URLhaus Database

You are currently viewing the URLhaus database entry for http://6sz.ru/tt/mips which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:3391496
URL: http://6sz.ru/tt/mips
URL Status:Offline
Host: 6sz.ru
Date added:2025-01-06 12:55:16 UTC
Last online:2025-02-21 01:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Malware domain
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: NDA0E
Abuse complaint sent (?): Yes (2025-02-20 23:49:05 UTC to abuse{at}proton66[dot]ru)
Takedown time:1 month, 26 days, 3 hours, 56 minutes Bad (down since 2025-03-03 16:52:46 UTC)
Tags:botnetdomain elf gafgyt link mirai link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2025-02-17n/aelf d1a427ef9e41471f5fd77327509ade82a1baed34b58a01dd41ed01d815a9d7d6Virustotal results 19.05%Mirai
2025-01-23n/aelf cb1c2397a2408979b855b6269b0e545e137d54096ed46ff0ca6b0d91e24bbf52Virustotal results 53.97%Mirai
2025-01-06n/aelf d43fbf7577e3c3cddd61bf545d63fa164f9337fc239b4c6f3c11010158febb4dVirustotal results 57.14%Mirai