URLhaus Database

You are currently viewing the URLhaus database entry for http://176.65.144.232/c.sh which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:3491014
URL: http://176.65.144.232/c.sh
URL Status:Offline
Host: 176.65.144.232
Date added:2025-03-26 08:56:03 UTC
Last online:2025-04-21 11:XX:XX UTC
Threat:Malware download Malware download
Reporter: NDA0E
Abuse complaint sent (?): Yes (2025-03-26 08:57:09 UTC to abuse{at}dolphinhost[dot]net)
Takedown time:26 days, 2 hours, 16 minutes Bad (down since 2025-04-21 11:13:48 UTC)
Tags:mirai link sh

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2025-04-16c.shsh c06dc9fe82762827b040c013cd7de979cb7caec2d03787d9692c86894f928313n/aMirai
2025-04-11c.shsh 719db1787cbe2951f8a8ce1d104a5f892f27e9c4292cf74edbb2210542033ee0n/aMirai
2025-04-10c.shsh ef609c7f0e2395f2513ee4940ad46861c0d450a6fa0da2c5f0276b57fddbb367n/aMirai
2025-04-06c.shsh 017dc90a3ac5b9e4382fab481bd760fc008b76bf55632192b97c4b4de721a887n/aMirai
2025-03-26n/ash f999632fc3cbe98f59b6f982ae09fdf4db2d005fbb53d62a026e240be1c7071an/aMirai
2025-03-26n/ash fa8c60eed9fffb14093a92772cc6d72c11d1175aa98ec214bb0dc56180ba5166n/aMirai
2025-03-26n/ash c25a6ffa262a11c5d1292fa6cdbb307e5160478b07139bb1bf63609ed2a6db11n/aMirai
2025-03-26n/ash bb8f364b0dbcd9a7fb7c046e82ff91da0d9adf895517cf203fc2c02f920f5cbbn/aMirai