URLhaus Database

You are currently viewing the URLhaus database entry for http://87.120.125.72/arm6 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:3401780
URL: http://87.120.125.72/arm6
URL Status:Offline
Host: 87.120.125.72
Date added:2025-01-15 14:49:05 UTC
Last online:2025-02-05 16:XX:XX UTC
Threat:Malware download Malware download
Reporter: ClearlyNotB
Abuse complaint sent (?): Yes (2025-01-15 14:50:14 UTC to abuse{at}ekabi[dot]net)
Takedown time:21 days, 1 hours, 51 minutes Bad (down since 2025-02-05 16:41:16 UTC)
Tags:elf mirai link ua-wget

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2025-02-03n/aelf b7ac6a1761987e7ede7d43f34249de42f93901f8b1c662b768ad53643f6760can/aMirai
2025-01-27n/aelf fab2ebb2df59d9e013804db4893998db4c40f18dfea48a098e7de418593fa496n/aMirai
2025-01-26n/aelf 2429a13128c3a2bddf826d9dc3b4a756f2a5bb531878f149933c6d57e743c4dbn/aMirai
2025-01-23n/aelf ff022b6e49caeb861f5224c178150e34a086fd42bce7ce380347e07bf8d1e22en/aMirai
2025-01-19n/aelf 8acad8d8078fb0408eda2dc962435e6d96269edf5e9aa963033e66a3c0669815Virustotal results 25.40%Mirai
2025-01-15n/aelf 861fe697bca9d755c6148b63b8de64d1cbb54930b0764e584a82e4a43bd242d9Virustotal results 58.73%Mirai