URLhaus Database

You are currently viewing the URLhaus database entry for http://141.98.11.129/arm6 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:3346948
URL: http://141.98.11.129/arm6
URL Status:Offline
Host: 141.98.11.129
Date added:2024-12-13 00:37:06 UTC
Last online:2024-12-16 22:XX:XX UTC
Threat:Malware download Malware download
Reporter: Gandylyan1
Abuse complaint sent (?): Yes (2024-12-13 00:38:11 UTC to admin{at}serveroffer[dot]lt)
Takedown time:3 days, 21 hours, 46 minutes Bad (down since 2024-12-16 22:24:38 UTC)
Tags:ddos elf gafgyt link mirai link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2024-12-16n/aelf 0ebb7dfbeb9a5b177cb170318b4a05f72eb4b89830c9fd2b96fdf06cf2ad9f74n/aMirai
2024-12-16n/aelf efb44a7569c0594fe8250dbff5b4f6457ff450259390e9d71140c38d62f7655fn/aMirai
2024-12-15n/aelf cb79ac091b817342d2c9f4061588360d7be2dd0771910054e7d1b45aca940aa7n/aGafgyt
2024-12-15n/aelf 9652d0b5fa71d4ad471dbd8bc4421e47a3a88ddf4d55173e6a3cccdcb3c2524en/aMirai
2024-12-14n/aelf 16004372820eae214bf98ce210a666ba26eb6553891d20c2eb901bf2fbe60747Virustotal results 42.86%Gafgyt
2024-12-13n/aelf 7f089801a37f1d9a83a5103c8f9b1c6fc00f9ce699cb812cc23704aea8d46c8cVirustotal results 53.12%Mirai