URLhaus Database

You are currently viewing the URLhaus database entry for http://drooby.ddns.net/00101010101001/morte.m68k which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:3617115
URL: http://drooby.ddns.net/00101010101001/morte.m68k
URL Status:Offline
Host: drooby.ddns.net
Date added:2025-09-04 09:17:32 UTC
Last online:2025-09-29 15:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Status unknown
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Blocked
DNS4EU :Not blocked
Reporter: BlinkzSec
Abuse complaint sent (?): Yes (2025-09-04 09:18:09 UTC to abusepoc{at}afrinic[dot]net)
Takedown time:25 days, 6 hours, 39 minutes Bad (down since 2025-09-29 15:57:46 UTC)
Tags:botnetdomain elf mirai link ua-wget

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2025-09-18n/aelf daa678a9af2e9cc29fdd4f2adc9af6e7e9764d6c53dd50a9e156019928e94615Virustotal results 58.46%Mirai
2025-09-17n/aelf 60302a1e56b5dc34f0605d2edb62e06b0ea609fc22ece7a62fdc9aca252afc4eVirustotal results 59.32%Mirai
2025-09-14n/aelf 6f18cc27a2a04a25f9f25691f3636588353cb37aa1791b52149451cbae46bbccVirustotal results 63.08%Mirai
2025-09-13n/aelf 602724b6059c2c028ee2a0c3815cee2a935d33c13a6d13e7502ad46e94034294Virustotal results 58.46%Mirai
2025-09-10n/aelf 601bcbe1143470e0cff30904e691687556a99d0805a3f1b90621cc1061290d1cVirustotal results 57.81%Mirai
2025-09-09n/aelf 8bb9e424825a5c2f38d4c005c014f83600f170732b26a4fed7086e67cf838e72Virustotal results 57.81%Mirai
2025-09-04n/aelf 6c28b57074afb870e116abb0f2e053d265fe0d3f04005807e7ae44aae0788662Virustotal results 62.50%Mirai