URLhaus Database

You are currently viewing the URLhaus database entry for http://178.16.54.109/nmix.exe which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:3864621
URL: http://178.16.54.109/nmix.exe
URL Status:Offline
Host: 178.16.54.109
Date added:2026-06-14 22:11:06 UTC
Last online:2026-07-31 19:XX:XX UTC
Threat:Malware download Malware download
Reporter: Bitsight
Abuse complaint sent (?): Yes (2026-06-14 22:12:13 UTC to abuse{at}omegatech[dot]sc)
Takedown time:1 month, 16 days, 21 hours, 36 minutes Bad (down since 2026-07-31 19:49:09 UTC)
Tags:dropped-by-Phorpiex phorpiex link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2026-07-22nmix.exeexe 4aa2d4adb660e621aa9a4a473aeb54825b0ef64e0206e3e85833f09b609bae32n/aPhorpiex
2026-07-20nmix.exeexe b95fc6974e1520909056676dc64f68b2c8073b63818d91e47b13c0e1a013bc5bn/aPhorpiex
2026-07-15nmix.exeexe b90c05f02a075ce083a83a4d200293c5b5872ebda631032a49197907743bc8fan/aPhorpiex
2026-07-08nmix.exeexe 799be7a2d325faf175f7c4bb2af2129e29a5ef46aaf7d5f46ff2ee89c2647ed7n/aPhorpiex
2026-07-04nmix.exeexe 7084792a0c28fb37ec207c2b0a12dae8e6d43996e6b56cfe6f78970d72886121n/aPhorpiex
2026-06-19nmix.exeexe cac977b50d2505405e729e623025a03b60a58e92b0b75c272242592139985ddbn/aPhorpiex
2026-06-14nmix.exeexe 32546b35f62606d26d0ad03e2d325ee3882d5307f3cde33fac56daed417f3a5an/aPhorpiex