URLhaus Database

You are currently viewing the URLhaus database entry for http://45.156.87.140/586 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:3816060
URL: http://45.156.87.140/586
URL Status:Offline
Host: 45.156.87.140
Date added:2026-04-11 08:34:15 UTC
Last online:2026-04-17 23:XX:XX UTC
Threat:Malware download Malware download
Reporter: ClearlyNotB
Abuse complaint sent (?): Yes (2026-04-11 08:35:16 UTC to abuse{at}vmheaven[dot]io)
Takedown time:6 days, 15 hours, 17 minutes Bad (down since 2026-04-17 23:52:46 UTC)
Tags:elf gafgyt link ua-wget

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2026-04-17n/aelf 3263f4af3ca3da90bb43debc46e02109e955b41f9244eb26da28c5b635c6d99fn/aGafgyt
2026-04-17n/aelf 0c21fd92d6daf1d94d376f7f0b72570fc800967fe2a9c64ad6316fcb4cb26aa7n/aGafgyt
2026-04-11n/aelf 5ea7b2e52a8a1843e6d5ec251b803b6bb5b0b9bec65455664740f18ab811ef45n/aGafgyt