URLhaus Database

You are currently viewing the URLhaus database entry for http://103.176.20.59/skid.arm5 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:3609797
URL: http://103.176.20.59/skid.arm5
URL Status:Offline
Host: 103.176.20.59
Date added:2025-08-23 07:35:29 UTC
Last online:2025-09-26 09:XX:XX UTC
Threat:Malware download Malware download
Reporter: abuse_ch
Abuse complaint sent (?): Yes (2025-08-23 14:32:14 UTC to hm-changed{at}vnnic[dot]vn)
Takedown time:1 month, 3 days, 19 hours, 13 minutes Bad (down since 2025-09-26 09:46:08 UTC)
Tags:elf mirai link ua-wget

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2025-09-21n/aelf 16877e8cab68f6d6a557b0bee1e41a6d938997cb31a62cfe017ed21867b41801Virustotal results 28.12%Mirai
2025-09-16n/aelf ef0759560923799625dbffbc95e23935d0c09da4aad0e7e285a24510c1255a97Virustotal results 28.12%Mirai
2025-09-11n/aelf 0041a54918dc80ac097d1063dad4b279603369cab83b65d719863df1a677dad6Virustotal results 30.51%Mirai
2025-09-10n/aelf 8ccd2692fafd017a9c155374bb7fd17213b07059339477332be4a6284450171aVirustotal results 34.38%Mirai
2025-09-10n/aelf 8ce7f2db15f0ab4d5317f085c7208b55cfebf5d9262bfb566b01a58cf892ac0aVirustotal results 31.25%Mirai
2025-09-09n/aelf 943ce184c07658f0887214f682b3669ac7c8c4c73f8ab5fe2e1e1056428fa92dVirustotal results 31.25%Mirai
2025-09-04n/aelf e1934cc82ef7064790319280be9acf4ceaa40c7dff223b940aa6198b8684b955Virustotal results 29.31%Mirai
2025-09-02n/aelf b7c6ae7c89d5176a766a4802d4eebe539a1e3e75b68e3054df9e0c37f83ba380Virustotal results 14.29%Mirai
2025-08-23n/aelf 6490586ab557e772c4ddb5d0bdc469118f5af4997831d32273b2a219ef871791Virustotal results 9.52%Mirai