Search/hxxp://91[.]92[.]40[.]108/winlogon[.]exe
● IOC

hxxp://91[.]92[.]40[.]108/winlogon[.]exe

View graph Watch Export
Type
URL
Source
URLhaus
First seen
Sep 7, 2026
Last seen
—
offlinemalware downloadreported by von
Look up on VirusTotal
Linked malware
xenorat
Related Indicators
5
urlhxxp://217[.]60[.]36[.]94/test/test[.]bef_frisame malware familyurlhxxp://217[.]60[.]36[.]94/william/wi[.]txtsame malware familyurlhxxp://217[.]60[.]36[.]94/test/p[.]txtsame malware familyurlhxxp://217[.]60[.]36[.]94/test/t[.]phpsame malware familyurlhxxp://217[.]60[.]36[.]94/william/mort[.]phpsame malware family
Connections
1 relationships