URLhaus Database

You are currently viewing the URLhaus database entry for http://176.65.144.232/wget.sh which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:3491012
URL: http://176.65.144.232/wget.sh
URL Status:Offline
Host: 176.65.144.232
Date added:2025-03-26 08:56:03 UTC
Last online:2025-04-21 12:XX:XX UTC
Threat:Malware download Malware download
Reporter: NDA0E
Abuse complaint sent (?): Yes (2025-03-26 08:57:09 UTC to abuse{at}dolphinhost[dot]net)
Takedown time:26 days, 3 hours, 37 minutes Bad (down since 2025-04-21 12:34:27 UTC)
Tags:mirai link sh

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2025-04-16wget.shsh 38546b16d3e5800bd984a135086ff6748a334a33a9d33490dd7c9912ce255942Virustotal results 30.00%Mirai
2025-04-11wget.shsh 92a010f3f986b063b5ceaf93c604f574b9c6083037c11d0b59bb8197db7eabaan/aMirai
2025-04-10wget.shsh fbe8d34c6faeb43ab2ab1269b0dd5b7ae732dfcf6e7294233c176f15d26fc2fen/aMirai
2025-04-06wget.shsh ca14508537e55c5ebdb643c837807219c98d535e06b7734fa9da73e5660a9c65n/aMirai
2025-03-26n/ash f4cb9951b2386298dfbf79ae3a50e67e07858b8b2c5b8142c2261d121e077b8cn/aMirai
2025-03-26n/ash 8352ae2221d667de2901696bc3fef3d10241361ad60f45444e00c047471a2a52n/aMirai
2025-03-26n/ash af49c861aebd90cf665305c5d217722a4b7a8b8b4400587b8a9a6dfbf742b7e4n/aMirai