URLhaus Database

You are currently viewing the URLhaus database entry for http://178.16.54.109/5.exe which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:3809351
URL: http://178.16.54.109/5.exe
URL Status:Offline
Host: 178.16.54.109
Date added:2026-03-31 20:23:07 UTC
Last online:2026-05-06 21:XX:XX UTC
Threat:Malware download Malware download
Reporter: Bitsight
Abuse complaint sent (?): Yes (2026-03-31 20:24:12 UTC to abuse{at}omegatech[dot]sc)
Takedown time:1 month, 6 days, 1 hours, 11 minutes Bad (down since 2026-05-06 21:35:33 UTC)
Tags:dropped-by-Phorpiex phorpiex link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2026-05-065.exeexe 54210286d94597f19f61b54bbf1e230b20d4d5dd97d25226112db5720a1f7c5cn/aPhorpiex
2026-05-015.exeexe dce7419779966068b2a0ac63aaf43534cfef9d9a31e5b96e0975524ac5b0d8d7n/aPhorpiex
2026-04-235.exeexe 501b05b797f03678aae8b3e3598115e9e2aafc6c6198a548d8a447fcd82137b5n/aPhorpiex
2026-04-225.exeexe 98ba0d26044bd6c4239c1d17e678bc1159ed8fa5b9b08b06a7c452f602abbce8n/aPhorpiex
2026-04-205.exeexe a78e024e259431c239e1dcebbbb0ff53d93f61ab66f28b30b60438bec733a5e5n/aPhorpiex
2026-04-065.exeexe 54116d0ee4028ab6c8d5fb2e2bc99c0c563ec68ab03519d07394e21cf11c7275n/aPhorpiex
2026-03-315.exeexe 46706ba670a5ff4bad4d772d15c207a9a6a7c8bdade84b5fc271151b4b97e68en/aPhorpiex