URLhaus Database

You are currently viewing the URLhaus database entry for http://178.215.238.13/bin.armv4l which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:3239418
URL: http://178.215.238.13/bin.armv4l
URL Status:Offline
Host: 178.215.238.13
Date added:2024-10-17 11:51:14 UTC
Last online:2024-10-30 00:XX:XX UTC
Threat:Malware download Malware download
Reporter: ClearlyNotB
Abuse complaint sent (?): Yes (2024-10-17 11:52:17 UTC to dc{at}perfectonetworks[dot]com)
Takedown time:12 days, 12 hours, 47 minutes Bad (down since 2024-10-30 00:39:29 UTC)
Tags:elf mirai link ua-wget

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2024-10-22n/aelf c3ec44be3405fba96df3ff67c6e47a5e195c8eb87d2a2767e2460e215a3df67an/aMirai
2024-10-22n/aelf ff972c84acb2d2167c6b3426c317b394327c473de789d7170846a1394e9a91cfn/aMirai
2024-10-22n/aelf ad27329b59a57c1c6a1750017ab5838b70c6d31e0f4397341b9e7fa3d44ccac1n/aMirai
2024-10-21n/aelf f007b701c3058871757c6823609265a4eafa2414fffb3231c9247abce87e3c56n/aMirai
2024-10-17n/aelf 6bf57518943e9f27c12b77583a9bb0faf5a16c012a43a28be6816f3f0c547580Virustotal results 50.77%Mirai