URLhaus Database

You are currently viewing the URLhaus database entry for http://178.16.54.217/hiddenbin/boatnet.arm6 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:3665462
URL: http://178.16.54.217/hiddenbin/boatnet.arm6
URL Status:flame Online (spreading malware for 3 months, 4 days, 22 hours, 28 minutes)
Host: 178.16.54.217
Date added:2025-10-09 03:05:18 UTC
Threat:Malware download Malware download
Reporter: BlinkzSec
Abuse complaint sent (?): Yes (2025-10-09 03:06:15 UTC to abuse{at}metaspinner[dot]net)
Tags:elf mirai link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2026-01-09n/aelf b61d7a6b9f3a14070c3afcc9a7c5da255cb4ead06f9607b7705f138977606a44n/aMirai
2026-01-04n/aelf 2c0602f505d90397621fa76bc947823564fe785db91b6c753b85664eac8ffb49n/aMirai
2025-10-09n/aelf 56e70cbed535add9adcfbd9a427a4a449ff87570c7e4a4123d35361bfaed1949n/aMirai