🤲🏼 NEW | abuse.ch Community Hub! Earn recognition 🏅 for the malware intelligence you share, climb the leaderboards 📈, and connect with like-minded contributors who share your hunting focus 🤝. Ready to unlock your profile? Go to the Community Hub →

URLhaus Database

You are currently viewing the URLhaus database entry for http://23.94.145.88/078541 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:4049982
URL: http://23.94.145.88/078541
URL Status:flame Online (spreading malware for 2 days, 16 hours, 8 minutes)
Host: 23.94.145.88
Date added:2026-11-01 17:16:10 UTC
Threat:Malware download Malware download
Reporter: BlinkzSec
Abuse complaint sent (?): Yes (2026-11-01 17:17:10 UTC to abuse{at}dedik[dot]io)
Tags:23-94-145-88 ua-wget

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2026-11-033574378_7_-setup.msimsi a22ee29d7dfa374560036c833971d299d4e0d6cfa1dea67c2f359ef55e84be5cn/a 
2026-11-023574378_7_-setup.msimsi 5e530f6e25588e41c600cf906470b93217fa29509bb12a0cafe615c96a877783n/a 
2026-11-023574378_7_-setup.msimsi 9588f80566ba69cad2ba7669da621a5c47a46a58605f9a80b7beb6fbcd3ce28fn/a 
2026-11-023574378_7_-setup.msimsi d061d6fbb5adb40d7be2b4ba9e447616551b2224b6425beb4333fb380a0a4cc0n/a 
2026-11-023574378_7_-setup.msimsi fd63c2f68718ec32aef144c6786776d076e27529758e21149e1b59760c9ce469n/a 
2026-11-013574378_7_-setup.msimsi bc8510a8fd750e4e95cf44dc2b4c7e4b017e7b094a524c8bd4b6489ff09cd732n/a