URLhaus Database

You are currently viewing the URLhaus database entry for http://selfrep.carteldesinaloa.ru/389242390482/nuklear.arm6 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:3277461
URL: http://selfrep.carteldesinaloa.ru/389242390482/nuklear.arm6
URL Status:Offline
Host: selfrep.carteldesinaloa.ru
Date added:2024-11-05 19:16:07 UTC
Last online:2024-11-14 09:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Blocked
DNS4EU :Not blocked
Reporter: BlinkzSec
Abuse complaint sent (?): Yes (2024-11-05 19:17:08 UTC to abuse{at}virtualine[dot]org)
Takedown time:8 days, 13 hours, 59 minutes Bad (down since 2024-11-14 09:16:16 UTC)
Tags:elf mirai link ua-wget

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2024-11-07n/aelf 45a5513c3f9e61ef9f25fc5424bfd8a3a27bc62c00e35988234ef1df87d8ebceVirustotal results 60.32%Mirai
2024-11-07n/aelf 536bd0994808e30a35ad9f0849ae9acce14f04377cbaaeb44ac0fbc6277fb09en/aMirai
2024-11-06n/aelf feb169fe5d994daa39d3924a772910035539a7c61096ea873e793428c515d627Virustotal results 60.94%Mirai
2024-11-06n/aelf 784abb3b0ee6da36ed9118f7c0926a3589b4df466e34fd16abd2e463e1565c11Virustotal results 61.90%Mirai
2024-11-05n/aelf df0558e99e9bac6835ed459267967612eb868c44e3d4869d1146073a0bcfce73n/aMirai
2024-11-05n/aelf bbf6e2e6c035f46121463a2d226dc379b90118ec483703a75c710737e0391fc1Virustotal results 63.33%Mirai