URLhaus Database

You are currently viewing the URLhaus database entry for http://160.250.134.48/arm which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:3612284
URL: http://160.250.134.48/arm
URL Status:Offline
Host: 160.250.134.48
Date added:2025-08-27 03:01:08 UTC
Last online:2025-09-20 03:XX:XX UTC
Threat:Malware download Malware download
Reporter: botnetkiller
Abuse complaint sent (?): Yes (2025-08-27 03:02:11 UTC to hm-changed{at}vnnic[dot]vn)
Takedown time:24 days, 0 hours, 35 minutes Bad (down since 2025-09-20 03:38:10 UTC)
Tags:arm elf geofenced mirai link ua-wget USA

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2025-09-16n/aelf e16a5e543be159372994cf2bd528b703cfc4ebe667e153a34de20e13de0bc265Virustotal results 35.94%Mirai
2025-09-10n/aelf f68a2f3b5572692941b060032b1a71358f98fc4abb377e22aadafd59a82d75e0Virustotal results 38.10%Mirai
2025-09-09n/aelf 2ce4337ab19513686331013d27cdf60f7c8de70da52bffe6c9ef9e548b407b95Virustotal results 37.50%Mirai
2025-09-07n/aelf 5378da33ef8484b1fcdf3dd1875814dd6e6f6d81b48154ef3dbf6b964d257769Virustotal results 35.94%Mirai
2025-09-02n/aelf 86a83cda767fc02878500df02e481bf4f85dd6e35ea566a5fc2688c60e85b4a9n/aMirai
2025-09-01n/aelf 2a160119589e5601c27a057224aa4ab5542d5fe4140a2bda0864d8d92e1cb353n/aMirai
2025-08-27n/aelf 3b9fb643ee107c4fdc321425bf8801dae55aa9e5c392b6062e463ec8dde0cb9dVirustotal results 48.28%Mirai