URLhaus Database

You are currently viewing the URLhaus database entry for http://37.44.238.94/nshppc which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:3353764
URL: http://37.44.238.94/nshppc
URL Status:Offline
Host: 37.44.238.94
Date added:2024-12-17 11:50:08 UTC
Last online:2025-01-09 13:XX:XX UTC
Threat:Malware download Malware download
Reporter: BlinkzSec
Abuse complaint sent (?): Yes (2024-12-17 11:51:11 UTC to abuse{at}fiberway[dot]fr)
Takedown time:23 days, 1 hours, 15 minutes Bad (down since 2025-01-09 13:06:36 UTC)
Tags:elf mirai link ua-wget

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2025-01-05n/aelf 35974556223649608ae87fa63b81f3afeafcc07e4c57e27c24723c9492bcf58en/aMirai
2024-12-28n/aelf 85ddba35c01fa3ca028eb5573038ef8db0e2fdf6729baa1c80263cce7bb33afcVirustotal results 54.84%Mirai
2024-12-21n/aelf 32f9b3b1df6036110462c39c7882be3d532cd738c8d2769e4cd86c89001d4666n/aMirai
2024-12-21n/aelf 7a53f35442973457d715684227593dafa698fcc3b3d9d3e9197c4c74f808faf4n/aMirai
2024-12-20n/aelf d85d37018c8508056f8bee49161365d87be01b0d99c4fc6e45744365f9f6668bn/aMirai
2024-12-17n/aelf f8f4d8be3aa90cf5f77e00d13dbb4ef1fdd2ad010c79cd0f3e8a3a599ea9fad7Virustotal results 58.73%Mirai