URLhaus Database

You are currently viewing the URLhaus database entry for http://87.120.191.44/bins/Hilix.mips which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:3615049
URL: http://87.120.191.44/bins/Hilix.mips
URL Status:Offline
Host: 87.120.191.44
Date added:2025-09-01 05:33:13 UTC
Last online:2026-03-01 01:XX:XX UTC
Threat:Malware download Malware download
Reporter: botnetkiller
Abuse complaint sent (?): Yes (2025-09-01 05:34:14 UTC to abuse{at}vpsvault[dot]host)
Takedown time:6 months, 0 days, 20 hours, 4 minutes Bad (down since 2026-03-01 01:38:15 UTC)
Tags:elf geofenced mips mirai link ua-wget USA

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2026-02-28Hilix.mipself 2e6c6f5a0532054eea876c6d225f1e70d8d24d9952d6aecef799cb6948bc9c0an/aMirai
2026-02-05Hilix.mipself 786b60bd0ec72ddd6b6a5b3862941f60ad4a57283430d4f6e31d334e3c3071e6n/aMirai
2025-09-16Hilix.mipself f4c0d28e1618faea7fa5cce0a8a00459c14b1311e592a8c7e7dbbf41d5788c6an/aMirai
2025-09-01Hilix.mipself c300eaaceb6f174184c70a5a969cec233d2d39880a3522067e3812c26b8b2d24n/aMirai