URLhaus Database

You are currently viewing the URLhaus database entry for http://158.94.208.44/pb7Ulzhaae3xpSNrEvJH5yqqyMyIbnNF/9z7BGnRGpgs8cZv7.exe which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry

ID:	3889915
URL:	http://158.94.208.44/pb7Ulzhaae3xpSNrEvJH5yqqyMyIbnNF/9z7BGnRGpgs8cZv7.exe
URL Status:	Offline
Host:	158.94.208.44
Date added:	2026-07-22 00:11:18 UTC
Last online:	2026-07-25 19:XX:XX UTC
Threat:	Malware download
Reporter:	Bitsight
Abuse complaint sent (?):	Yes (2026-07-22 00:12:18 UTC to abuse{at}omegatech[dot]sc)
Takedown time:	3 days, 19 hours, 36 minutes (down since 2026-07-25 19:49:00 UTC)
Tags:	6e7868436f4d3b49f375773379ba9022 dropped-by-remus

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

Firstseen	Filename	File Type	Payload (SHA256)	VT
2026-07-25	9z7BGnRGpgs8cZv7.exe	exe	4b277275aa89445db7b4c3193ea7ba1f30ec22980efb3497a484889039989099	n/a
2026-07-25	9z7BGnRGpgs8cZv7.exe	exe	75338e51acff92703ce4bf8fce411c46ab7af04819e5f003755cfea6e6f0b2da	n/a
2026-07-25	9z7BGnRGpgs8cZv7.exe	exe	decebafaaabbd6f67629c0a13d8d497e919c1652738ddbe83761792e388bdd03	n/a
2026-07-25	9z7BGnRGpgs8cZv7.exe	exe	e3226abc37a88b7647561d76c4669b215f682259bf44e0b3e68c35f6bb0b652d	n/a
2026-07-24	9z7BGnRGpgs8cZv7.exe	exe	ba5ce99d36ea459236cd82a6d67ee2452e6cc872b662a2292764af148f74c892	n/a
2026-07-24	9z7BGnRGpgs8cZv7.exe	exe	2b223f94614fcef4ccb9e7baf6effdaf391f069b92396e256f84b4b1822ff7d1	n/a
2026-07-24	9z7BGnRGpgs8cZv7.exe	exe	a431fc7aa495e68464d9855922889d77d2878a2725dd7c0a1abd842005252d40	n/a
2026-07-23	9z7BGnRGpgs8cZv7.exe	exe	ae0b4d8fe724c2dde60289f1a3fdec7d2db6aefce7d65e0ed1ebcde54d3ba735	n/a
2026-07-23	9z7BGnRGpgs8cZv7.exe	exe	591d4f37a94e288334e31c07d200cab00b27c9a8e98f271f3394a3e9a92edb8c	n/a
2026-07-23	9z7BGnRGpgs8cZv7.exe	exe	91361016c42d3ebc84824217992e4c76c1a669c3c1a160e2697d54ede09e3de4	n/a
2026-07-23	9z7BGnRGpgs8cZv7.exe	exe	60e66eaa948273a5fbb3701ce3636d007ab0e91fc98be4801ccedb99b204b313	n/a
2026-07-22	9z7BGnRGpgs8cZv7.exe	exe	b1c4f1c73e004961b11485e8dda5fabb29926abe917a34cee23e370600ec0525	n/a
2026-07-22	9z7BGnRGpgs8cZv7.exe	exe	686492d6fdc77d25ac4965be3fcc2cf0bb51bfdb41cc52f500aa45f542fe6660	n/a
2026-07-22	9z7BGnRGpgs8cZv7.exe	exe	55a47a54228736d7dad743a053f6c7a832b06efe94ae2c6645d5f0df034cff58	n/a
2026-07-22	9z7BGnRGpgs8cZv7.exe	exe	8c7334c6455f4e7d62a9eac56532463b06c50ddf8755610b71af7d062f0739ae	n/a