URLhaus Database

You are currently viewing the URLhaus database entry for http://212.70.149.164/arm4 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:2910901
URL: http://212.70.149.164/arm4
URL Status:Offline
Host: 212.70.149.164
Date added:2024-06-28 13:26:09 UTC
Last online:2024-07-17 22:XX:XX UTC
Threat:Malware download Malware download
Reporter: abus3reports
Abuse complaint sent (?): Yes (2024-06-28 13:27:07 UTC to abuse{at}4media[dot]bg)
Takedown time:19 days, 8 hours, 53 minutes Bad (down since 2024-07-17 22:20:49 UTC)
Tags:elf mirai link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2024-07-06n/aelf f3d8bc4b5c3dc2b7bd4df079aad66f146c73b34dbfca3412be17016aeeea547eVirustotal results 36.36%Mirai
2024-07-02n/aelf 7fbc24fea9f2259997f051bfdd08ea74867d19c4fe2a112818624f1a31cf52c5Virustotal results 51.52%Mirai
2024-06-28n/aelf 59fcbf6fb74febaf325893302593e78b5ca1994eecde0de77b6db4e37b4bc1f1n/aMirai