URLhaus Database

You are currently viewing the URLhaus database entry for http://207.244.199.152/m68k which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:3604490
URL: http://207.244.199.152/m68k
URL Status:Offline
Host: 207.244.199.152
Date added:2025-08-16 08:21:22 UTC
Last online:2025-08-18 13:XX:XX UTC
Threat:Malware download Malware download
Reporter: botnetkiller
Abuse complaint sent (?): Yes (2025-08-16 20:04:10 UTC to abuse{at}freakhosting[dot]com,report{at}abuseradar[dot]com)
Takedown time:1 day, 17 hours, 25 minutes Poor (down since 2025-08-18 13:29:46 UTC)
Tags:elf geofenced mirai link ua-wget USA

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2025-08-18n/aelf d0500af0d3967954ca914554d5b0068825eb1939a427b917a6f6fa458597e608n/aMirai
2025-08-18n/aelf 58a6066f0a6412435788ed1140e64937dc0e968dd80834713657037d45275f33n/aMirai
2025-08-17n/aelf 2d4f22a51af52929b997ada70b179404e2a9d68509fe2e51bd6850066a8fbae5Virustotal results 34.92%Mirai
2025-08-16n/aelf 29f66c61a7be8ee1251905b5e40cffc409d075503ac2bb784f9efa9af341f2c4n/aMirai
2025-08-16n/aelf d69fdb01c1408b620f6282b4c0f35ff57310b31b00bf799ec650ada4bdbb0e8dn/aMirai