URLhaus Database

You are currently viewing the URLhaus database entry for http://160.119.69.4/k.php which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry

ID:	3884398
URL:	http://160.119.69.4/k.php
URL Status:	Online (spreading malware for 6 days, 23 hours, 39 minutes)
Host:	160.119.69.4
Date added:	2026-07-09 16:12:06 UTC
Threat:	Malware download
Reporter:	abuse_ch
Abuse complaint sent (?):	Yes (2026-07-09 16:13:17 UTC to abusepoc{at}afrinic[dot]net)
Tags:	ascii bash

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

Firstseen	Filename	File Type	Payload (SHA256)	VT
2026-07-16	k.php	sh	eb733ac91dbe7aa60f5c355b1c1f895b66613a6dd9389fbf6b504c433bc2bb59	n/a
2026-07-16	k.php	sh	c32de4ccec904d88014fd2228b653c7abb458a033244f3e0424c5420eccf5937	n/a
2026-07-16	k.php	sh	4cdc0fdced74262a543237e1cfd5c9c001209ce295213a1d84fb486511062401	n/a
2026-07-16	k.php	sh	fcbf12f9e6b77e73ac64cf4f64f3cd10732f67d9c2803f46a2b4f789044c0eca	n/a
2026-07-16	k.php	sh	8277d9cdcdd6d214ea747c4e3c36f2ee26bbef746273de07a7836335685f8ba8	n/a
2026-07-15	k.php	sh	8e2a474f0babce15d70670b29ea3c68fbe5c9c1f93b82232676ef0b617148b9f	n/a
2026-07-15	k.php	sh	2eea4239c1d2663830856731cec86375c8f5d453924504bfbe887c62a3d1446d	n/a
2026-07-15	k.php	sh	c426fb814aca8621ee6ff94fb6e5b3dc70817064c226752767728af415ac656d	n/a
2026-07-15	k.php	sh	6d63fd7dae970d034a288fa37b393df88286ed1a0c4cb02f21185d02ea49f493	n/a
2026-07-15	k.php	sh	2b51f49bbaca99844aab39a2e7c256f5bbc000c3354fed44e74f50ec703f67f9	n/a
2026-07-14	k.php	sh	0cba96220bd33958a47a7f09d656594ce73c83b79801a873a3ba397ba747c925	n/a
2026-07-14	k.php	sh	dd131beed1da6ccee24174b28153ff11d65f69be9c7dd92eb2efe683b017ff3e	n/a
2026-07-14	k.php	sh	e9c85fed4f8cd17535a62b2cd2832c3ca0e652df1c4914e96fb00f0eb1af710b	n/a
2026-07-14	k.php	sh	ff12c78f24a435c9eaf2f9d1cca37a4ffac206f260d383fd231b59f433b0359e	n/a
2026-07-14	k.php	sh	8e08bc9e69ba580aef0c45430e5facba38d0fc671dee8eaa2f6d5abc2124ab1c	n/a
2026-07-14	k.php	sh	039949b8b22323d91f1d590de4d4c2c2d16ee90991e2f7403f2920500e3bdc62	n/a
2026-07-13	k.php	sh	cc6720ae14382b85c1eafa9d5a04460d2e434d1cfc618dbaf9e0d6679989f535	n/a
2026-07-13	k.php	sh	39d21c33b65d3d58abe2908b4660ce4ca29f18068d7062c1c85fda21a85dce95	n/a
2026-07-13	k.php	sh	0c05628e96568f16fde7b891006b20d630c469153f229a1ee1d5a05eeec72c2f	n/a
2026-07-13	k.php	sh	eeddfd10b3649c4336faaf8759656c0f947b3ce2ff418bbffe70bfddd5ba34ec	n/a
2026-07-13	k.php	sh	bda1cb9facaf9c5e299b00ad219d3d49a1d46d1fdcf93f1ffda2f742f3cb6df9	n/a
2026-07-13	k.php	sh	f6a5fcb77d8ce9826007dfaed36f9c40891c3c9fe54808744c977414eac668b3	n/a
2026-07-12	k.php	sh	e9b3f3a8f1a509b66b234bfa920325f8a0da99a2d41732490571e0de1aa141cc	n/a
2026-07-12	k.php	sh	25dc7b62a1279a348ae26707e43dbaa637c8fd9f64a433c43611b0f4830ce97d	n/a
2026-07-12	k.php	sh	26d0c4e0bd932de9cd2ea3e5544d559448ac549fc5e77d8034638cb3818a9361	n/a
2026-07-12	k.php	sh	77918051a743b1fc4eda4d92cfaae814a1a452c2d6797cd610cc28ac8503ad48	n/a
2026-07-12	k.php	sh	018cf3ae7bad69c5f1ebf0bdc0746008e8cfc9e616bdf54daf6bcedf4656774b	n/a
2026-07-12	k.php	sh	180200603ddf010ef57ac1d721a88ffa5caf4bc391e4c47728e6cd50791bddf6	n/a
2026-07-12	k.php	sh	f8ba9f2170d4304a292942b3d4a635266bbf3177bbb35f3cde1dfbb96d01f9bf	n/a
2026-07-11	k.php	sh	84d81af465f76c5bfcbe193748a17d6b597a3cd3875a96ed7791eb18cfe10c4f	n/a
2026-07-11	k.php	sh	414bb8a69cafb7541a1e1118703ff1f8bc79fbf179914b869ad507c00f646e39	n/a
2026-07-11	k.php	sh	7e281f09327afdba60c1024f23abe2b9b19eec8f257e48a4e08b9fbb74a9cf03	n/a
2026-07-09	k.php	sh	92d93285e39e37750ba59f7127807f3c9d4de18fb8efe386042587e204604108	n/a
2026-07-09	k.php	sh	773bdd418920855e6e2e4fdceadf97be1f8343ef5e18b3de2a44c79c58226134	n/a