URLhaus Database

You are currently viewing the URLhaus database entry for http://154.205.128.91/zd/arc which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:3469846
URL: http://154.205.128.91/zd/arc
URL Status:Offline
Host: 154.205.128.91
Date added:2025-03-06 21:28:04 UTC
Last online:2025-04-16 14:XX:XX UTC
Threat:Malware download Malware download
Reporter: NDA0E
Abuse complaint sent (?): Yes (2025-03-06 21:29:04 UTC to abusepoc{at}afrinic[dot]net)
Takedown time:1 month, 10 days, 17 hours, 3 minutes Bad (down since 2025-04-16 14:32:13 UTC)
Tags:elf mirai link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2025-04-14n/aelf 1196f1f1905a8de55d38cb800ef1e4bd478dbc98d679aa709c54690a0d5058d7n/aMirai
2025-04-12n/aelf d2e5d77d1229d649de3e0b3547e063b9a7cf5cd47e157340652c83497b262762n/aMirai
2025-04-02n/aelf 59e13a9ce759ad16f3bbec5bfdaf6bd7a0a8dc707afe4189ceaf3f74180037a7n/aMirai
2025-03-25n/aelf ee2d20b1d61f8788e0385128d30bc206702e33bd8f1f1177bede60aba98417ffn/aMirai
2025-03-11n/aelf b23b347c5cea2e13922f240dd1ac2bdcf5de71a92390d9f8bdca264f9eb978edn/aMirai
2025-03-09n/aelf 931466e3024f3adae9d234446cea97f775aa770673d6bc74fcb79129d823a7e9n/aMirai
2025-03-06n/aelf 7df8dda56b26675454ed023f3ba16129c17c46bf30c1bafda3cf7d9bb56f2ee6n/aMirai