URLhaus Database

You are currently viewing the URLhaus database entry for http://176.65.140.135/efjepc which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:3430680
URL: http://176.65.140.135/efjepc
URL Status:Offline
Host: 176.65.140.135
Date added:2025-02-07 06:41:05 UTC
Last online:2025-03-12 09:XX:XX UTC
Threat:Malware download Malware download
Reporter: BlinkzSec
Abuse complaint sent (?): Yes (2025-02-07 06:42:07 UTC to abuse{at}dolphinhost[dot]net)
Takedown time:1 month, 3 days, 2 hours, 40 minutes Bad (down since 2025-03-12 09:22:09 UTC)
Tags:elf mirai link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2025-03-07n/aelf 533e7a32f1b2080de97659a6df20a672a988bd0c6e13988ea85c5f1a254a19f8n/aMirai
2025-03-05n/aelf 2eb01d6840b22aa0bcae7a7ab0e65a3ecc67a083490eb59e28498acc3a566339n/aMirai
2025-03-05n/aelf 99d4df817e761815850e5a0a66f075159b0e491683cf21328227b01a2a069a97n/aMirai
2025-03-04n/aelf 489b777ddebc493521e9a2d145cbeb384779c8d08b579a7d1684e6208d948fffn/aMirai
2025-02-28n/aelf e8153b26488b1f7d715c5ca9bfbed439d2d32577e6c48940b506981578309ad4n/aMirai
2025-02-15n/aelf 9191ae753e3e7de9e3510dea405d9f4b0fdc74e7d05341fd11eb17deaed6abc6n/aMirai
2025-02-07n/aelf 22de82808211e599d2e31838a3ea61702b56fff0deab1732aefac47f77b001e5Virustotal results 59.68%Mirai