URLhaus Database

You are currently viewing the URLhaus database entry for http://netrip.ddns.net/systemcl/x86_64 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:3683086
URL: http://netrip.ddns.net/systemcl/x86_64
URL Status:flame Online (spreading malware for 2 months, 4 days, 21 hours, 45 minutes)
Host: netrip.ddns.net
Date added:2025-10-21 16:22:19 UTC
Threat:Malware download Malware download
URLhaus blocklist:Blocked
Spamhaus DBL :Abused domain (phishing)
SURBL :Blocked
Quad9 :Not blocked
AdGuard :Blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Blocked
OpenBLD :Blocked
DNS4EU :Blocked
Reporter: tolisec
Abuse complaint sent (?): Yes (2025-11-27 13:52:16 UTC to reportabuse{at}racknerd[dot]com)
Tags:elf mirai link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2025-12-20n/aelf 970d48b9edbe3f7877701b695eec9e47f7f64409a951de973b4e40e72e0da785n/aMirai
2025-12-19n/aelf a2a1fb60fdd552ac64941f4aa8bbb5914b8b25d1a43097337b5a8afb6598ba0en/aMirai
2025-12-14n/aelf ef31846f8d265aafd1270df025c64b31285a00ec361a51bbd5ea87677e073502n/aMirai
2025-12-13n/aelf b666e212424b1f06a5eac020055c6521a6dfed257a23e1b6156a4eff1eb5031an/aMirai
2025-12-04n/aelf c5f9a88d8ab060c8fedbb93c6f905b158740f04ae4453e8716b9c418f99be15eVirustotal results 43.08%Mirai
2025-12-03n/aelf ed71d4c8f7be4a5b3c2028efe7f89e79f85b4e19820a150eba7284f6c2db592bn/aMirai
2025-10-22n/aelf 6f83f9621bd8b0e62a71359b184969f147b0046328455d84a8f20aa1a7ad0faeVirustotal results 41.54%Mirai
2025-10-21n/aelf d167fe5abe306825e029bd799bb645048ccae15dca31ea4ac9fcb8b416142a3aVirustotal results 60.00%Mirai