URLhaus Database

You are currently viewing the URLhaus database entry for http://botnet.nguyennghi.info/sh4 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:2557039
URL: http://botnet.nguyennghi.info/sh4
URL Status:Offline
Host: botnet.nguyennghi.info
Date added:2023-03-03 20:00:33 UTC
Last online:2023-09-13 11:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: tolisec
Abuse complaint sent (?): Yes (2023-09-02 10:06:04 UTC to hm-changed{at}vnnic[dot]vn)
Takedown time:7 months, 3 days, 23 hours, 39 minutes Bad (down since 2023-10-03 19:40:53 UTC)
Tags:elf mirai link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2023-09-02n/aelf 3a13dec90b587725a835873a0adf585a51062e7aa2f4c84564ee9d82d3542fd5n/a 
2023-08-16n/aelf 4b577202bf73159fdaff128e9326550b472e2233d10a78ec1b8aa38ed4c91b67n/a 
2023-07-26n/aelf 845b8d2eb5a90ee6606611622e745e620ca97e101a27cbf3b421de2609adac93n/aMirai
2023-07-07n/aelf 3c5a5ede1355893a1387bef8b2e0d82d391c76da7c2fc7017bf6f94dff0f6544n/a 
2023-07-02n/aelf 39e78907d986384b284bfcacac07ef5d7b4cb95e193f3717ac59b55c6a4320f2n/a 
2023-06-09n/aelf f3340acf8218511e9cbb672c9e82d20680f1fe8f19e5fcb8e79562d7f7dde58bn/a 
2023-06-04n/aelf 2e172c95609a7b006e01335828c98c20ea90ab643d385c9ff6417c7b3d875829n/a 
2023-05-15n/aelf 680364c4f27d3d4f1cbb083ab756d20d143b4beebd5fae9745692a9ebc139e6an/a 
2023-05-09n/aelf f8d80aa3061ce9181e6e76ce16d8ef5c4090751415ed9a1ede8cd6388b0182afn/a 
2023-04-27n/aelf 282baf7ca59539347f058990877d78da6984f3f1592445b7d080393d3f09e4f8Virustotal results 62.30% 
2023-04-22n/aelf 7387bf9ec73a04d6e30bc2f8aa99efa445a7444978f0aeec538f442440cbf5b8n/a 
2023-04-12n/aelf d3a13cb255f6894f4c1c6d2379cfa9640c7a0575bf484cd8949237de55a20af9n/a 
2023-03-19n/aelf 88941f21c17bad363feeb37e47c46c3ffb90e4b6dc40c611d94ef6b2d0b7cd3aVirustotal results 59.02%Mirai
2023-03-13n/aelf eaf33240b69228544e86729b9dd6762efaf1bcf80c53618a0162099d7bf68de8Virustotal results 63.93%Mirai
2023-03-03n/aelf ac9e9549edea382c0d1f204375b52aa89790a7f8aaa236ceb4381189e90ebfabn/a