URLhaus Database

You are currently viewing the URLhaus database entry for http://47.86.1.37:60125/linux which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:3529912
URL: http://47.86.1.37:60125/linux
URL Status:flame Online (spreading malware for 7 months, 15 days, 3 hours, 7 minutes)
Host: 47.86.1.37
Date added:2025-04-29 11:01:13 UTC
Threat:Malware download Malware download
Reporter: cesnet_certs
Abuse complaint sent (?): Yes (2025-04-29 11:02:50 UTC to abuse{at}alibaba-inc[dot]com,intl-abuse{at}list[dot]alibaba-inc[dot]com)
Tags:KrustyLoader

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2025-12-10n/aelf 4352d8f18ccfbb9d842ebf1c9fa6c7d2f4ebae0b9f0c1f99fb75300d27a3b109n/a
2025-12-09n/aelf cbe31dfe86ab712e2ad7bac0d2414087e43f246f4f5f97211e2fd587d7624760n/a
2025-12-09n/aelf 4b22a5b2837b39dac8e6f53da7c7f5e5a95f991aff5da76dc2c4d9ed06e8d5can/a
2025-12-08n/aelf 39ff2b8a8f3fa2e9f68b09f68d4f8b9ab5843e895374cdf49c484c73d3163789n/a
2025-12-07n/aelf 7265162745a799bacdf4cc01814c265bdfef74ee279aa1a3489a8f659b303f4cn/a
2025-12-07n/aelf e6b0c4c34d8419173d272a988337e66e9234920a9a7ed15485186c67ee83aa12n/a
2025-12-05n/aelf d1886b189474b02467ed2845df0938cec9785e99c3d4b04e0b7de3cafbee4182n/a
2025-12-01linuxelf 327f192be941e359566984774f3eae57111a0de6835a8d0acb83f05fe7ad46a2n/a
2025-11-27linuxelf 99ad6f8bab362c41c7b118842255ffd2f6ab95e046230f6c1a0e4e4d6d82d076n/a
2025-11-27linuxelf 7724e9298465f768bbe777a17e9f5343f2aad38bef27c54b05d27b0d6862c7d0n/a
2025-11-20linuxelf d46375f41f46adc4c562c417b4997d1d627202828a2f8194ed3c9b413106bbb3n/a
2025-11-20linuxelf 736018c8aa2729c0a7182ee58c76935fd9c8f7909475fc2db2d54e66814ccf61n/a
2025-11-19linuxelf 11370d218430a0bdb2b584eb4181c21bd2abe9958ba639c017caf04ec019d117n/a
2025-11-18linuxelf e20a296addddbce186a94fcb09794e3567dd1ba5f0289aea9ad0a05a8e963572n/a
2025-11-18linuxelf 67352764ac40762fd1fe32d2a883fd5fbd35161fff3a09510e266399d1ad3189Virustotal results 9.23%
2025-10-11linuxelf 525b4b0dd023a7bd15a3f9833d3ae843907dffcaa3ff465b20ba6976c9070032n/a
2025-09-17linuxelf 03fa7fb2ba9d530afdd0deb7d19496ea34950ed3a0800558f3695d2b5dc34329n/a
2025-08-31linuxelf d14a8b3f756f1ff1bc6743515c7115f8394ba3f8f6d26c14f6916f66f471d29bn/a
2025-08-25linuxelf d07d9669b2781520deccd2e482333c43d3142521ecf661e2d269c5b6b73c916en/a
2025-08-22linuxelf 584950a4a478eb38a9a09becdbe8b29f11f3dee4529396cb1f5c95065a5dc76cn/a
2025-08-22linuxelf 5b131b8ebb853fbce503aa1335538db232b2d56e4d9989c8e8c59d5933f46946n/a
2025-08-04linuxelf 2abe403d3488a34efd5202e6e314d38e26ca5aa191cf21b0c5cbe1c554e6403fn/a
2025-07-24linuxelf 99b3b1c7f44527206eb7f0fc7d5d928a2770be503ead28b31ce153107fa7cb4cVirustotal results 46.15%KrustyLoader
2025-07-07linuxelf 53fb9390d471f30b79297095159247d23c0af868fd02c43afcd797bc83816678Virustotal results 21.88%
2025-04-29linuxelf e6bbc3fe61ccb51576d7786b8f5d68d3adf8355684a033bbb41d14a99ade5b56Virustotal results 35.94%