URLhaus Database

You are currently viewing the URLhaus database entry for http://94.26.90.217/m which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:3531258
URL: http://94.26.90.217/m
URL Status:Offline
Host: 94.26.90.217
Date added:2025-04-30 18:56:33 UTC
Last online:2025-06-29 10:XX:XX UTC
Threat:Malware download Malware download
Reporter: NDA0E
Abuse complaint sent (?): Yes (2025-05-01 05:43:09 UTC to abuse{at}virtualine[dot]org)
Takedown time:1 month, 29 days, 5 hours, 4 minutes Bad (down since 2025-06-29 10:47:44 UTC)
Tags:gafgyt link mirai link sh ua-wget

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2025-06-18msh 4bc7621fe681c1b289c5dc1570eb5b57a764ec18d98179ec4cb4eacb44202717n/aGafgyt
2025-06-17msh 8dc449fbf10aa22b23bf2d91f0fc86070ecf44be77712149d4013cac5036fd54n/aMirai
2025-06-07msh 54f6f9be0f9fb0365e7a0dff1dfb9a48e9b96f6d4ba59f9e5549c4a977942969n/aMirai
2025-05-10msh 02649aa2a959ab42be794c32fa54a39fd90065021c3e46f2982d7a67e65f02d9n/a
2025-05-08msh 6246c6056391ba8712c9c34fc5d5e54e2655b81900e0a5f876e94cfc3288570cn/a
2025-05-06msh 8606bb3d092267494f413ef1fc06b895ad7f4993008ff6352d19bc210022b00en/a
2025-05-01msh 1059cc649f7366b116b88472a6339d583978ff85ea2588a101d250a3d54b7e4fn/a