URLhaus Database

You are currently viewing the URLhaus database entry for http://sex.secure-cyber-security-rebirthltd.su/m68k which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:2803842
URL: http://sex.secure-cyber-security-rebirthltd.su/m68k
URL Status:Offline
Host: sex.secure-cyber-security-rebirthltd.su
Date added:2024-04-07 15:44:03 UTC
Last online:2024-05-01 11:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: abus3reports
Abuse complaint sent (?): Yes (2024-04-30 00:07:06 UTC to abuse{at}4media[dot]bg)
Takedown time:23 days, 20 hours, 53 minutes Bad (down since 2024-05-01 13:57:46 UTC)
Tags:botnetdomain elf mirai link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2024-04-30n/aelf 7692645f2ddfa32d9f97eaeef725d0dab69c176778deba1ec4ffe068004807d6Virustotal results 40.62% 
2024-04-14n/aelf 35bbda991ba575a9b4cefd3b99e9ad6708b1c56553d5a61c9c20f451fc2bdc2dn/a 
2024-04-14n/aelf 9e3112f2d3f07a98e0137fa15343fe0e5bc1413ba0e9e1e3ef7d5ed34b37bd9bn/a 
2024-04-08n/aelf b5088f2089f61263b06a91d6440b99fd80fc81c72d81045c4ea80aa43fd0adabVirustotal results 45.16% 
2024-04-07n/aelf 23e88fee2eb424ef2d006031f3dfee321462790bb71a1eb86a5267807d2f0084Virustotal results 34.92%Mirai
2024-04-07n/aelf 0443fad404186c0e84e5fc20f26ee6458a006072c3824958d189c025e36391e8n/a 
2024-04-07n/aelf 342b9a422d8d0856afc926e04c205deb3a9325bf6231d5a161709256a2764275Virustotal results 42.86%Mirai
2024-04-07n/aelf 63b3f8e7756cdd51c375e64f5256ebd1189686c1c613d4d289eb66a5063f4216n/a