URLhaus Database

You are currently viewing the URLhaus database entry for http://net-killer.ddns.net/most-arm7 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:2803823
URL: http://net-killer.ddns.net/most-arm7
URL Status:Offline
Host: net-killer.ddns.net
Date added:2024-04-07 15:38:09 UTC
Last online:2024-04-17 09:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Blocked
DNS4EU :Not blocked
Reporter: abus3reports
Abuse complaint sent (?): Yes (2024-04-11 11:28:05 UTC to hm-changed{at}vnnic[dot]vn)
Takedown time:17 days, 21 hours, 28 minutes Bad (down since 2024-04-25 13:07:35 UTC)
Tags:elf mirai link moobot

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2024-04-24n/aelf e1be531bda75bf23560694fba438550e089471d1421c4d4ca1d974c9d736179bn/aMirai
2024-04-20n/aelf 5a9e5c60427552b7ab133c3d7e79890802e9c0e5d9fbfe797175abd09ecf38f2n/a 
2024-04-17n/aelf 0c349c2bebf11a982fb10436405aeba7f488507f33d6e0f86d518853a2abd9f0n/a 
2024-04-17n/aelf 003a22457c409bc90ec5894a32bd3de6770daba680bbe7a4edae70e19053561bn/a 
2024-04-17n/aelf 50a4c70bdfc4fdcb6393c17345e041ff24a09aa39f0daf10f2e87cc2aa84cf21n/a 
2024-04-17n/aelf f1dde79731d4a9c3db3e8449e4713e6a8cdf1e04f7e99c44509e0c4b46da1947n/a 
2024-04-16n/aelf 7e5706f1211ee537bac888efd66f40f47b9f1832efb7d1f6dd661528ca6b8d43n/a 
2024-04-09n/aelf a2c442503341457279be014b8546fae337d5e368df1a253ca2a51491e77747a3Virustotal results 64.52% 
2024-04-07n/aelf 9fd73838b7fdb35d0a9d9d4e454b8dd0ac4a04f6e5dc9b5df123683f99c03e18Virustotal results 41.94%