URLhaus Database

You are currently viewing the URLhaus database entry for http://207.244.199.152/arm5 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:3604488
URL: http://207.244.199.152/arm5
URL Status:Offline
Host: 207.244.199.152
Date added:2025-08-16 08:19:50 UTC
Last online:2025-08-18 10:XX:XX UTC
Threat:Malware download Malware download
Reporter: botnetkiller
Abuse complaint sent (?): Yes (2025-08-16 20:04:10 UTC to abuse{at}freakhosting[dot]com,report{at}abuseradar[dot]com)
Takedown time:1 day, 14 hours, 33 minutes Poor (down since 2025-08-18 10:37:11 UTC)
Tags:elf geofenced mirai link ua-wget USA

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2025-08-18n/aelf 3c6d883136783d01fbeff4a1e565c2a466afda20ef9af50a33411c45727b0e0dVirustotal results 23.81%Mirai
2025-08-18n/aelf 125c8ca8790e47a3cc38942853130deca3706de0811e42f072eaf79c54e81bffVirustotal results 34.38%Mirai
2025-08-17n/aelf 31278d0e46847253e677a3acc2c507aa8fe3085a13247acc7f9569417ae86174n/aMirai
2025-08-16n/aelf 1aec01778e8f84814c908183cb6dbafa274a0b01fbfec31dcb5b7978a6b59e96n/aMirai
2025-08-16n/aelf 0037b3d17967f6970f65815e3307fd52baa747805d1155423ab4df8a42d4d5ccVirustotal results 40.62%Mirai