URLhaus Database

You are currently viewing the URLhaus database entry for http://109.205.213.5/resgod.arm5 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:3610337
URL: http://109.205.213.5/resgod.arm5
URL Status:Offline
Host: 109.205.213.5
Date added:2025-08-24 04:22:07 UTC
Last online:2025-09-08 21:XX:XX UTC
Threat:Malware download Malware download
Reporter: redrabytes
Abuse complaint sent (?): Yes (2025-08-24 04:23:10 UTC to abuse{at}razinetwork[dot]com)
Takedown time:15 days, 16 hours, 51 minutes Bad (down since 2025-09-08 21:14:12 UTC)
Tags:elf mirai link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2025-09-07n/aelf e89328219e412a061745f826ee6ad9be1a56ea91de224f3178a93b63375604b9n/aMirai
2025-09-07n/aelf 2441662f5ff06cda88f5bcd12992a7470063c10f4514b2f4bec734d7ba943c25n/aMirai
2025-09-06n/aelf 89e2151bfb0089551b5cdcc0a383985a697bad796c94c0520e8466e60cb29201Virustotal results 36.51%Mirai
2025-08-26n/aelf a4fca9134c48bd530f339b70d5ae620de9c301544ed299bb0baeeebafacd995bn/aMirai
2025-08-24n/aelf 169c16548513423a529c17ff00b4609afad0f67a9582c60f007c6b9cc37fcb98n/aMirai
2025-08-24n/aelf 8a905729e5d10889d91e811ae9ebbd4c255378767170df0438e00b76cde6d377n/aMirai
2025-08-24n/aelf f3f180395fc893db7dd1cee31126de9086e8d5167c654e0c1ae3c0b6706237acn/aMirai