URLhaus Database

You are currently viewing the URLhaus database entry for http://185.244.36.200/arm5 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:2880960
URL: http://185.244.36.200/arm5
URL Status:Offline
Host: 185.244.36.200
Date added:2024-06-09 14:10:14 UTC
Last online:2024-06-23 21:XX:XX UTC
Threat:Malware download Malware download
Reporter: LemonHaze420__
Abuse complaint sent (?): Yes (2024-06-09 14:11:08 UTC to abuse{at}spectraip[dot]nl)
Takedown time:14 days, 7 hours, 17 minutes Bad (down since 2024-06-23 21:28:09 UTC)
Tags:elf mirai link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2024-06-23n/aelf ff1b1a9abf6af722dd8543b65cfb2f31fa2ed9fe798605fe0cbd958b85acc8f3n/aMirai
2024-06-23n/aelf 7b7c6c42b71fcf1d6e3ba81ef4dfb9c22c907f75a6a76d9d81af7d649fa7e5f0n/aMirai
2024-06-18n/aelf 640ad2203e6347c4dac0348c1d4fec11f96322e634938404921a610e4871d345Virustotal results 15.15% 
2024-06-13n/aelf 6dc23908a245b2673d6c4994ebc3057c64898ed92c720ff9aa648e89161c2f3en/a 
2024-06-10n/aelf 6845e34952a416113dbc6fbffae8245d708c9bab6dc801c16f34a84744a3b7ccn/aMirai
2024-06-09n/aelf e6ed59f045ea2fd8f0b46156495824a4401410952f41f9445685e7497ec24a1cn/aMirai