URLhaus Database

You are currently viewing the URLhaus database entry for http://193.143.1.32/nklspc which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:3422924
URL: http://193.143.1.32/nklspc
URL Status:Offline
Host: 193.143.1.32
Date added:2025-02-01 13:38:14 UTC
Last online:2025-03-10 03:XX:XX UTC
Threat:Malware download Malware download
Reporter: DaveLikesMalwre
Abuse complaint sent (?): Yes (2025-02-01 13:39:06 UTC to abuse{at}proton66[dot]ru)
Takedown time:1 month, 6 days, 14 hours, 3 minutes Bad (down since 2025-03-10 03:43:03 UTC)
Tags:elf mirai link ua-wget

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2025-03-10n/aelf 556c9c5841edc025ca1146e52fb0f9bc2b7def21d3347c4300d694e04676dc91Virustotal results 38.10%Mirai
2025-03-07n/aelf 0b00374b91d2aa34baae81e870f3df7022ce0ac36b61a0d403ccc79e716cf5d0Virustotal results 53.97%Mirai
2025-03-04n/aelf 8ffd915ab6d838fcc7ffc3302cf355aa2e2a9e810257fc02c50a6f0b7888aa7dVirustotal results 38.10%Mirai
2025-03-03n/aelf 8cbf693ccdc2e46ae7f7496f8b1163f7ea6377e2a5e40874b00dd2756d14fc04n/aMirai
2025-02-25n/aelf 82f1524ff6c838e34d80ac510129a11f7dc7ad5b0810c12f49cf43afc8966cb9Virustotal results 38.71%Mirai
2025-02-10n/aelf db694ae354e376710aafba1f0e4d6f7bf13b427756fb56c08575af192b430a3dn/aMirai
2025-02-01n/aelf 0ee17192369790083d3d3dc737e601531bd9021c4e361cc83a867b3aea78e937n/aMirai