URLhaus Database

You are currently viewing the URLhaus database entry for http://byte-main-cnc.n-e.kr/dlr/dlr.spc which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:3286325
URL: http://byte-main-cnc.n-e.kr/dlr/dlr.spc
URL Status:Offline
Host: byte-main-cnc.n-e.kr
Date added:2024-11-11 11:28:06 UTC
Last online:2024-12-02 21:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: BlinkzSec
Abuse complaint sent (?): Yes (2024-11-27 10:05:12 UTC to abusepoc{at}afrinic[dot]net)
Takedown time:21 days, 9 hours, 37 minutes Bad (down since 2024-12-02 21:06:33 UTC)
Tags:elf mirai link ua-wget

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2024-11-27n/aelf f6b0ebdd8f9683e1d25026d76a03d6b972b21fb5b8975be9b9bd63934fabc4d2n/aMirai
2024-11-26n/aelf de04c883deb32f640abe918742b2370339bba308fab3ffd2292f046d32f8cab3n/aMirai
2024-11-21n/aelf d9ef69e8d7ef83c14bce887cce77b43ae831ccc05aaddbf60f2a388a31652fc5n/aMirai
2024-11-14n/aelf 124b3d90bd3a5b90302a0dc5d861173f7163aa856d8eaa3f839fb841a808e13bn/aMirai
2024-11-13n/aelf 72ef793d6e36d187c2a0e1094e8cfb8d3b23c1c4df3633f154592578e1feea12n/aMirai
2024-11-11n/aelf 40aae0e85aa0a2205143b1000f172c2695cbfd44dcbbc598afff994d28bc955eVirustotal results 55.00%Mirai