URLhaus Database

You are currently viewing the URLhaus database entry for http://160.250.134.48/mips which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:3612283
URL: http://160.250.134.48/mips
URL Status:Offline
Host: 160.250.134.48
Date added:2025-08-27 03:01:08 UTC
Last online:2025-09-20 03:XX:XX UTC
Threat:Malware download Malware download
Reporter: botnetkiller
Abuse complaint sent (?): Yes (2025-08-27 03:02:11 UTC to hm-changed{at}vnnic[dot]vn)
Takedown time:24 days, 0 hours, 36 minutes Bad (down since 2025-09-20 03:38:12 UTC)
Tags:elf gafgyt link geofenced mips mirai link ua-wget USA

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2025-09-17n/aelf fd75057993af111cf29aeb0924554d01ad28c071fb20cf9700831fd4402fbaf2Virustotal results 32.81%Mirai
2025-09-11n/aelf b161dba5790533d43d1f14c7a906ba69746cf9433ffb5d27ddcf7ee0c201d8fbVirustotal results 33.33%Mirai
2025-09-10n/aelf 6235ab84723f8d3b42a4e8406677c3ed7b2c1da46c1293c0d9991f6a61570473Virustotal results 42.19%Mirai
2025-09-07n/aelf 03288429e16438ba16eec99776d665e20cbe68b923e54eb4f1c09e0b51750e20n/aMirai
2025-09-02n/aelf 21c1a38155620df7ff31b34364069137ff5bea0f6cf57a8c8a13a687792a7d86n/aGafgyt
2025-09-01n/aelf b4854e6a3a95d83dd16aee1c9695602a1978c0aaf8911d3d439d9b39bf00cc2dn/aGafgyt
2025-08-27n/aelf 77e287d8d0967bffac544be47fd8afc8da9ac67052e41e2595d0b8d8fe794f2cVirustotal results 35.48%Gafgyt