URLhaus Database

You are currently viewing the URLhaus database entry for http://103.188.82.240/mpsl which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:3524644
URL: http://103.188.82.240/mpsl
URL Status:Offline
Host: 103.188.82.240
Date added:2025-04-25 12:39:07 UTC
Last online:2025-05-17 16:XX:XX UTC
Threat:Malware download Malware download
Reporter: NDA0E
Abuse complaint sent (?): Yes (2025-04-25 12:40:08 UTC to hm-changed{at}vnnic[dot]vn)
Takedown time:22 days, 3 hours, 46 minutes Bad (down since 2025-05-17 16:26:50 UTC)
Tags:elf gafgyt link geofenced mirai link ua-wget USA

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2025-05-14n/aelf 3fea52401c16349a3ba45cf813c5cf768cc200f410794a6dd4fe97b3723a37a4Virustotal results 19.05%Mirai
2025-05-10n/aelf 149f8d43b1fbb13f96d64a905b7601b1edecb549e4558c75223247e364c7a646Virustotal results 20.97%Mirai
2025-05-09n/aelf 5ac86c252a89703a66ac1ebe92e4e1f43c3bf5c1970c643d4e99ab0744e87b3bVirustotal results 52.38%Gafgyt
2025-04-27n/aelf a272f1f4e1e78736958a964a7a28a635cb61435c7375587acf0d3b95087ab633n/a
2025-04-25n/aelf cdd48fc092d4d4a14b28a98e306f6e51abe1552f62b647482c40659d2d8faa6bVirustotal results 53.23%Mirai