URLhaus Database

You are currently viewing the URLhaus database entry for http://141.98.11.129/gay/ppc which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:3347285
URL: http://141.98.11.129/gay/ppc
URL Status:Offline
Host: 141.98.11.129
Date added:2024-12-13 06:29:05 UTC
Last online:2024-12-16 20:XX:XX UTC
Threat:Malware download Malware download
Reporter: malwarereport
Abuse complaint sent (?): Yes (2024-12-13 06:30:29 UTC to admin{at}serveroffer[dot]lt)
Takedown time:3 days, 14 hours, 18 minutes Bad (down since 2024-12-16 20:49:16 UTC)
Tags:gafgyt link mirai link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2024-12-16n/aelf f46e00a03c166d2b1c8bc16b1045817e13cb3e632b9806914631069cbf49221an/aMirai
2024-12-16n/aelf f5f360a739bb3d4d9e4a089bd37d5bb62ae3e6e14320069336da0c232eeb224cn/aGafgyt
2024-12-15n/aelf 490b7e921fe6ab59719c8154b14a47c5d27ba8513394af4b186bd587dbf72a5dn/aMirai
2024-12-15n/aelf a687a08eddc3673a63a0e2ce399b90ab30a59f742f00c26396e807b1014d855fn/aGafgyt
2024-12-13n/aelf 3f60481e7ddd23e3a20cff5930710474591bf3b68eb0d6d35fc96ad698156496n/aGafgyt