URLhaus Database

You are currently viewing the URLhaus database entry for http://185.157.247.12/ee/armv5l which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:3389310
URL: http://185.157.247.12/ee/armv5l
URL Status:Offline
Host: 185.157.247.12
Date added:2025-01-04 20:13:13 UTC
Last online:2025-01-30 16:XX:XX UTC
Threat:Malware download Malware download
Reporter: NDA0E
Abuse complaint sent (?): Yes (2025-01-04 20:14:11 UTC to noc{at}inovaperf[dot]fr)
Takedown time:25 days, 20 hours, 19 minutes Bad (down since 2025-01-30 16:33:39 UTC)
Tags:elf gafgyt link mirai link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2025-01-23n/aelf 19f2b12a00e9fba7b9ddf08b6381204625d2e1dd9981f15d763c46b0077b9cdbVirustotal results 20.63%Mirai
2025-01-22n/aelf 7cc1f6a3b144c2163c85e6d585caae86a0c7860d3ebb852129ea8f1a1a4061d1Virustotal results 20.63%Mirai
2025-01-18n/aelf bd46fe5bde996c0d25b40031c292aec3776997d729e0393666f146b73da45514Virustotal results 18.33%Mirai
2025-01-10n/aelf 8419ca7a15cfcf147d47986cc5a9ca3fc6bd5bcff1a9bbad455227bc214f1eefVirustotal results 20.63%Mirai
2025-01-05n/aelf 1d52652449b7055951f8ba4af56d5e2f8b326fbf9795f471f6dbe732f466d2c1Virustotal results 20.63%Mirai
2025-01-05n/aelf d721c05478570f8c5e7910f5ca0ca9bebd344d35eedfc4989100b5f13bb1432aVirustotal results 21.31%Mirai
2025-01-04n/aelf a277c112c2cd719999caadc40f533aec8bb4a4872841e1f739eca14aa9d2e6bdVirustotal results 55.56%Mirai