URLhaus Database

You are currently viewing the URLhaus database entry for http://178.16.54.109/14.exe which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:3851056
URL: http://178.16.54.109/14.exe
URL Status:Offline
Host: 178.16.54.109
Date added:2026-05-20 23:12:06 UTC
Last online:2026-05-26 17:XX:XX UTC
Threat:Malware download Malware download
Reporter: Bitsight
Abuse complaint sent (?): Yes (2026-05-20 23:13:12 UTC to abuse{at}omegatech[dot]sc)
Takedown time:5 days, 18 hours, 28 minutes Bad (down since 2026-05-26 17:41:41 UTC)
Tags:dropped-by-Phorpiex phorpiex link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2026-05-2514.exeexe 37e85a9feba3b4ea8a13076f16a7747286525a715b88c52ef5ac86ca677a2bf6n/aPhorpiex
2026-05-2314.exeexe ee395ed00a1a0f671da1bab65b95513e812b7132878e4894adeeeded76c99f88n/aPhorpiex
2026-05-2214.exeexe bb77ef06de83dc5e450572c04f69224c44786bda5eadc9e7a698dc4ef1445edfn/aPhorpiex
2026-05-2014.exeexe de7093bea296ce216d953a260aecafa83586e82a7367a1c0b749bfda848c1d64n/aPhorpiex