URLhaus Database

You are currently viewing the URLhaus database entry for http://42.112.26.36/r which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:3469423
URL: http://42.112.26.36/r
URL Status:Offline
Host: 42.112.26.36
Date added:2025-03-06 13:27:03 UTC
Last online:2025-04-07 20:XX:XX UTC
Threat:Malware download Malware download
Reporter: NDA0E
Abuse complaint sent (?): Yes (2025-03-09 05:14:07 UTC to hm-changed{at}vnnic[dot]vn)
Takedown time:29 days, 15 hours, 25 minutes Bad (down since 2025-04-07 20:39:17 UTC)
Tags:mirai link sh

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2025-04-02n/ash f33a64866d033540e76e3752da79650484cf7170b5765221dfc84d9d6495bb0bn/aMirai
2025-03-31n/ash 0c8eac64e632f1ab9f4cdccfe4c76241dcb8fd4b45d3f7d949a205609060e96en/aMirai
2025-03-19n/ash 90f329c7c79414d4f4127e4ed69ec8866b6e6dd1c630d689803ec1ff290ee9fdn/aMirai
2025-03-11n/ash 9764b2c595f906d47cae1bb2846075a40590292deff7471669e4be7618d5e7fan/aMirai
2025-03-10n/ash e36b85e1354c3850a94c49332f1f5b4c997efd5983b266df376cc79ccba88148n/aMirai
2025-03-09n/ash 802780cd5993920e8be62af299a47a0ff2c6b58b006d9139dc7d0afdf8df8dd6Virustotal results 36.67%Mirai