URLhaus Database

You are currently viewing the URLhaus database entry for http://mta179.insuretn.com/splarm5 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:3424079
URL: http://mta179.insuretn.com/splarm5
URL Status:Offline
Host: mta179.insuretn.com
Date added:2025-02-02 07:36:19 UTC
Last online:2025-03-10 04:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: BlinkzSec
Abuse complaint sent (?): Yes (2025-02-02 07:37:06 UTC to abuse{at}proton66[dot]ru)
Takedown time:1 month, 5 days, 20 hours, 35 minutes Bad (down since 2025-03-10 04:12:51 UTC)
Tags:elf mirai link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2025-03-10n/aelf c7bf13560d86a03a4b2d614105f2f45340652ebaad205c82194af27448b9b8ffVirustotal results 40.32%Mirai
2025-03-07n/aelf 728b11daee6107fc34691de2eb5261a286d3d84f9cd02494442876084087ae6fVirustotal results 58.06%Mirai
2025-03-04n/aelf dcf70d024733e24cfba85fff132013afcfbc93c21409894ac19a1c74dfd740f4n/aMirai
2025-03-03n/aelf f840382779e38da1740fd658f3225b7a22630f1c17093a13788448b25ea36410n/aMirai
2025-02-25n/aelf d411e8198762ed5700d56377c092531a5ed5d692cab6fe5c8c1ba91f328886edn/aMirai
2025-02-14n/aelf 0b051fb3621726c4525a268f2bb2c12456cc238b0b301c249feb2872177ae517Virustotal results 59.68%Mirai
2025-02-10n/aelf 139cd128c0c6e5ebc34509cf6481f29978bf862a869aa5335ed8185bf962c78en/aMirai
2025-02-02n/aelf 36d24f4bf8b48242630a11ba4c6c22a3b9eae2b5eabc24d4463ef22758f90d08Virustotal results 59.68%Mirai