URLhaus Database

You are currently viewing the URLhaus database entry for http://144.172.109.153/60/cbb/weneedsuchakingdomofnicepersonentirelinkingforebst.hta which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:3886245
URL: http://144.172.109.153/60/cbb/weneedsuchakingdomofnicepersonentirelinkingforebst.hta
URL Status:Offline
Host: 144.172.109.153
Date added:2026-07-14 08:43:15 UTC
Last online:2026-07-31 19:XX:XX UTC
Threat:Malware download Malware download
Reporter: abuse_ch
Abuse complaint sent (?): Yes (2026-07-14 08:44:16 UTC to abuse-reports{at}cloudzy[dot]com)
Takedown time:17 days, 11 hours, 0 minutes Bad (down since 2026-07-31 19:45:12 UTC)
Tags:hta opendir rat RemcosRAT link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2026-07-31weneedsuchakingdomofnicepersonentirelinkingforebst.htahta b0dc24ee865a80e816aeb64240316de786c354caf2c2316b3f2530518827a81dn/a
2026-07-31weneedsuchakingdomofnicepersonentirelinkingforebst.htahta 22cd7d1ba763b46dbf0b54cea620c3ebd44c25d70a749e55f2e3e12371912677n/a
2026-07-31weneedsuchakingdomofnicepersonentirelinkingforebst.htahta 6a73772fd7b33b4f84b67053356c0cffe6e19a7b18b098ad1df5ea572aafbc3bn/a
2026-07-30weneedsuchakingdomofnicepersonentirelinkingforebst.htahta e6dddb4d8bec39ce63809d5d0507c99388464521529a852b1eaabffb28d5ab5bn/a
2026-07-30weneedsuchakingdomofnicepersonentirelinkingforebst.htahta e075080e6309777e1fe0281b4e449a2acda99a51294f4b6bbf90fa9dfdcc577an/a
2026-07-30weneedsuchakingdomofnicepersonentirelinkingforebst.htahta 2210b14d4791b4edfdb8cedb71482bfb0ecc21cf9d42793f9d06e522eba50430n/a
2026-07-30weneedsuchakingdomofnicepersonentirelinkingforebst.htahta 3dbd88569004d2e27354f3a166c434679a0769058e0b123e22c2c6c86cb4605an/a
2026-07-14weneedsuchakingdomofnicepersonentirelinkingforebst.htahta c478f13eefa74178e585ec29988ab6bc045077b3db9dea930109793716928fadn/aRemcosRAT