URLhaus Database

You are currently viewing the URLhaus database entry for http://107.189.12.195//ARM which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:2013981
URL: http://107.189.12.195//ARM
URL Status:Offline
Host: 107.189.12.195
Date added:2022-01-29 14:13:04 UTC
Last online:2022-02-09 07:XX:XX UTC
Threat:Malware download Malware download
Reporter: Gandylyan1
Abuse complaint sent (?): Yes (2022-01-29 14:15:14 UTC to admin{at}frantech[dot]ca,fdias{at}frantech[dot]ca)
Takedown time:10 days, 16 hours, 53 minutes Bad (down since 2022-02-09 07:08:37 UTC)
Tags:ddos ddos.tf trojan

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2022-02-09n/aelf c9f548d0c1bfd41e86a3a2a691479eb2220c630ad57d9969e572b45ee9cf0a59n/a 
2022-02-05n/aelf d2c3ec2fddf866166736072aa7d9ea9dffb556de024b2e1aeebdd72eb946555dVirustotal results 59.68%
2022-02-05n/aelf 91dca1c8444cbb0a27a12130c7bfd2d4b72e9676c1f00539ec2b2dce6330f091n/a 
2022-02-04n/aelf f3451356b893109e502db28af41b1d8720f0d0d5ee547e46484bb2302428b33fn/a 
2022-01-29n/aelf 025cf3a902bf55911a0234599a73e0a95ca635cfb5c2b30475933064eed67e2fVirustotal results 56.45%DDoS.TF