3044d38ab27b9dd146828	n/a
2026-03-11	random.exe	exe	e86f64f641e1fc45d0c150bf49ddbb50f194805406b453ff014105564a24502f	n/a
2026-03-10	random.exe	exe	74806f90fbb1f19ddcb348f14fca57aeb00bcb5a73cbfeea4138337514f185bd	n/a
2026-03-10	random.exe	exe	923f9f3d3ae01c76bfa1595570c5f972536431e128caff4e5b0714133cf979ea	n/a
2026-03-10	random.exe	exe	acd7fb325f02ad934d31ba10e9d42ec396f0e9c8862271b02d5a2055a30d8211	n/a
2026-03-10	random.exe	exe	c0eddc8eacb527598eecb19e85e4d79e4945e584636d372aa1b8e46fd9de5f1b	n/a
2026-03-10	random.exe	exe	f80149ae547e2399593a2e236c01e8285d8d296a3d6c54b37f3a448907bfd4fc	n/a
2026-03-09	random.exe	exe	5fc2cf416e66dd9ba4092b3c02089695be0d103e4bae20e107101a8609d2f4e3	n/a
2026-03-09	random.exe	exe	8ab03168270edc046a75943512f78c54f01582ac2dea21f7fde4389420271a45	n/a
2026-03-09	random.exe	exe	d11fd37a354ab795ba1819cc6df5593c3015a2f2be055daae8ac69401b905d75	n/a
2026-03-09	random.exe	exe	afc130015d823922cd2221ddf52f8ae1791d9bf0cdda7f7c6f369854d9f12a14	n/a
2026-03-09	random.exe	exe	1cf289b84c5236fa31ef14ae1c24382415ad16574136f0dc83ddb800c1f39b31	n/a	NirCmd
2026-03-08	random.exe	exe	5c5fb2eb0945683a875a37f7f4ceecbec92ce446bd615e0a007ca5ca96537d43	n/a	NirCmd
2026-03-08	random.exe	exe	4feef129aa67360019f7c5110818bc2ac5e9d701d82752b4c610fecf8b544eb0	n/a
2026-03-08	random.exe	exe	0c0a390d402a9abe37f738d83140bcc7683d4c2f6f23f55e359e6c72c5c6afba	n/a
2026-03-08	random.exe	exe	f19eb0922b0d8fe1eaf7459117c607e9c6edbaa83f12eb126a150c735a288885	n/a
2026-03-08	random.exe	exe	ab49332f1edaf32a65f5010bd3f0eaea4deedbb3ced0c9f3b287bc5107156817	n/a	NirCmd
2026-03-08	random.exe	exe	c0166683a847fbcf3ae4a616c3ce64f044ba9fb03c4745825dc7723886319ea5	n/a
2026-03-07	random.exe	exe	872dc162329cccdb6143fb46cc97f241f62a8f3852a909fd9e0260a74a804685	n/a
2026-03-07	random.exe	exe	fa04c4f8e49bbc23001b746632c27ce94e1b176141455cc95831f5e6d83dd131	n/a
2026-03-07	random.exe	exe	d32a7418dbab5c43ca9be893ccdf4b7edae9276dc8bb53bbb759b78d65d32437	n/a
2026-03-07	random.exe	exe	973f2013840e54bd9b12e31938b0592cad17c23425304fecd1ce072aad4d45d2	n/a
2026-03-06	random.exe	exe	cb1da42e8e4283d5639f54e319dcd76480d9a507206e5b328aa8a6795c6404c3	n/a
2026-03-06	random.exe	exe	94bd0cc1f5b87d454af3f6be2ea6f6531795fb6b6d1078136f6701121715c25f	n/a
2026-03-06	random.exe	exe	0d6f9701bbe0142a18e081bdd354895d9e3d678bbacd0a84c4080ea3eaeed5eb	n/a	NirCmd