URLhaus Database

You are currently viewing the URLhaus database entry for http://traxanhc2.duckdns.org/dwrioej/neon.mips which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:3543220
URL: http://traxanhc2.duckdns.org/dwrioej/neon.mips
URL Status:Offline
Host: traxanhc2.duckdns.org
Date added:2025-05-14 08:31:09 UTC
Last online:2025-07-05 11:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Status unknown
Cloudflare :Blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Blocked
DNS4EU :Not blocked
Reporter: BlinkzSec
Abuse complaint sent (?): Yes (2025-07-05 07:44:09 UTC to hm-changed{at}vnnic[dot]vn)
Takedown time:1 month, 22 days, 2 hours, 58 minutes Bad (down since 2025-07-05 11:30:21 UTC)
Tags:elf gafgyt link mirai link ua-wget

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2025-06-30neon.mipself f77e4acbd6326bd6ebfed249313eb3f99069751a025f978e7e1a88e9c711a1f6n/aMirai
2025-06-20neon.mipself 3450382e4b73b700b8ba4006e11ea7064b83a97f7e2a61a7242dd79eafe89d50n/aMirai
2025-06-20neon.mipself a407e83e6f6f637994efd808f7113a3c8e9393b73c50602d3757e0d8e72059f1n/aMirai
2025-06-20neon.mipself 58d9b96eee45fe2fabdca5f5cab587ba9580317237fd9cc52d6c1f6f5cfb40cfVirustotal results 50.00%Mirai
2025-06-19neon.mipself c70a242568c3a62e49621875da5ac930ed0c3b16dee9c5ecc866b49c278c03f3Virustotal results 50.00%Mirai
2025-06-15neon.mipself 9fa12363094ef8f7be3f812ece0881c67c0e7e83fe6d7496c531ffdb88c623a8Virustotal results 54.69%Mirai
2025-06-14neon.mipself 584fa258259845a541e339e6f8a5c50569cd449f862f3533157dd389f11b63f3Virustotal results 51.56%Mirai
2025-06-13neon.mipself ecd04bc612b59e0e0e245fa516aec0e49ab54bc3075e143cf25833c338c4c121Virustotal results 35.94%Mirai
2025-06-10neon.mipself 53080977da520701cf97dfc3af17c9cfb4a54e0f0f19a22a2ef19c4dc3c5aa6cVirustotal results 34.92%Mirai
2025-06-09neon.mipself 9aa399ead887fdf8818eb465aa2dd93fe22a8473502d8ec3e659a99d2f6db372n/aMirai
2025-06-08neon.mipself 543b98753bd5bc38504345ca0e43fcdfe549f6a7d3a366f847e10a17aaef4dcbn/a 
2025-06-07neon.mipself 89465b50c1238c85c862cabf059fdb958d3cf5fe8570fe658434f8a1d82e53b1n/aMirai
2025-06-05neon.mipself fd7cd6b1d28d18e7ba19f67b4ca4a55426fc85940c90beec0e450a20e1395125Virustotal results 32.81%Mirai
2025-06-01neon.mipself 8f35b0a5126e26c9f88317cc2ada26bca61e7e007b2de077b9c9a1183ce4a2daVirustotal results 34.38%Mirai
2025-05-22neon.mipself c0db05759af45ffc88241a189d117f12db678d5a0cb46f7e33f0f74e0ae7875dn/aMirai
2025-05-20neon.mipself 0c98e8eb14bacff5690f62d74fcc77fa95d93f672a7bba42bd5f7c1044166896Virustotal results 34.38%Mirai
2025-05-18neon.mipself 035db0ae7e0ffbce10aa78878167db90ff3bb7d253bcca792c8ca4c556c675c3n/a
2025-05-17neon.mipself 6a4173af56b4b115255de9b2419792bf89a200a9c408091236c5e7dce295405cn/aMirai
2025-05-17neon.mipself 6bd8852bd265387018ca2cf832e825bc4adb56bb3f310c628c16c466da409313n/aMirai
2025-05-17neon.mipself 946c442256cf460be5041f33fac11bc8c2695f4b5a0bfe76de67efb431eab99bn/aMirai
2025-05-17neon.mipself bbf65c778530b141ba887eca219165a6f2f474fbf338cee7d6312620f7e1ef1dn/aMirai
2025-05-16neon.mipself a0bd6414792ff26846ee83a37bfcc112aee5a8bdf7b2ecf2d96e4f5c25975ae6Virustotal results 36.51%Mirai
2025-05-16neon.mipself 06e2412de89317b5bd12aaced95dd3d2aea7ba508fe05fab6df372e2a76d8308n/aMirai
2025-05-15neon.mipself 8b32b440aca9518b037d0ad8098038539dc88c203d5860d536092a23d5fb2a8dVirustotal results 40.32%Mirai
2025-05-15neon.mipself aa4293c0f9709c9c689a9ea4d1d1d9694831db8318a22e4abac8836902901f7dn/aMirai
2025-05-14neon.mipself d21072e62667cb30be2f3f272e3c2a8de6f4fff84e98737fa2a095dc1b4b1f7dVirustotal results 37.10%Mirai
2025-05-14neon.mipself 5b0f6c2c5ee7ea3d3b5e6c6f4ee217bc2736fe812f3be788acab2e98514d52f0n/aGafgyt