URLhaus Database

You are currently viewing the URLhaus database entry for http://185.204.217.174/lx//x which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:1946646
URL: http://185.204.217.174/lx//x
URL Status:Offline
Host: 185.204.217.174
Date added:2022-01-03 18:12:09 UTC
Last online:2022-01-09 04:XX:XX UTC
Threat:Malware download Malware download
Reporter: Gandylyan1
Abuse complaint sent (?): Yes (2022-01-07 13:21:37 UTC to abuse{at}cyberfolks[dot]pl)
Takedown time:6 days, 23 hours, 24 minutes Bad (down since 2022-01-10 17:40:40 UTC)
Tags:DDoS Bot elf mirai link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2022-01-10n/aelf 45e31c499f275fccd29e72a56888316c1e6a6ac9dbd6284deaed38ed5dba46b6n/aMirai
2022-01-09n/aelf 42c873af1bd4938eb6479490aa199ea95656797baa2e31e0b7d67b2e95982b09n/a 
2022-01-04n/aelf 87c2c1600c426ec94944be589a72887685b3a4ba72b7032719357af3293f2a3fn/a 
2022-01-04n/aelf d60ecb5381a576893a18071fb100e5412997643cdbdfccdf7e4ed0b4900408dan/a 
2022-01-04n/aelf df1847cd79c144803a9147cd2b7fc654ec7a03d1d9177005ba44d33b53aeb546n/a 
2022-01-03n/aelf 0d16ea8877a582d3df7fd20002ed24758c15a053c84b356187fa802b2d27ae65Virustotal results 33.33%Mirai