URLhaus Database

You are currently viewing the URLhaus database entry for http://bins.freesite.host/bins/jackmyarmv5 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:3423403
URL: http://bins.freesite.host/bins/jackmyarmv5
URL Status:Offline
Host: bins.freesite.host
Date added:2025-02-01 20:22:07 UTC
Last online:2025-02-11 18:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: abuse_ch
Abuse complaint sent (?): Yes (2025-02-01 20:23:06 UTC to abuseteam{at}cloudaccess[dot]net)
Takedown time:9 days, 21 hours, 37 minutes Bad (down since 2025-02-11 18:00:46 UTC)
Tags:elf gafgyt link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2025-02-08n/aelf 8b39b83968fd19714c2f895c6eaed9c7a9b90ab538657653df6f3f65af0445baVirustotal results 60.66%Gafgyt
2025-02-03n/aelf ce5da3d0daaa7d8f9ec0ea62ead3fb5a110ec1a6a58cd4229c653883c4d81a84Virustotal results 61.29%Gafgyt
2025-02-01n/aelf a21d459d43664bfaf152dcd6c7ad24275c9041d6d84871ebde3ddb6a1686ad93n/aGafgyt