URLhaus Database

You are currently viewing the URLhaus database entry for http://185.224.128.34/sh4 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:2796273
URL: http://185.224.128.34/sh4
URL Status:Offline
Host: 185.224.128.34
Date added:2024-03-30 07:21:09 UTC
Last online:2024-04-10 11:XX:XX UTC
Threat:Malware download Malware download
Reporter: redrabytes
Abuse complaint sent (?): Yes (2024-03-30 07:22:11 UTC to abuse{at}as49870[dot]net)
Takedown time:11 days, 4 hours, 1 minutes Bad (down since 2024-04-10 11:23:28 UTC)
Tags:elf mirai link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2024-04-10n/aelf c71e6300a604f615efea4e5cf4f5a68c3dd4949d85ae0b5ae9ce6024bf643bd8n/a 
2024-04-10n/aelf 24e8aca11bbfe134b24429222fbd5947de31fe8c0d68daebc40f12d911b1238an/a 
2024-04-10n/aelf e9b29f754b0872afcf48af47a5f6e92d0c33de745218a0652a9f275cca36cbcan/a 
2024-04-10n/aelf d9b338f9e3f11cc897d9e2ed539fc0ca4081e3c5f84ab3aed34a73c4999d653an/a 
2024-03-30n/aelf 7ef190f05fe9be5d7f38bdb556fffdb7d9b5633ddf60cc43b98c09887a292c49n/aMirai
2024-03-30n/aelf 0aef994cf588f9226768caa94c4aa8534d705d3d294f94170d67cc4851a53219n/a 
2024-03-30n/aelf d82501cde4662df77703f3bf9325783c9dbf21487878376344649c124ed974f5Virustotal results 44.26%Mirai