URLhaus Database

You are currently viewing the URLhaus database entry for http://mta179.insuretn.com/bins/zerarm which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:3424003
URL: http://mta179.insuretn.com/bins/zerarm
URL Status:Offline
Host: mta179.insuretn.com
Date added:2025-02-02 07:36:09 UTC
Last online:2025-03-10 02:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: BlinkzSec
Abuse complaint sent (?): Yes (2025-02-02 07:37:05 UTC to abuse{at}proton66[dot]ru)
Takedown time:1 month, 5 days, 18 hours, 35 minutes Bad (down since 2025-03-10 02:12:37 UTC)
Tags:elf mirai link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2025-03-06n/aelf 0400258af3a2ac3f5fb9a4e9b89266edacaf60748b97ff4647c47d63c4f8cf93Virustotal results 42.86%Mirai
2025-03-04n/aelf de42cb06f928f0b0d2a6443dc955ff1c3314c8c02658749af016c065b8c7b61an/aMirai
2025-03-03n/aelf 7982bd671a86652936ef79130747d8d66c2b3a1ed3bad899edb123d8ed2bfeaaVirustotal results 41.27%Mirai
2025-02-25n/aelf 603c95bd4c69cfbb0afad0567c1902188befdd46c60bb613291ebfd7fb879f2eVirustotal results 41.27%Mirai
2025-02-02n/aelf 49bd7ec5866221a5ca5002470b4582df540c442d90d4654315df58ff16c7888fVirustotal results 61.29%Mirai