URLhaus Database

You are currently viewing the URLhaus database entry for http://176.65.134.201/rrrdsl which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:3477313
URL: http://176.65.134.201/rrrdsl
URL Status:Offline
Host: 176.65.134.201
Date added:2025-03-14 19:14:06 UTC
Last online:2025-04-12 03:XX:XX UTC
Threat:Malware download Malware download
Reporter: BlinkzSec
Abuse complaint sent (?): Yes (2025-03-14 19:15:09 UTC to abuse{at}dolphinhost[dot]net)
Takedown time:28 days, 8 hours, 21 minutes Bad (down since 2025-04-12 03:36:36 UTC)
Tags:elf geofenced mirai link ua-wget USA

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2025-04-11n/aelf 5e7d809b00a02d4d222f85ca5259466dd3fe8c3c1cf68d03f3966dd5584f7852n/aMirai
2025-04-02n/aelf 145c01e665da22c4d816ead167874be9ca99ccfddd553b608c0997c9db68efd9n/aMirai
2025-03-30n/aelf f599c0af97a03d2b329e2262a7882542518189be5b4aa40f54922b1265ceb59eVirustotal results 26.98%Mirai
2025-03-27n/aelf d2e47ce08383edf9a149066c6ba9251dd6693309a4deee21b1c82684dea1e372n/aMirai
2025-03-26n/aelf 9a59430b4bbcc3a545e4bd4f0ea1924dc14a1f6b6c43effd2ab39401744f2edan/aMirai
2025-03-26n/aelf 2ad3fef075eb7eb5f5c91e47c160fb83f2d83128ffc4aab944c42bb3c122fbban/aMirai
2025-03-24n/aelf 81e8a6a027ef122e596d7711970ce01f2b74b53be750a13050cc749da6a80b68Virustotal results 53.12%Mirai
2025-03-20n/aelf ee626d7984ef9dad56bb96cf70f683421374b13f39c0f6aabf68153c3380a237Virustotal results 26.56%Mirai
2025-03-14n/aelf 00bf20c99c3eb95d20131f41b5d83d9154ef5fd96cf1cefd847eb6b7721e0de4n/aMirai