URLhaus Database

You are currently viewing the URLhaus database entry for http://87.120.125.72/gmpsl which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:3401745
URL: http://87.120.125.72/gmpsl
URL Status:Offline
Host: 87.120.125.72
Date added:2025-01-15 14:47:09 UTC
Last online:2025-02-07 12:XX:XX UTC
Threat:Malware download Malware download
Reporter: ClearlyNotB
Abuse complaint sent (?): Yes (2025-01-15 14:48:10 UTC to abuse{at}ekabi[dot]net)
Takedown time:22 days, 21 hours, 22 minutes Bad (down since 2025-02-07 12:10:50 UTC)
Tags:elf mirai link ua-wget

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2025-02-03n/aelf 9284306e909ddd46ef732ac1a3b696b9258c240658420e7f5c170ce5e5482ff4n/a
2025-01-27n/aelf 81840a44fea6018b90669004f1b6487688c8c9115cd601471b0342c25f4f7b54n/a
2025-01-25n/aelf 5df8f6c63c9086b3881f0e3fb11b4201604379884adf2bd4f7da8671b75db6aan/aMirai
2025-01-23n/aelf 02b2cb317f150a5ebb35cbfdc31c5f97a1da5cd5e84c3a5ed876685201ce81fdn/aMirai
2025-01-19n/aelf f9190b316daf4173e5c821044a42edddda41b0cb6624696b7958cc60b0fb2cf4Virustotal results 17.74%Mirai
2025-01-15n/aelf 9c006b9ca4b0ba30698ab31b7b40c29c31ef835a63c77be110b3c2b42fa1a5dfVirustotal results 60.32%Mirai