URLhaus Database

You are currently viewing the URLhaus database entry for http://185.244.36.221/x86_64 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:2893662
URL: http://185.244.36.221/x86_64
URL Status:Offline
Host: 185.244.36.221
Date added:2024-06-17 10:24:05 UTC
Last online:2024-06-28 20:XX:XX UTC
Threat:Malware download Malware download
Reporter: Gandylyan1
Abuse complaint sent (?): Yes (2024-06-17 10:25:10 UTC to abuse{at}spectraip[dot]nl)
Takedown time:11 days, 10 hours, 13 minutes Bad (down since 2024-06-28 20:38:34 UTC)
Tags:ddos elf mirai link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2024-06-25n/aelf 6efb7600711d721c31827656b44f8061048e5a51b0be6edb51c4473b1d74f030n/a 
2024-06-24n/aelf c7276bf5ae9d6983ae7fb1f856c22c13a809fceed52adce5a7539e1c9fd4eea4n/a 
2024-06-23n/aelf 1287ebdb7b31dec46e82f49269d35795fe11b045042b776c0117cd607062667dn/a 
2024-06-18n/aelf 0f02b075066b387286afe10165d216594a1d17ab114dd2f692146f2e6726b255n/a 
2024-06-17n/aelf 8ed5281c024dc7cf99273c32faa92e358392272a01898958399e324e666c4fd4Virustotal results 54.69%Mirai
2024-06-17n/aelf 8351842d2acc77d8c5d0d19e0f8ad076c4a6ad800b6120a016abf6d4a776eb63Virustotal results 45.45%