URLhaus Database

You are currently viewing the URLhaus database entry for http://traxanhc2.duckdns.org/dwrioej/neon.arc which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:3543229
URL: http://traxanhc2.duckdns.org/dwrioej/neon.arc
URL Status:Offline
Host: traxanhc2.duckdns.org
Date added:2025-05-14 08:31:10 UTC
Last online:2025-07-05 10:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Status unknown
Cloudflare :Blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Blocked
DNS4EU :Not blocked
Reporter: BlinkzSec
Abuse complaint sent (?): Yes (2025-07-05 07:44:09 UTC to hm-changed{at}vnnic[dot]vn)
Takedown time:1 month, 22 days, 2 hours, 18 minutes Bad (down since 2025-07-05 10:50:20 UTC)
Tags:elf mirai link ua-wget

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2025-06-30neon.arcelf 4dce5f6b955b2456cb81f5625afdba3e8ba361a8d7e6597de1083721d74cc16dn/aMirai
2025-06-20neon.arcelf 0d70bc8e7bf1bf224f1122e68e8f79959fbaaa9b622e288a8907c9e53b1d6e09Virustotal results 45.31%Mirai
2025-06-20neon.arcelf 8911703a5df041c3ff7da2fccfaa34f25d8588035b0ef32ce19cdee7450dce15n/aMirai
2025-06-20neon.arcelf f075eb3ae22bcddb81427f5f08a4c66932688cd05158e96b456c48b7a5b51b6eVirustotal results 46.88%Mirai
2025-06-19neon.arcelf 2b4fc34352ce1d9dd85760ef4c28707318cb04b74de3806259d921374f1c0cf7Virustotal results 48.44%Mirai
2025-06-15neon.arcelf b8cdc8d4974f8d9f3dc87dd1a510387eb6277775b35995e7f0b83a24e8bfc930Virustotal results 48.44%Mirai
2025-06-14neon.arcelf 6a637c1dd88940358904f78faf3e3e2ff02e7ce6153aae138f0c9dfe29e38fc3n/aMirai
2025-06-14neon.arcelf e4e4dee35b78f7f6dbbefbfbac3e709929db54c3936153573c33ca4415047889n/aMirai
2025-06-13neon.arcelf 6bc6e930c85aa665dabc61d6ad4ccb69a1e4847907e0088ed2041c0d8f5b3984n/aMirai
2025-06-10neon.arcelf 5efdd4ad97d0a6fde767c4fd1674bb73f34a677104e428003f13f93c3ad50866n/aMirai
2025-06-09neon.arcelf 5191c1f49e8d284f506b4b439978a07887a5246cc3bc33477d0aa2e083033effn/aMirai
2025-06-08neon.arcelf c86786474db1f2bec155a81b3d6da5c94780354743998bd3b61cf991be77ca18n/a 
2025-06-07neon.arcelf 060e61d62f62d04da4b672a9f8d4d91f0cd74f60f2d9ac6bf8889c41f36e9836n/aMirai
2025-06-05neon.arcelf d6bebf8c5fe1d496cdcd5c7eaad17f0a17306086266d7d3bc85f90d4c8e5e66fn/aMirai
2025-06-01neon.arcelf cfad8e20d9e3613d4d308a5aa6725aa871da40e91894bca931a7987a333099b2Virustotal results 56.25%Mirai
2025-05-22neon.arcelf c7009a4f3a22b19c3e648cb09143563c3c7a681ed2fceee4e78e0c2f5d6f598eVirustotal results 56.25%Mirai
2025-05-20neon.arcelf 47ff624d9c2f4a76e33fa8a7ef102700a5cd2504b333b8943f6def4cb8f5158dVirustotal results 56.25%Mirai
2025-05-17neon.arcelf b5a95edb374a391a08bc6123a30f8f07cc357153b261802677996614b62b046aVirustotal results 53.97%Mirai
2025-05-17neon.arcelf 49778fdd2d0aa6660f4d5ca7cd68564257d1f2c320425edbf1670f86dc987778Virustotal results 57.14%Mirai
2025-05-17neon.arcelf bffecc66ab7cb7cbfe6ba590bfabe6b5ddeed6cb43b5c9a17c203108804f7014Virustotal results 58.06%Mirai
2025-05-17neon.arcelf 7a7e12cc652bb5f92f4d47ea8443075b53322c3028b06314b718a45a11b9418en/aMirai
2025-05-16neon.arcelf 6443ac1a5d36a272e791389108c38506213a8c336b1a224f9130a5cfd72ac6a0Virustotal results 53.97%Mirai
2025-05-16neon.arcelf d3c6182301aaccba3f35186ff66fdf599e9ec7e88a190d07888cb4af277b2222Virustotal results 54.84%Mirai
2025-05-15neon.arcelf c7fc7dc3569cb208f3fda82ad029ef4cd3274bfab857a38648d8749dc4e715fcVirustotal results 53.97%Mirai
2025-05-15neon.arcelf 373e003c2326fc347e72bf4dc45a6c8de24f22352bc70f8b46cc62061209d1b0n/aMirai
2025-05-14neon.arcelf d44e14003eb963725889f818ffc3d13dddd21a4b9a8c86d1c5d7718d8befabb8n/aMirai
2025-05-14neon.arcelf 26a02a6673bcb1cb4061983f43478146f9038a8be0b6ad57c372b35e50df85e2n/aMirai