URLhaus Database

You are currently viewing the URLhaus database entry for http://141.98.11.129/arm7 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:3346951
URL: http://141.98.11.129/arm7
URL Status:Offline
Host: 141.98.11.129
Date added:2024-12-13 00:37:06 UTC
Last online:2024-12-16 20:XX:XX UTC
Threat:Malware download Malware download
Reporter: Gandylyan1
Abuse complaint sent (?): Yes (2024-12-13 00:38:11 UTC to admin{at}serveroffer[dot]lt)
Takedown time:3 days, 19 hours, 29 minutes Bad (down since 2024-12-16 20:08:00 UTC)
Tags:ddos elf gafgyt link mirai link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2024-12-16n/aelf 55041ad0affc5402dc6a159cd69ee06b116cb7783e1ce584e17b8ed2b31b88f6Virustotal results 49.21%Mirai
2024-12-16n/aelf 01a94c49727fcf72a256b21f0c40694d89e0665ac448984a835f91f62decbe58n/aMirai
2024-12-15n/aelf 44cc7a4e50c30c53b1152e042c5d8b1b28efedae967a4ac20ad308d71fb64b46Virustotal results 30.65%Mirai
2024-12-15n/aelf 3a1855bb750d12e731792daf173b5af76f525347fd52f250f59df920843f40a8n/aMirai
2024-12-14n/aelf 7dff99bfd77e478c46ad32ef9082fa235a548d7abe1d34186f178b95123a592aVirustotal results 28.57%Gafgyt
2024-12-13n/aelf 1b0846e58fbb6a0e72d25edb81ec94961c0c7048a4e6f26876660f5a26675c77Virustotal results 55.56%Mirai