URLhaus Database

You are currently viewing the URLhaus database entry for http://158.94.208.168/final/random.exe which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry

ID:	3802072
URL:	http://158.94.208.168/final/random.exe
URL Status:	Offline
Host:	158.94.208.168
Date added:	2026-03-22 17:50:07 UTC
Last online:	2026-03-26 17:XX:XX UTC
Threat:	Malware download
Reporter:	c2hunter
Abuse complaint sent (?):	Yes (2026-03-22 17:51:12 UTC to abuse{at}omegatech[dot]sc)
Takedown time:	3 days, 23 hours, 56 minutes (down since 2026-03-26 17:47:54 UTC)
Tags:	c2-monitor-auto dropped-by-amadey NirCmd

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

Firstseen	Filename	File Type	Payload (SHA256)	VT	Signature
2026-03-26	random.exe	exe	253c1bfddf195d031d2b1504624560001961c2a4cb2b780ed341c89bfbca60ff	n/a	NirCmd
2026-03-26	random.exe	exe	22329b31de6538f22788017603a12a5467eff2482e0a05ab2bae3db1f37d0dc7	n/a
2026-03-26	random.exe	exe	ba16b86e8849508ece50fdf79b67093c6b88ad164825297da2304384cb4a4f69	n/a
2026-03-26	random.exe	exe	aa53f1e8e5ded3d016c17307d83930cbdfc67986a68fceaba44c7a41bf191976	n/a	NirCmd
2026-03-25	random.exe	exe	ca593ddccf34e6999b6df483f0096d59508bf662d97db2fea89cd8c832b23777	n/a	NirCmd
2026-03-25	random.exe	exe	83c9562822778cfe78f1934be39322882c1b7e2e359d6a38243ab5fae2d3826e	n/a	NirCmd
2026-03-25	random.exe	exe	b28d301fb3cf377ed6197aad81013c1c771bebc2bc3025a020d2ebca61a6d79a	n/a	NirCmd
2026-03-25	random.exe	exe	d25dfa969fe9641d922a89fd2d123b2d8aa4f30843c8f09edeaa4fa9d9909394	n/a	NirCmd
2026-03-24	random.exe	exe	973c31b55edc0d6928a957f65caf7099daceba3f49ef28b7ef788cb82aaa3844	n/a	NirCmd
2026-03-24	random.exe	exe	e2e43d7991e03b0462e5ac9011d178da8a93be2d2b1771fab25fe82d0ba6845f	n/a
2026-03-24	random.exe	exe	7d1e6fb3fe4870812aa17c3f871a3728d949315662980670439196395bd19b50	n/a	NirCmd
2026-03-24	random.exe	exe	1f239f450b403a72dec65d6cb2e707214705e45f4219ff1d0b03d8bb5eca69f6	n/a
2026-03-24	random.exe	exe	aef25409e3448752746dfefad04b29225f2b8c6bbd2d991e3115a4069e97504e	n/a	NirCmd
2026-03-23	random.exe	exe	6adba88f3d1aa6deff1ba33f98b128f345ea4941161919be5552e9fb5d1f47fb	n/a
2026-03-23	random.exe	exe	04044bec6d1ac30e8b6777ffc8404b57417ababdb5cbcb24dcca8cbac40b261e	n/a	NirCmd
2026-03-23	random.exe	exe	996b220385d327e249fa6d0f7144e4eea6da9cbc06a39da690f208ab2b322701	n/a	NirCmd
2026-03-23	random.exe	exe	8973953da22ae576d3391b47b7b117c8cb833a34970699561594cca7e8b2797a	n/a	NirCmd
2026-03-23	random.exe	exe	e87e5ca94e55ddc0e3d98d17384ecf273780e423c65933b7d8fcb35d3414ca4a	n/a
2026-03-22	random.exe	exe	388438dc99adfc89ff8585d4214339c33a9ee07c57881892ff670e04e2b0e1ad	n/a	NirCmd
2026-03-22	random.exe	exe	db9b43a0679f88c51197af4a266a1fa8d0a853a654b33139979953c9f11ad6c1	n/a	NirCmd