URLhaus Database

You are currently viewing the URLhaus database entry for http://bn.networkbn.click/condi/bot.arm5 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:2787720
URL: http://bn.networkbn.click/condi/bot.arm5
URL Status:Offline
Host: bn.networkbn.click
Date added:2024-03-20 14:31:13 UTC
Last online:2024-04-12 11:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Status unknown
Cloudflare :Blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: abus3reports
Abuse complaint sent (?): Yes (2024-04-11 21:12:05 UTC to hm-changed{at}vnnic[dot]vn)
Takedown time:26 days, 23 hours, 12 minutes Bad (down since 2024-04-17 09:17:52 UTC)
Tags:elf mirai link moobot

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2024-04-16n/aelf 0ea769ea1a094cbdb2837177d3e447b927657d26f99b7e5e9cbf67b03a340a0bVirustotal results 45.16%Mirai
2024-03-26n/aelf a210c6dc1f7b876083e39dd7e541a64e81294a96a85b06ec0eedc6d59b7a87e4Virustotal results 44.26%Mirai
2024-03-26n/aelf ff99606c470c34c79a64590166fa299611dcd252e3e14ab4aff9aa7e39da4d61n/a 
2024-03-25n/aelf f33a02781d60ca36f4ee56579c6d33846c2549ad7556bca499c73302cee17514Virustotal results 63.49%Mirai
2024-03-22n/aelf cd380914d6e062e6f16fe3c70524b4ee9c840a03a875211da1af7fa2bcf0c0cbVirustotal results 42.86%Mirai
2024-03-21n/aelf 83f98024c2827c0f1a5052581e778724c9074b2731ce7e107f2fa3923d211389n/a