URLhaus Database

You are currently viewing the URLhaus database entry for http://www.secure-network-rebirthltd.ru/arc which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:3379715
URL: http://www.secure-network-rebirthltd.ru/arc
URL Status:Offline
Host: www.secure-network-rebirthltd.ru
Date added:2024-12-28 20:09:07 UTC
Last online:2025-02-11 06:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Blocked
Cloudflare :Blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: DaveLikesMalwre
Abuse complaint sent (?): Yes (2025-02-10 18:49:05 UTC to abuse{at}btcloud[dot]ro)
Takedown time:1 month, 14 days, 10 hours, 33 minutes Bad (down since 2025-02-11 06:44:11 UTC)
Tags:botnetdomain elf gafgyt link mirai link ua-wget

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2025-02-10n/aelf fc52514857d5f674472ca08bd26eb5f6506921441418f8434286f6de51d1f3e8n/aGafgyt
2025-02-01n/aelf e3a3d61079ca8cefddcf5904c11b01752b5617b95fa14bc1045b420d94e9fce2Virustotal results 8.20%Mirai
2025-01-03n/aelf 3577e6a74c88c22726bde4637855fa7cbb944fcda5e1b6b493ea4718cd6bf7ean/aMirai
2025-01-03n/aelf 4a93a9565f9ca0a8d6b4ca308ca2b66f5f161f7b9e09bf72272eb15b3429a6fdVirustotal results 23.81%Mirai
2024-12-28n/aelf c278ed3aed82626b0f94b4b2948a07b7b0b949a2b8bc73d7d9113bd1d3d89a5bn/aMirai
2024-12-28n/aelf f803e06cce936cca205979fc43ab1190f8d5b4efd9d786254c41fe1eab074e04Virustotal results 59.38%Mirai