URLhaus Database

You are currently viewing the URLhaus database entry for http://185.244.36.221/arm5 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:2895548
URL: http://185.244.36.221/arm5
URL Status:Offline
Host: 185.244.36.221
Date added:2024-06-18 13:44:05 UTC
Last online:2024-06-28 20:XX:XX UTC
Threat:Malware download Malware download
Reporter: Gandylyan1
Abuse complaint sent (?): Yes (2024-06-18 13:45:12 UTC to abuse{at}spectraip[dot]nl)
Takedown time:10 days, 6 hours, 26 minutes Bad (down since 2024-06-28 20:11:36 UTC)
Tags:ddos elf mirai link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2024-06-25n/aelf 5f3cb8b7bd048088fd3f14267e2130244ad0894066a6684c1fdd800a968b2506n/aMirai
2024-06-24n/aelf 9e7d0851799fd4b9ea9ccef22dc94ca4dce1e02c3216bd1822a28eb2325de971n/aMirai
2024-06-23n/aelf dea1505883a02beee9bfaaa1344497de3dd02ea736013a4ee30afe2b634b87e7n/aMirai
2024-06-23n/aelf ff1b1a9abf6af722dd8543b65cfb2f31fa2ed9fe798605fe0cbd958b85acc8f3Virustotal results 36.51%Mirai
2024-06-23n/aelf 7b7c6c42b71fcf1d6e3ba81ef4dfb9c22c907f75a6a76d9d81af7d649fa7e5f0n/aMirai
2024-06-18n/aelf 640ad2203e6347c4dac0348c1d4fec11f96322e634938404921a610e4871d345n/a 
2024-06-18n/aelf 6845e34952a416113dbc6fbffae8245d708c9bab6dc801c16f34a84744a3b7ccVirustotal results 53.03%Mirai