URLhaus Database

You are currently viewing the URLhaus database entry for http://2.56.59.37/bins/Hilix.arm5 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:2132208
URL: http://2.56.59.37/bins/Hilix.arm5
URL Status:Offline
Host: 2.56.59.37
Date added:2022-04-05 03:13:05 UTC
Last online:2022-04-15 11:XX:XX UTC
Threat:Malware download Malware download
Reporter: zbetcheckin
Abuse complaint sent (?): Yes (2022-04-05 03:13:10 UTC to abuse{at}serverion[dot]com)
Takedown time:10 days, 8 hours, 12 minutes Bad (down since 2022-04-15 11:25:55 UTC)
Tags:32 arm elf mirai link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2022-04-14n/aelf 5566b4adcb418f5fcafe9517bf75b374dc8f326433fe38e9913fdd2cb0349c1fn/a 
2022-04-13n/aelf 50b5c99fca724fbadf4db6fbb76dc57f460fbdbd4c69c19f94a1b0bfdf5efec2Virustotal results 19.67% 
2022-04-11n/aelf 6d5ce32c25a50e3f6ecd03bbf50e62ffb63b28d79c7a65c8ea7f0105c927f263n/a 
2022-04-11n/aelf 4c0e67c21d5a1fe5c922441e9044bb32d3cdfb36e10af0311de707a41167df4dn/a 
2022-04-10n/aelf db377e1864bb59d9bdca3109d1fbd0fc48320cd9e287efb8d30ae96e6950b48cn/a 
2022-04-09n/aelf 82e6f6d6c20fcd631b1850608bcc26221306bdce1501f29f2282fccc79a58bb4n/a 
2022-04-09n/aelf 93a3912e6e9fdc606639655344bc3c12dce1cc754f07e2a1481a31e48e723a6en/a 
2022-04-05n/aelf 365ec2315f41cf8bca7730ce83abe629a779a4762349a79b013324677cbd1cdan/a 
2022-04-05n/aelf 1b130b905c9efcf53ff3f93d0cd972aa2b9a8a8792d763fd20d86a22e3aa3dbfn/a 
2022-04-05n/aelf 57313eded0c581c993ea3198f4106c8f98bda3abad350aa13dbfd4808ed43919Virustotal results 50.82%Mirai