URLhaus Database

You are currently viewing the URLhaus database entry for http://178.16.54.217/hiddenbin/boatnet.arm6 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:3665462
URL: http://178.16.54.217/hiddenbin/boatnet.arm6
URL Status:flame Online (spreading malware for 4 months, 11 days, 18 hours, 50 minutes)
Host: 178.16.54.217
Date added:2025-10-09 03:05:18 UTC
Threat:Malware download Malware download
Reporter: BlinkzSec
Abuse complaint sent (?): Yes (2025-10-09 03:06:15 UTC to abuse{at}metaspinner[dot]net)
Tags:elf mirai link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2026-02-11n/aelf b8b1d738e081b34b80821457cded32dedc7192da53c23a012b765bd231563602n/aMirai
2026-01-29n/aelf 47ad98f1c72bf29d0791b1f22a6d62bdfeb18410eef72d25b61d671ef013c88an/aMirai
2026-01-28n/aelf 644de80b6ee185e5b37edc8d9af882f58c9f0ae459f254b24215a32741f73ba7n/aMirai
2026-01-28n/aelf 6dc661db497040c818e1e6469f6c84d82fbef1d43d08c5863b626a60c849b2ecn/aMirai
2026-01-25n/aelf ce76c3bf616c342d9100abfb3dc5c3eedd362c1cfd27c5da38d43a650af2b90bn/aMirai
2026-01-16n/aelf b2e80c1363a51a4a8817475fee11f35ddfe3ac26af7cb3dfbc80d6d5a9aa03e1n/aMirai
2026-01-09n/aelf b61d7a6b9f3a14070c3afcc9a7c5da255cb4ead06f9607b7705f138977606a44n/aMirai
2026-01-04n/aelf 2c0602f505d90397621fa76bc947823564fe785db91b6c753b85664eac8ffb49n/aMirai
2025-10-09n/aelf 56e70cbed535add9adcfbd9a427a4a449ff87570c7e4a4123d35361bfaed1949n/aMirai