🤲🏼 NEW | abuse.ch Community Hub! Earn recognition 🏅 for the malware intelligence you share, climb the leaderboards 📈, and connect with like-minded contributors who share your hunting focus 🤝. Ready to unlock your profile? Go to the Community Hub →

URLhaus Database

You are currently viewing the URLhaus database entry for http://178.16.54.109/nmixx.exe which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry



ID:3864619
URL: http://178.16.54.109/nmixx.exe
URL Status:Offline
Host: 178.16.54.109
Date added:2026-06-14 22:11:06 UTC
Last online:2026-07-31 18:XX:XX UTC
Threat:Malware download Malware download
Reporter: Bitsight
Abuse complaint sent (?): Yes (2026-06-14 22:12:13 UTC to abuse{at}omegatech[dot]sc)
Takedown time:1 month, 16 days, 20 hours, 43 minutes Bad (down since 2026-07-31 18:55:17 UTC)
Tags:dropped-by-Phorpiex phorpiex link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2026-07-22nmixx.exeexe c954447ecf2b7e8877f73d9c53368c7cc41e4fac729cea8d0537d2cb922d4524n/aPhorpiex
2026-07-20nmixx.exeexe e782d8798869aaa480b27689ee49ace9ddcbfc48aa2de4a6dc618aea67716a7an/aPhorpiex
2026-07-15nmixx.exeexe b528393be0b45d9f7733f3724ea77e3e13c9acbe22985f1713ccde9aef4cdcf7n/aPhorpiex
2026-07-08nmixx.exeexe d648e7278d8211bdc3162182169c780e22de6c7a9f5d650fbf31d033fd9d9d70n/aPhorpiex
2026-07-05nmixx.exeexe 698bc8bcff6236341a6ad1d222e65c1b3771ca2a7042f3bd9cc5e1c40c4f392en/aPhorpiex
2026-06-19nmixx.exeexe 47088023cf22c95f436e6fb08c208f172504668f3d620b6a558e19b0695bdb04n/aPhorpiex
2026-06-14nmixx.exeexe 0c6b999c97915e661a7b38b7a7ff435af3edfd3bd6d8ac60e6284709c2adf537n/aPhorpiex