URLhaus Database

You are currently viewing the URLhaus database entry for http://45.128.232.240/arm4 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:2912678
URL: http://45.128.232.240/arm4
URL Status:Offline
Host: 45.128.232.240
Date added:2024-06-29 09:21:06 UTC
Last online:2024-07-09 18:XX:XX UTC
Threat:Malware download Malware download
Reporter: tolisec
Abuse complaint sent (?): Yes (2024-06-29 09:22:06 UTC to abuse{at}pfcloud[dot]io)
Takedown time:10 days, 8 hours, 48 minutes Bad (down since 2024-07-09 18:10:29 UTC)
Tags:elf mirai link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2024-07-07n/aelf 4d1b94686bb702b5d45cca5d84071c2cedfbc0478afe758bf2b9ba76fed316d3Virustotal results 43.94%Mirai
2024-07-06n/aelf f3d8bc4b5c3dc2b7bd4df079aad66f146c73b34dbfca3412be17016aeeea547en/aMirai
2024-07-06n/aelf bbdc05c389246e6c60de67af549577ce2bb3cdd75f955346b8152d6da9211401n/a 
2024-07-06n/aelf c5bac1789dbc02018909f8d0eeb6daec2a0cb48b550b0dcf1471dc297178c586n/aMirai
2024-06-29n/aelf 7fbc24fea9f2259997f051bfdd08ea74867d19c4fe2a112818624f1a31cf52c5n/aMirai
2024-06-29n/aelf 7169b85fb1d27e66cf9578e73a0fe68597c72d982c10f6a74e192192bd5ec030Virustotal results 50.00%Mirai