URLhaus Database

You are currently viewing the URLhaus database entry for http://nuklearcnc.duckdns.org/bins/yakov.arm6 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:3464328
URL: http://nuklearcnc.duckdns.org/bins/yakov.arm6
URL Status:Offline
Host: nuklearcnc.duckdns.org
Date added:2025-03-03 13:56:10 UTC
Last online:2025-03-03 17:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Status unknown
OpenBLD :Blocked
DNS4EU :Blocked
Reporter: DaveLikesMalwre
Abuse complaint sent (?): Yes (2025-03-03 13:57:05 UTC to abuse{at}dolphinhost[dot]net)
Takedown time:3 hours, 37 minutes Good (down since 2025-03-03 17:34:44 UTC)
Tags:botnetdomain elf mirai link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2025-03-03n/aelf 6f5c2f99ab8ecfd0ffbff1b2cab2e0f5e9aa20b8d096960c513c2f263df29183Virustotal results 39.68%Mirai
2025-03-03n/aelf 570e981f630e7851b2e59f09500dc35e6b0bc726ade17da38b1a33c9c9078b37n/aMirai
2025-03-03n/aelf 9a89bb569a55cf4907c45edddfa07ea404e6f81838c90aa4a5bd7afee3e93e18Virustotal results 40.32%Mirai
2025-03-03n/aelf 27deae381470b4010b6be880199c9a96d48edd91aba99956b6b54ef101a323ddVirustotal results 41.67%Mirai