URLhaus Database

You are currently viewing the URLhaus database entry for http://87.120.125.72/garm5 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:3401752
URL: http://87.120.125.72/garm5
URL Status:Offline
Host: 87.120.125.72
Date added:2025-01-15 14:47:09 UTC
Last online:2025-02-07 12:XX:XX UTC
Threat:Malware download Malware download
Reporter: ClearlyNotB
Abuse complaint sent (?): Yes (2025-01-15 14:48:13 UTC to abuse{at}ekabi[dot]net)
Takedown time:22 days, 21 hours, 23 minutes Bad (down since 2025-02-07 12:11:40 UTC)
Tags:elf mirai link ua-wget

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2025-01-26n/aelf ada5ea0d31de9416c0f537016f86a31cb1f43751cb92747b0bb9878b9ed93ad8n/aMirai
2025-01-25n/aelf 2ae42c1a769b2d52c7aec49f73e5dea20734af77ba61ce84277980ee53b9165fn/aMirai
2025-01-23n/aelf d5408b46108bfed7412847c6db9ae5b90e51d28f524033e7ef3fcc9e8d926418n/aMirai
2025-01-19n/aelf db5e1ccd1e613b22845c127e4ad08178b312b14fa5df96da530c1aa08fd0fad8Virustotal results 38.10%Mirai
2025-01-15n/aelf 731311dd0b479c5b363e1d08c29e40ab1277990877dc2e09623402a730af3864Virustotal results 63.49%Mirai