URLhaus Database

You are currently viewing the URLhaus database entry for http://185.204.217.174/bins/911.sh4 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:1853640
URL: http://185.204.217.174/bins/911.sh4
URL Status:Offline
Host: 185.204.217.174
Date added:2021-12-05 07:42:03 UTC
Last online:2021-12-07 22:XX:XX UTC
Threat:Malware download Malware download
Reporter: tolisec
Abuse complaint sent (?): Yes (2021-12-05 09:19:03 UTC to abuse{at}cyberfolks[dot]pl)
Takedown time:2 days, 14 hours, 36 minutes Poor (down since 2021-12-07 22:21:07 UTC)
Tags:elf mirai link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2021-12-07n/aelf 4cff1ef96fa924f0b8737696f28af80b0e0ff7b0e1c041af77105a0dcf377274n/a 
2021-12-07n/aelf 91866c946b61ee1cf896d8b67722600f366388fe476abc8b7e769f2b9083389en/a 
2021-12-06n/aelf b1fc0f4662f23ed4d278a234c0fb9426c16760d3a56630299cd5f6415baaac96n/a 
2021-12-06n/aelf 5bbbf986d8e711be589cdeee1e86ae6457d970630491f17a21779f6a34b26774n/a 
2021-12-05n/aelf f3c2cd9ff32b5d5be8cccffa12e6a32caf9a0cc07e4259b8b2c70ac2fa404d27n/a 
2021-12-05n/aelf 36bdf4d17e36fcbdc28f33cce8ca5e86ad4dfd63efc1cf48ff34c0d899e43f75n/a 
2021-12-05n/aelf 1f32d2ba464973f68e765365c460eda72a9eb041b50fdf89db4b580f14da383cn/aMirai