URLhaus Database

You are currently viewing the URLhaus database entry for http://160.250.134.48/arm7 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:3612341
URL: http://160.250.134.48/arm7
URL Status:Offline
Host: 160.250.134.48
Date added:2025-08-27 06:11:08 UTC
Last online:2025-09-20 03:XX:XX UTC
Threat:Malware download Malware download
Reporter: botnetkiller
Abuse complaint sent (?): Yes (2025-08-27 06:12:14 UTC to hm-changed{at}vnnic[dot]vn)
Takedown time:23 days, 21 hours, 17 minutes Bad (down since 2025-09-20 03:29:30 UTC)
Tags:arm elf geofenced mirai link ua-wget USA

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2025-09-16n/aelf 6509f8d5312e74b83dcc973477b33d6a439bc050545d2bc54962f9b43d8ddf88Virustotal results 31.25%Mirai
2025-09-10n/aelf af7b0e08e8f0cbf59cc2884d7b1c6fe205c3aa9934ca71dae6213faba4dd64abVirustotal results 32.81%Mirai
2025-09-09n/aelf 0cfc94613124989ccd8216b81ced4c66b077007789d6111b60d59a459832f024Virustotal results 32.81%Mirai
2025-09-07n/aelf 0eeb6dc800721b432a663c4f65834b5d126925e1306bd43c26e655692087bc5cVirustotal results 32.81%Mirai
2025-09-02n/aelf 7f511c4e5fe592b7461f1d91402c8e72f6113d61119076d0ee054388e71f963fn/aMirai
2025-09-01n/aelf 7bfb0c4fbe4df131605abe4893af21f8d0fa0f6071cb6e8caeceea364a555d75n/aMirai
2025-08-27n/aelf 7f9023fdbd0951650d408f62a2eb70dbaadd424d725957ee3d3a7780aa25c853Virustotal results 50.00%Mirai