URLhaus Database

You are currently viewing the URLhaus database entry for http://64.89.161.156/svchost.vbs which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:3867588
URL: http://64.89.161.156/svchost.vbs
URL Status:Offline
Host: 64.89.161.156
Date added:2026-06-19 14:39:06 UTC
Last online:2026-07-17 00:XX:XX UTC
Threat:Malware download Malware download
Reporter: BlinkzSec
Abuse complaint sent (?): Yes (2026-06-26 18:53:24 UTC to abuse{at}nfx[dot]rip)
Takedown time:20 days, 5 hours, 11 minutes Bad (down since 2026-07-17 00:04:26 UTC)
Tags:64-89-161-156

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2026-07-16svchost.vbsunknown 4e62f5ab07de77d0d96127acdaeb21f5f6605e740237f5c4e4a90500249ccac5n/a 
2026-07-15svchost.vbsunknown deb0ff1834378b45781f76ca21047eb7b920a1e45262a4c673c42ba94640e5fbn/a 
2026-07-14svchost.vbsunknown 056e58492248b31d0797c0bac508a913e08ad1c06f6c3b0d1b5c25024dae330en/a 
2026-07-09svchost.vbsunknown 9042ea1926d3060ca313239d7eae2b79bea34c7598c012d604ba966ef2c9781bn/a 
2026-07-07svchost.vbsunknown 83b97cd4577add1e1b05e7a6bb58953bcedd10241761110d53e42cf5e525a159n/a 
2026-07-07svchost.vbsunknown 454b7c01e4006eff43d2008162001bbe6de322150cf423967e0bbb46c8a145a2n/a 
2026-07-03svchost.vbsunknown 3aa70d6b1aa448cf3bbe8f7f3f95807bc390925303ddb4f3c4d5575a173dde9en/a 
2026-07-02svchost.vbsunknown 8e79926dfee361c5928f3b179d3f400e6a3bb9408faa03dbb3b97ce08712b59en/a 
2026-07-01svchost.vbsunknown 2466c7abbc7a14f60d272c831c02bba983462fc9c5190bff2f55af23731daff9n/a 
2026-06-30svchost.vbsunknown b1a11854123104d86d41bf68c50136818b806bed6ed873a7bfa2c77e4adbedafn/a 
2026-06-26svchost.vbsunknown 0952045d7693eca8d5986cec6006c0234bc35fa248e5a6ed8771bf4473909839n/a