URLhaus Database

You are currently viewing the URLhaus database entry for http://bonet.networkbn.com/arm7 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:2765490
URL: http://bonet.networkbn.com/arm7
URL Status:Offline
Host: bonet.networkbn.com
Date added:2024-02-20 13:06:13 UTC
Last online:2024-02-29 04:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: abus3reports
Abuse complaint sent (?): Yes (2024-02-29 04:15:09 UTC to admin{at}serveroffer[dot]lt)
Takedown time:24 days, 0 hours, 52 minutes Bad (down since 2024-03-15 13:59:24 UTC)
Tags:elf mirai link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2024-03-13n/aelf 320f63a6f5ff92249756f67130e925f7e22bbb9b8419691fd1906c95eaeaa3b8n/aMirai
2024-03-03n/aelf c67540bb7edcb7f8b454d6dcc313194fda2be3fa300fcfe9c9d55c63dd65660bn/a 
2024-03-01n/aelf 9336b6d1b5a5c4d23960660f7941d6ba04e719776eb031be8667a6de70c5def5Virustotal results 41.94% 
2024-03-01n/aelf 0fa474f98a9acd5bd6c8b262bb5d698ab84f0f42cad0c2e28106b38f5b59e1b1n/a 
2024-02-27n/aelf 9c0dc9a9a5a71a5c47f50a12c26e8b964af6a14b0230dbef14d2b7aba58cd197n/a 
2024-02-27n/aelf 76d60caa92ba7c8eeb3744774bcda643681582a0dd4c40aaaf7834ce909ada5dn/a 
2024-02-21n/aelf 51ce997fc8c2f90ae0e6a16f48db708bc6f387051225d9ef2b47b50099ad702cn/a 
2024-02-20n/aelf 0f26d64aca2d3685f9269efaa2408393441efaa32b0dab4a9f957681de4a94b7Virustotal results 67.74% 
2024-02-20n/aelf a7bce45f04ae07d7dd4bd9709aad9152d4796afa348235e90828a7852bfb34d2Virustotal results 46.77%Mirai