URLhaus Database

You are currently viewing the URLhaus database entry for http://160.187.146.122/ppc which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:3494040
URL: http://160.187.146.122/ppc
URL Status:flame Online (spreading malware for 1 year, 3 month, 27 days, 14 hours, 38 minutes)
Host: 160.187.146.122
Date added:2025-03-28 21:39:06 UTC
Threat:Malware download Malware download
Reporter: tolisec
Abuse complaint sent (?): Yes (2025-03-28 21:40:08 UTC to hm-changed{at}vnnic[dot]vn)
Tags:elf mirai link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2026-06-12ppcjson 911708b2be1e4952eaa67bca382511067c2ff288520dfc94995a48653cfe201dn/a 
2025-05-08n/aelf 513075d1fb167b1d277ddae6a18679661946657a741c85c939397b1de7f4545bn/aMirai
2025-04-27n/aelf 1721cbcc3b8a55ee6d2e830587df27d847df1d6f9dd7e1e9e57f4808e5b0a0a1n/aMirai
2025-04-26n/aelf fa3d4b8df827df26ea1cd25ea3944b80944e058579c3ebad90a993d77b63a7b8n/aMirai
2025-04-16n/aelf cd124d19278f1e20faaf1b3f4e94fb258c406f286e5ec9bfe04ec1be31d04397n/aMirai
2025-04-16n/aelf ac67dcf5cccb22170cf25dcf48b6288404d47b0776f608e6e8e05c7052807f08n/aMirai
2025-03-28n/aelf 3d23a5081127ca30db22310fb2388abdbdb469f5d6dd0eb426b1775ca99d9d83n/aMirai