URLhaus Database

You are currently viewing the URLhaus database entry for http://42.112.26.45/skid.mpsl which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:3619883
URL: http://42.112.26.45/skid.mpsl
URL Status:Offline
Host: 42.112.26.45
Date added:2025-09-08 13:33:19 UTC
Last online:2025-10-13 21:XX:XX UTC
Threat:Malware download Malware download
Reporter: BlinkzSec
Abuse complaint sent (?): Yes (2025-09-08 13:34:11 UTC to hm-changed{at}vnnic[dot]vn)
Takedown time:1 month, 5 days, 8 hours, 11 minutes Bad (down since 2025-10-13 21:45:29 UTC)
Tags:elf gafgyt link mirai link ua-wget

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2025-09-29skid.mpslelf 6a731d8ed31ee578f3cd6359cf61f1f115284166b35d99cde278241cbba03f37Virustotal results 17.19%Gafgyt
2025-09-22skid.mpslelf b8bdfebf1a60b52d37f5ca7b351faf1d7d44bccbdc33aa5b5bd73d20b08572b5Virustotal results 9.38%Mirai
2025-09-21skid.mpslelf 3900f6c280f48b55e2999272c7350b6db056750686bbe2caa961a989f7627d50n/aMirai
2025-09-18skid.mpslelf 36bed4517e8578378cfd5628a11a10458a54424e14567ad74621bef22af72e2bn/aMirai
2025-09-16skid.mpslelf 8716eac52ca88a8abad320d0f588bc9d9cf61029d54f4bbaa8e87f8d253a224fn/aMirai
2025-09-15skid.mpslelf 70a366c3015627254aa959b6f525a350537d35529c2a6364746f7994855f8ce7n/aMirai
2025-09-13skid.mpslelf 390f7eb906603b50adb8fd5e6de93937e2195cf01b0e68418358f6544b8f5c85n/aMirai
2025-09-13skid.mpslelf 20151b784fb7f89385c88075947a9bcfb57a48509fa4d9d454ca9833231c58c4n/aMirai
2025-09-11skid.mpslelf 16c334a1c41874ab9ffc269abb9d1b2feb59e3b739101fe5460159eccb9706f6n/aMirai
2025-09-11skid.mpslelf 47a24588a1462fa372094347586e0e07087311e8210a09acd68d9092f2854939n/aMirai
2025-09-10skid.mpslelf d366c9e12362d828adfa7cb67ce5152de272ef6bf0b5e6a31bddd1ba1e7dd07bn/aMirai
2025-09-09skid.mpslelf 0ef8a50f137a3cf251c31bb5ec8b7939a76e854f018e8e948151f74a39213458n/aMirai
2025-09-08skid.mpslelf 29a9111b1971bff505f4a9cec8bc3fca7f676ab77b32090f6d58dc80224f289en/aMirai
2025-09-08skid.mpslelf ef874965119b3bdb0080c7bf8ae9329e96e47364b59e8ec5ef46a417919522dcVirustotal results 10.94%Mirai
2025-09-08skid.mpslelf 303eb333f34a2f3846afde57acb6045a6e96954da622647164184903f1d29768Virustotal results 42.86%Mirai