URLhaus Database

You are currently viewing the URLhaus database entry for http://141.98.11.129/mpsl which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:3346949
URL: http://141.98.11.129/mpsl
URL Status:Offline
Host: 141.98.11.129
Date added:2024-12-13 00:37:06 UTC
Last online:2024-12-16 20:XX:XX UTC
Threat:Malware download Malware download
Reporter: Gandylyan1
Abuse complaint sent (?): Yes (2024-12-13 00:38:11 UTC to admin{at}serveroffer[dot]lt)
Takedown time:3 days, 19 hours, 39 minutes Bad (down since 2024-12-16 20:17:48 UTC)
Tags:ddos elf gafgyt link mirai link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2024-12-16n/aelf 10084a0715871913a09e36582b30af85a459e0e99190307a42ed93c7e6475527n/aMirai
2024-12-16n/aelf a41c31acb4055d956216737dbcb4ec254469e2233299e713aad2b9fb8ed0ef3cn/a
2024-12-16n/aelf 5c1f72ac5d2c6eec1091439c0e2f07966a9d4083b5530de84e21fd8d15cee794n/aGafgyt
2024-12-15n/aelf 6250be2ac442d988dffab3dcd00a5c2459310b351ca25a9976b7fec4711d491fn/aMirai
2024-12-14n/aelf e4358a36b86d1a3d34167ae17f83d642eabab3a936ea2fecec04dc724ccd1c3bVirustotal results 26.98%Gafgyt
2024-12-13n/aelf b1e8713db49c15b272baa11e5569ecb4f22fd6064f5aa59ed236d0af58f159a1Virustotal results 51.56%Mirai