URLhaus Database

You are currently viewing the URLhaus database entry for http://158.51.126.131/n/mips which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:3569505
URL: http://158.51.126.131/n/mips
URL Status:Offline
Host: 158.51.126.131
Date added:2025-06-23 10:32:06 UTC
Last online:2025-09-06 20:XX:XX UTC
Threat:Malware download Malware download
Reporter: NDA0E
Abuse complaint sent (?): Yes (2025-06-23 10:33:11 UTC to abuse{at}hostodo[dot]com)
Takedown time:2 months, 15 days, 9 hours, 39 minutes Bad (down since 2025-09-06 20:13:01 UTC)
Tags:elf gafgyt link mirai link ua-wget

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2025-09-02n/aelf 15c9ec390182a640ee6e36c5ae36f633ea3c76e82a9a0e7b138283c414d15e27Virustotal results 43.75%Gafgyt
2025-08-31n/aelf 96b058a043817aaba507f170f8ab2911660533583fa99bccd723ef24fa78bea8n/aGafgyt
2025-08-23n/aelf 288f74e1485e02dd9d8a2465870c7a2cd0cdfd7cd37cf0f6dc603321ff2c8025n/aGafgyt
2025-07-14n/aelf 1f88c46bfabb6799f443e31d8591e443c09a5475552231fc95891eec2e4c93d9n/aGafgyt
2025-07-09n/aelf 5087fec6e0a30cdb13126262ef8ae01fafe66068f931246db195368d796fb240n/aGafgyt
2025-07-09n/aelf 937917dc794fc3823723baae1b2ba22ce8ed58a3776c9cceb192315fcd89dcb6n/aGafgyt
2025-06-23n/aelf 20cc857bac723b5e33ba4d0409ebe76bdfef9d326ed7cad2561e7361d42dba90n/aMirai