URLhaus Database

You are currently viewing the URLhaus database entry for http://nuklearcnc.duckdns.org/bins/yakov.arm5 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:3464324
URL: http://nuklearcnc.duckdns.org/bins/yakov.arm5
URL Status:Offline
Host: nuklearcnc.duckdns.org
Date added:2025-03-03 13:56:09 UTC
Last online:2025-03-03 17:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Status unknown
OpenBLD :Blocked
DNS4EU :Blocked
Reporter: DaveLikesMalwre
Abuse complaint sent (?): Yes (2025-03-03 13:57:05 UTC to abuse{at}dolphinhost[dot]net)
Takedown time:3 hours, 49 minutes Good (down since 2025-03-03 17:46:14 UTC)
Tags:botnetdomain elf mirai link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2025-03-03n/aelf c1e62921686dd536e291945238fa2d7a96dce5c0413b41a6dc03bbf5f670cdffn/aMirai
2025-03-03n/aelf 8fff94999766de05cc960d90cf847a215ea3dd990bbd387fdb79d856414f6b97n/aMirai
2025-03-03n/aelf 4592500bbe27996b359d8a7e8acc8e8ad3a790f711d2d5b7113e67000768f7bdn/aMirai
2025-03-03n/aelf 794a243213170e7e6f0b087a69dd2ffd33b3a5bbb66d7e708238145321013395Virustotal results 16.39%Mirai