URLhaus Database

You are currently viewing the URLhaus database entry for https://178.16.52.80/hold.bat which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:3867583
URL: https://178.16.52.80/hold.bat
URL Status:Offline
Host: 178.16.52.80
Date added:2026-06-19 14:30:16 UTC
Last online:2026-07-15 17:XX:XX UTC
Threat:Malware download Malware download
Reporter: BlinkzSec
Abuse complaint sent (?): Yes (2026-06-19 14:31:20 UTC to abuse{at}omegatech[dot]sc)
Takedown time:26 days, 3 hours, 19 minutes Bad (down since 2026-07-15 17:51:13 UTC)
Tags:178-16-52-80 Koadic

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2026-07-09hold.batbat e4ff79c3e31819932104963a1e0d4074c0d4c1fe2ae79932a61ae6ca51d9f9bbn/a 
2026-07-01hold.batbat 0356ffd8c34efa951ae1e5f33922a37b2ac9821c51ae557b48fb55ac43d58e32n/a 
2026-06-30hold.batbat b2f4509d23f158408311c38116c98ae5c2687e5886019c8d331dcfba79d00a1fn/a 
2026-06-26hold.batbat 12f155c42549c821f7e9ab229848de3c22345402bc59a16750e9fccbc0fab465n/a 
2026-06-24hold.batbat 7d36c4cb008a5620bb5093a475f0b9b92db9ead6c4f7e6dacb5d561607cbb659n/a 
2026-06-22hold.batbat 1f5e9d142982853d02067c066c2329aa0077ea72d8d8b61f0afe6b6ec1b0c050n/aKoadic
2026-06-19hold.batbat 9959530d9d12038ba5deedab246fddcb94d7ce70e860ed4c8c4e8152d460a8f1n/a 
2026-06-19hold.batbat 2e79d9e29de2e654d1eeeb640250f618beb5573c9889067ae173138e5ee00d3fn/a