URLhaus Database

You are currently viewing the URLhaus database entry for http://178.16.54.109/5.exe which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:3809351
URL: http://178.16.54.109/5.exe
URL Status:flame Online (spreading malware for 2 months, 2 days, 5 hours, 56 minutes)
Host: 178.16.54.109
Date added:2026-03-31 20:23:07 UTC
Threat:Malware download Malware download
Reporter: Bitsight
Abuse complaint sent (?): Yes (2026-03-31 20:24:12 UTC to abuse{at}omegatech[dot]sc)
Tags:dropped-by-Phorpiex phorpiex link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2026-05-295.exeexe 3bfbfb354bcb470401421a22b7bce071d0ec77f9d6be1d5241fe49b69a169678n/aPhorpiex
2026-05-255.exeexe b458e153a8b0c8363aaa1422406de4f59ae2c637dbb8b537da6677141488aec2n/aPhorpiex
2026-05-235.exeexe 587f74f44407937319c3aeaf710f040a4a34ee9abd5982aa39ba1960d5892252n/aPhorpiex
2026-05-205.exeexe dee39422478df6026f8fe6e86048379d8fbc0f7e2acdd31fb5bb5296370fc927n/aPhorpiex
2026-05-165.exeexe 68fc576b432c7cd7a1b87077ecd0f0275761112df2f753051f3f02852ce25156n/aPhorpiex
2026-05-125.exeexe 9f254e434675671ff63b3e29c4ea62972a13abbe706746e2262b902b2b503efen/aPhorpiex
2026-05-095.exeexe 149ad59bd8813ba2b3d8678453c1bddb53d42267ce82fd30b9671a96e5448cddn/aPhorpiex
2026-05-075.exeexe ec523e453bc03e97c54c7510186c34f1b0a787ca16ff1b036c523efc64ec4ec4n/aPhorpiex
2026-05-065.exeexe 54210286d94597f19f61b54bbf1e230b20d4d5dd97d25226112db5720a1f7c5cn/aPhorpiex
2026-05-015.exeexe dce7419779966068b2a0ac63aaf43534cfef9d9a31e5b96e0975524ac5b0d8d7n/aPhorpiex
2026-04-235.exeexe 501b05b797f03678aae8b3e3598115e9e2aafc6c6198a548d8a447fcd82137b5n/aPhorpiex
2026-04-225.exeexe 98ba0d26044bd6c4239c1d17e678bc1159ed8fa5b9b08b06a7c452f602abbce8n/aPhorpiex
2026-04-205.exeexe a78e024e259431c239e1dcebbbb0ff53d93f61ab66f28b30b60438bec733a5e5n/aPhorpiex
2026-04-065.exeexe 54116d0ee4028ab6c8d5fb2e2bc99c0c563ec68ab03519d07394e21cf11c7275n/aPhorpiex
2026-03-315.exeexe 46706ba670a5ff4bad4d772d15c207a9a6a7c8bdade84b5fc271151b4b97e68en/aPhorpiex