URLhaus Database

You are currently viewing the URLhaus database entry for http://103.172.79.74/ppc which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:2764833
URL: http://103.172.79.74/ppc
URL Status:Offline
Host: 103.172.79.74
Date added:2024-02-19 21:37:13 UTC
Last online:2024-03-17 09:XX:XX UTC
Threat:Malware download Malware download
Reporter: tolisec
Abuse complaint sent (?): Yes (2024-02-19 21:38:05 UTC to hm-changed{at}vnnic[dot]vn)
Takedown time:26 days, 11 hours, 56 minutes Bad (down since 2024-03-17 09:34:58 UTC)
Tags:elf mirai link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2024-03-16n/aelf f6498d6fd1514e11d1610408c19cd0e8d8093ef1afdd107916da6190bd2d1318n/aMirai
2024-03-13n/aelf abf9e8fedd50f5c8022d360f9f3cb61b34840cfa0aa0365bd4899bf54c621599n/a 
2024-03-02n/aelf 5bd998a9dd490a6add55883642819c59e9a0057369e93fcfc66ef00f8dffb68fVirustotal results 40.32% 
2024-03-01n/aelf edd682822e6280b7d6c1e20846d8ee9aba196fafd5f1106ae098677304842a0eVirustotal results 40.68% 
2024-02-27n/aelf 56b946c6e95c10fbcc85c986b5f797b79532a0d8e69edede9d019aa94b6bac74n/a 
2024-02-27n/aelf bfdc0b327d989f78516f22b25271fd751bb0607153f8019e156c17c399b06873n/a 
2024-02-21n/aelf bb329a4a3df01e9a1a6002d372ac75e23e9d7652afe152a1517ab337db93cdeaVirustotal results 62.30% 
2024-02-20n/aelf 5db49b05b0d5c6ff60cf17e023b36c1640901577b97923b3b0a467b6da88b0ffVirustotal results 63.93% 
2024-02-20n/aelf ed791a5f074eb5178649850df541c21bd8482f32fdbb887ac1c20e3990ee0361n/aMirai
2024-02-19n/aelf 462b986e1c6a1f63c871a5697b4c6071b70b25c83f63006e1ea4dbe28c2e59ban/aMirai