URLhaus Database

You are currently viewing the URLhaus database entry for http://154.205.133.58/skid.arm5 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:3574794
URL: http://154.205.133.58/skid.arm5
URL Status:Offline
Host: 154.205.133.58
Date added:2025-07-03 11:14:11 UTC
Last online:2025-07-23 23:XX:XX UTC
Threat:Malware download Malware download
Reporter: ClearlyNotB
Abuse complaint sent (?): Yes (2025-07-03 11:15:13 UTC to abusepoc{at}afrinic[dot]net)
Takedown time:20 days, 12 hours, 8 minutes Bad (down since 2025-07-23 23:24:11 UTC)
Tags:elf mirai link ua-wget

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2025-07-21n/aelf 495ce809e735ffcdf61aee835d0dc9201ef56aa045252cfa3e7029aac8a0b891n/aMirai
2025-07-16n/aelf 6b32340605d91b71c56658cd726710fe1968ae2ab91ab320064ee755a5e2d95an/aMirai
2025-07-13n/aelf b3ca0f33676c7848dc1aab40fb24f7c554c944773538f97374fc354c15705db0n/aMirai
2025-07-11n/aelf c852ea7e590b004b7aaabdc2a555ce480fc740ce93d3c9fb1fec4df48d9327e5n/aMirai
2025-07-08n/aelf 8a14cc067625b42a57201a954ac4e1d963df8a37448b0d621493fed27ecbc54fn/a
2025-07-08n/aelf ca4a7412749f4c93ff758b8622e2d359e80a2d493d9a9aca32110dd52e1e2881n/a
2025-07-07n/aelf 23389594235de9eaed08a1b624acaaed92c34a7b3ea9264b6674a628c12dd4c1n/aMirai
2025-07-03n/aelf 937f29cab82f00325464d5d160c4bbc915877c59c8b5f992a09d9f18f87059ecn/aMirai