Payload download host
45.9.2.239
This address has not connected to a sensor. It is the download host named inside captured dropper payloads.
Named in captured payloads
Dropper payloads captured by the sensors told them to fetch malware from this host. The host itself has not connected to a sensor; it is the download target in 2 captured payloads.
| File | SHA-256 | VirusTotal | Via | First seen |
|---|---|---|---|---|
| w.sh | 4890d90dd5eedd73... | 20/75 | interactive session | 2026-10-21 |
| [http]://45[.]9[.]2[.]239:24381/bins/payloads/w.sh | ||||
| c.sh | ec0a0374513a93cd... | 17/75 | interactive session | 2026-10-21 |
| [http]://45[.]9[.]2[.]239:24381/bins/payloads/c.sh | ||||