URLhaus Database

You are currently viewing the URLhaus database entry for http://176.65.134.201/drea4 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:3477316
URL: http://176.65.134.201/drea4
URL Status:Offline
Host: 176.65.134.201
Date added:2025-03-14 19:14:06 UTC
Last online:2025-04-12 03:XX:XX UTC
Threat:Malware download Malware download
Reporter: BlinkzSec
Abuse complaint sent (?): Yes (2025-03-14 19:15:09 UTC to abuse{at}dolphinhost[dot]net)
Takedown time:28 days, 8 hours, 40 minutes Bad (down since 2025-04-12 03:55:46 UTC)
Tags:elf geofenced mirai link ua-wget USA

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2025-04-11n/aelf 6ee00dbf5fd9907f6723582b153bec7aa9fbf8394c083cc58a50858e23273811n/aMirai
2025-04-02n/aelf 03069f187732fe9890a92d7b25e44d804176a1f6c7b5a6537a8de7d166111d5fn/aMirai
2025-03-30n/aelf c831539a68f0d515b5cf43541b41674bbeb3d40ed4598f8ff51421603dcc8ddbVirustotal results 40.62%Mirai
2025-03-27n/aelf ba09b38de6fdc0070a5de7936d38d91b4bf5f7ae7946c742ab540f39a5797e51n/aMirai
2025-03-26n/aelf c00a9758056acc5232482c956096149ef4afe0cb5ca5cdcd8acf5f21554f5f40n/aMirai
2025-03-26n/aelf 68421ffce38e916b68e72d4d511308b6fef96d3b45e038a9e66cbda7c1a98cd3n/aMirai
2025-03-26n/aelf f384727aa4babbc09b34e4fa950af939023e3c81cfa1cdeb658ee646609f7913n/aMirai
2025-03-23n/aelf 6d449dc4f26efe052f5d7c3a30131b306132ce6cdfd8d2d9bff84cc9c3dacd3cVirustotal results 26.67%Mirai
2025-03-20n/aelf 758f7ed922d1968bef217274949b26aa2c819947ea356c9ede669041687f960fVirustotal results 25.40%Mirai
2025-03-14n/aelf 31c139ec87e5163cac36667f7657a426cd4efc07e9de2d405af46769272df459n/aMirai