URLhaus Database

You are currently viewing the URLhaus database entry for http://37.44.238.94/ppc which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:3353767
URL: http://37.44.238.94/ppc
URL Status:Offline
Host: 37.44.238.94
Date added:2024-12-17 11:52:05 UTC
Last online:2025-01-09 06:XX:XX UTC
Threat:Malware download Malware download
Reporter: BlinkzSec
Abuse complaint sent (?): Yes (2024-12-17 11:53:10 UTC to abuse{at}fiberway[dot]fr)
Takedown time:22 days, 18 hours, 49 minutes Bad (down since 2025-01-09 06:42:44 UTC)
Tags:elf HailBot mirai link ua-wget

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2025-01-05n/aelf 42145dae18871810e54da2fd98abde7100a5d210c610f7bd182edb76cf70a27an/ahailBot
2024-12-28n/aelf ccc9ba4ed9d5cbac3ac0634f795e8aec11a14cf2acbe469af19b0e0569cda3d5Virustotal results 52.38%Mirai
2024-12-21n/aelf bfcc6e8dbdc79e09906d7475931bae7dc3af2e0dadb918a3cb6c071fd0f89306n/aMirai
2024-12-21n/aelf cdbfc2d15e914a3bfb81d1f737058b3209a6ace7b6ff3d8ffaeb6e7a54318ce1n/aMirai
2024-12-20n/aelf 0a57e369c212778bb17ecdeb20784f82a78d3e243075ffb31aea4080925751e8n/aMirai
2024-12-17n/aelf 4e114c1111ecdaf0a7622a347c025cd3f9584be170b129113d836a2a5a7c169fVirustotal results 56.67%Mirai