URLhaus Database

You are currently viewing the URLhaus database entry for http://41.216.189.108/00101010101001/morte.spc which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry

Add tag Remove tag Perform URL rescan Delete this URL Report a False Positive
ID:3614420
URL: http://41.216.189.108/00101010101001/morte.spc
URL Status:Offline
Host: 41.216.189.108
Date added:2025-08-30 19:48:33 UTC
Last online:2025-10-22 11:XX:XX UTC
Threat:Malware download Malware download
Reporter: botnetkiller
Abuse complaint sent (?): Yes (2025-08-30 19:49:11 UTC to abusepoc{at}afrinic[dot]net)
Takedown time:1 month, 22 days, 15 hours, 48 minutes Bad (down since 2025-10-22 11:37:55 UTC)
Tags:elf geofenced mirai link opendir ua-wget USA

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2025-10-02morte.spcelf 0f5532eb67be29a3c2cfcabab8f25327e54c1cb136fd2f623f0bd57da30d0ffdVirustotal results 58.46%Mirai
2025-09-18morte.spcelf 88aa32a741dc62476112cbbacd3430f0c51069448caf7e06092471a34dafec14Virustotal results 60.94%Mirai
2025-09-17morte.spcelf a5c0106e3ce705bba93e73e9979a6b3245d5ad8b91807224d452a7c7f1db89aaVirustotal results 63.08%Mirai
2025-09-14morte.spcelf 6d7d6efad6071953d2c7f80a03a9d19fa6b0fede50b4fd109a72c980ff7f4ff3n/aMirai
2025-09-13morte.spcelf 3d04e2573c48eb48bf106335684610ba149da3c27618f227f7218dd1ce59a962Virustotal results 55.38%Mirai
2025-09-10morte.spcelf bc0ebbecb6773f52d01daa0bc6435b48b71bb73d1d1f4bdc230e5533a62dc7a3Virustotal results 55.38%Mirai
2025-09-09morte.spcelf 19e74f144d7c6a36d551cc4dcd3ef25c18d71d5f76489fc9f74839cc45d55f47Virustotal results 62.50%Mirai
2025-08-30morte.spcelf 1826602a1c56c9cc97f3ae069bc00bd529dfca48e3c69c21ee145b2af3097c51n/aMirai