URLhaus Database

You are currently viewing the URLhaus database entry for http://37.44.238.94/arm7 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:3353742
URL: http://37.44.238.94/arm7
URL Status:Offline
Host: 37.44.238.94
Date added:2024-12-17 11:29:05 UTC
Last online:2025-01-09 08:XX:XX UTC
Threat:Malware download Malware download
Reporter: Gandylyan1
Abuse complaint sent (?): Yes (2024-12-17 11:30:23 UTC to abuse{at}fiberway[dot]fr)
Takedown time:22 days, 21 hours, 6 minutes Bad (down since 2025-01-09 08:36:27 UTC)
Tags:ddos elf HailBot mirai link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2025-01-05n/aelf cfe9865f49451d05b05edad113cdb97d25b268f5c982f6b283fb32d42adedc58Virustotal results 20.63%hailBot
2024-12-28n/aelf 30bc716860d5d70d9a37c291cb37497c7659e706ba2979afa6f86984de2114a6Virustotal results 55.56%Mirai
2024-12-21n/aelf cdfc72cfcd8ddf78be2b8895442ea5088928f7eb3864b2506e3d1dbb3e641c9dn/aMirai
2024-12-20n/aelf 77713789a43c59b4972ce807f64a3196df5715f640ebd0ec3819ed5109322889n/aMirai
2024-12-17n/aelf 1b0846e58fbb6a0e72d25edb81ec94961c0c7048a4e6f26876660f5a26675c77Virustotal results 58.33%Mirai