URLhaus Database

You are currently viewing the URLhaus database entry for http://93.123.109.218/test/armv7l which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:3581054
URL: http://93.123.109.218/test/armv7l
URL Status:Offline
Host: 93.123.109.218
Date added:2025-07-11 06:36:20 UTC
Last online:2025-07-18 22:XX:XX UTC
Threat:Malware download Malware download
Reporter: xqtsmvjnxuurv
Abuse complaint sent (?): Yes (2025-07-11 06:37:12 UTC to dmzhostabuse{at}gmail[dot]com)
Takedown time:7 days, 15 hours, 40 minutes Bad (down since 2025-07-18 22:17:48 UTC)
Tags:elf mirai link ua-wget

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2025-07-13n/aelf 4651620d09b486b7f227efd44d2ce23c085e48cdb233efe8733683ac06656377n/aMirai
2025-07-13n/aelf 4ad9a2d21027ae376f6097966685f7174c4e3678898e8308fb9454853c9fb653n/aMirai
2025-07-12n/aelf aab6fd67fbc5006725ea73734372d8359de1e0e780df4464b354fb327cbbef42n/aMirai
2025-07-11n/aelf e251d1fe0070ea3abe9d1336f9b4eb52ad31294ff6f6786fba2c91599a6d24fen/aMirai
2025-07-11n/aelf f0555ad2c3dcd64e1fe23daf0f20aaecf3718cfdb6996b8c7f5e38fe8d3e4aebVirustotal results 54.69%Mirai