URLhaus Database

You are currently viewing the URLhaus database entry for http://mta179.insuretn.com/nabarm which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:3424068
URL: http://mta179.insuretn.com/nabarm
URL Status:Offline
Host: mta179.insuretn.com
Date added:2025-02-02 07:36:16 UTC
Last online:2025-03-10 03:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: BlinkzSec
Abuse complaint sent (?): Yes (2025-02-02 07:37:06 UTC to abuse{at}proton66[dot]ru)
Takedown time:1 month, 5 days, 20 hours, 4 minutes Bad (down since 2025-03-10 03:41:30 UTC)
Tags:elf mirai link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2025-03-10n/aelf 0ec219b2e192aff5aad4f2c61d1757f88e5720808cd676605e39cc32d7185963Virustotal results 25.40%Mirai
2025-03-06n/aelf 564d5fa08f78803c4f99e2df3e46a9bf65f4006b814e6bcaaac8f502d0f19847n/aMirai
2025-03-04n/aelf 14c324b084caefb10667cf311f805f7866b16184053fb0f95f155cd348b69cdcVirustotal results 26.98%Mirai
2025-03-03n/aelf c15092fd8999a59b0f75f75136b353afd364b6ef575c047b5ef0c13af8d08875Virustotal results 26.98%Mirai
2025-02-25n/aelf 284c83ff0effca606b54477fb2529643cee2ac37da61541991db12deb296f64fVirustotal results 26.98%Mirai
2025-02-14n/aelf ffe4b4ff099a31da367a0360163f2bde0d1efbdd6743fc7bf17f327c75f9a723Virustotal results 61.90%Mirai
2025-02-10n/aelf c5e950a9e705e40f70139aa8154dd92abf667dae9fcb97c58f92504af37efb84n/aMirai
2025-02-02n/aelf 28d35cb45ad73c7eea9173c20d8dc61fa9fdeaf05fb000bd44ae45fe52ff2baaVirustotal results 50.79%Mirai