http://158.94.211.162/12.exe
Classification: Malicious
http://158.94.211.162/12.exe is a malicious URL. Linked to Zeroaccess malware. Reported by 1 threat source, last seen 2026-03-19.
Current activity
- Offline — no longer resolving. Last online 2026-04-14 14:56:44.
- Malware distribution — This indicator is distributing malware.
MITRE ATT&CK associations
Malware families: ZEROACCESS (S0027)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Zeroaccess | Maltiverse Threat Observatory | 2026-03-17 23:31:33 | 2026-03-19 22:31:17 | country_code:za industry:government-and-public-sector | S0027 Zeroaccess |
URL information
- Direct IP
- 158.94.211.162 — this URL points straight to an IP address, a strong indicator of malicious use.
- SHA-256
6b5408b47e14c925c2abf6ab6e41c0cc1840646de0b2dcffb2f54d6c2cb452f7- First indexed
- 2026-03-18 21:42:32
- Last updated
- 2026-04-14 14:56:44
- Last online
- 2026-04-14 14:56:44