URLhaus Database

You are currently viewing the URLhaus database entry for http://160.250.134.48/arm5 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:3612342
URL: http://160.250.134.48/arm5
URL Status:Offline
Host: 160.250.134.48
Date added:2025-08-27 06:11:08 UTC
Last online:2025-09-20 03:XX:XX UTC
Threat:Malware download Malware download
Reporter: botnetkiller
Abuse complaint sent (?): Yes (2025-08-27 06:12:14 UTC to hm-changed{at}vnnic[dot]vn)
Takedown time:23 days, 21 hours, 25 minutes Bad (down since 2025-09-20 03:38:08 UTC)
Tags:arm elf geofenced mirai link ua-wget USA

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2025-09-16n/aelf ef0759560923799625dbffbc95e23935d0c09da4aad0e7e285a24510c1255a97Virustotal results 28.12%Mirai
2025-09-10n/aelf 8ccd2692fafd017a9c155374bb7fd17213b07059339477332be4a6284450171aVirustotal results 34.38%Mirai
2025-09-09n/aelf 943ce184c07658f0887214f682b3669ac7c8c4c73f8ab5fe2e1e1056428fa92dVirustotal results 31.25%Mirai
2025-09-07n/aelf 57babe0f29947825ce2822d93cf5206858e843e842fe1afa8c3fa36d9542643an/aMirai
2025-09-02n/aelf da2f1743a967256963cd0ed10f605ba26353ca98d9ef12883ff2dd94af2d0040n/aMirai
2025-09-01n/aelf b7c6ae7c89d5176a766a4802d4eebe539a1e3e75b68e3054df9e0c37f83ba380n/aMirai
2025-08-27n/aelf 6490586ab557e772c4ddb5d0bdc469118f5af4997831d32273b2a219ef871791Virustotal results 46.88%Mirai