URLhaus Database

You are currently viewing the URLhaus database entry for http://94.154.35.154/mipsel.uhavenobotsxd which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:3686381
URL: http://94.154.35.154/mipsel.uhavenobotsxd
URL Status:flame Online (spreading malware for 26 days, 12 hours, 7 minutes)
Host: 94.154.35.154
Date added:2025-10-24 23:37:09 UTC
Threat:Malware download Malware download
Reporter: botnetkiller
Abuse complaint sent (?): Yes (2025-10-24 23:38:14 UTC to abuse{at}pitline[dot]net,abusep{at}kharkiv[dot]com)
Tags:elf geofenced mips mirai link ua-wget USA

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2025-11-20n/aelf 63e9b33978e589360315683699ecc30aae88ffac38ad12a9fabf9b88d185676aVirustotal results 25.00%Mirai
2025-11-19n/aelf e836ce0416323c6651d9d15def518983f0c04300282ae77fa335ec009a6adcddn/aMirai
2025-11-19n/aelf 6f60b7c773bcb79b2a327e647eba6e5e21509447e1eaa6418434d62a17be51ban/aMirai
2025-11-19n/aelf 91a17b97dbb95ae1e5d1bdb363ae0156d67da47fcb025cdb72e6e618e90ef303n/aMirai
2025-11-19n/aelf 135d40b8ca494f32c5a82bd93beab730d06634e1bec60b2ef499df5a71b74ef2n/aMirai
2025-11-19n/aelf 22b688bd6fd917561fc369a5fcd26a2f4b66858d4404a2dda87691beecca2cfan/aMirai
2025-11-17n/aelf e795c83dae5affbbe8c245643b84e5dfaeb6658f775ce785b02b9a503e8dc222Virustotal results 23.44%Mirai
2025-11-10n/aelf 240577310ce13a0c41dce3996b5261e039e70663da0262957901f2f03114b89cn/aMirai
2025-11-09n/aelf 037a2b033803e07ee642ef3f0b53dd7eea069e2ae03b3d03a9ace4506f43d672n/aMirai
2025-11-09n/aelf 638be4d8cdbde633a266b43efcae51e9f6363d69f54a0f75c6f723e1f9d3cb7fn/aMirai
2025-11-09n/aelf 73a7d1dccf72976a892eb2ff3f11d2606e5d1eb4237a074f6d16f14db4c92ec4Virustotal results 23.44%Mirai
2025-11-08n/aelf f17f977aa428a675fe52dc2e6a3db196541b87c343ce74844dd5462aea9fb197n/aMirai
2025-11-08n/aelf c7cb9fea53983c904fc7726ddeddf692bbce9a7661970c5332306ffff357f86an/aMirai
2025-11-08n/aelf 9929999d6f801c8969d2ef6a0b17c0d08a43483712340837fc2a871cb1cd9ebcn/aMirai
2025-11-07n/aelf 83c8b5ecc93878baf8f4ebc54e8ce9271d81215af257af6c445c9176d634b14fVirustotal results 23.33%Mirai
2025-11-06n/aelf 2d3f2884085fddcb272d090e201247fcc9f45be8e133c85d010b375abbe7c4ebn/aMirai
2025-11-06n/aelf 89226c47ed4773b2f64975835ecf6c05cf19a55404adf55eba1d5226305bc1b5n/aMirai
2025-10-26n/aelf c8f15043ded2f18bef1ec19d1fbee187ec0321f7aae18bdf7dc04fb09de9a754Virustotal results 23.44%Mirai
2025-10-26n/aelf 5dae660d25ddfbd60b7519a11f5cd1e650cddba7f4b362ce1c3a503841836784Virustotal results 23.44%Mirai
2025-10-25n/aelf 41b0d4c1fc21e672baa0ad44f0ca0978aae291d40c81ac3b786df1e519fa9ad3n/aMirai
2025-10-24n/aelf abc03b65263d36c60a230f12ee6d313b7203abea3495332dad1a1e7a68a2b4ban/aMirai