URLhaus Database

You are currently viewing the URLhaus database entry for http://185.244.36.221/arm6 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:2902473
URL: http://185.244.36.221/arm6
URL Status:Offline
Host: 185.244.36.221
Date added:2024-06-23 11:41:07 UTC
Last online:2024-06-28 20:XX:XX UTC
Threat:Malware download Malware download
Reporter: BlinkzSec
Abuse complaint sent (?): Yes (2024-06-23 11:42:05 UTC to abuse{at}spectraip[dot]nl)
Takedown time:5 days, 8 hours, 54 minutes Bad (down since 2024-06-28 20:36:49 UTC)
Tags:elf geofenced IND mirai link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2024-06-25n/aelf 11bc332880279bb5dc6f02700fabf300b7376ae92de6f6ce2ce38f5bafc5e7b7n/aMirai
2024-06-24n/aelf ba08e92d3db4f86a4e429c5822d321c39ff7e8b5f3e2801466774868dccf7881Virustotal results 13.64%Mirai
2024-06-23n/aelf aadc3806db53fddbd6dce29ad93e39815cec6df3ab93517a8880091c1d5d6828n/aMirai
2024-06-23n/aelf 374c575119049442f4af91e9b7f3552041f030d2fcd78d5a423c04dafe104e4dVirustotal results 40.91%Mirai
2024-06-23n/aelf 0ce76d05c434261c6f7adfb0b436e4a40e686a8cf0e1de75522dcfbe24ee16e2Virustotal results 40.91%Mirai