URLhaus Database

You are currently viewing the URLhaus database entry for http://196.251.87.155/00101010101001/morte.arm5 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:3697421
URL: http://196.251.87.155/00101010101001/morte.arm5
URL Status:Offline
Host: 196.251.87.155
Date added:2025-11-05 21:44:05 UTC
Last online:2025-11-12 13:XX:XX UTC
Threat:Malware download Malware download
Reporter: tolisec
Abuse complaint sent (?): Yes (2025-11-05 21:45:13 UTC to abuse{at}cheapy[dot]host)
Takedown time:6 days, 15 hours, 46 minutes Bad (down since 2025-11-12 13:32:12 UTC)
Tags:DEU elf geofenced mirai link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2025-11-12n/aelf df160fac5cfdece27ef21645ff664f2816187e034b0db7673f05af254a5f607eVirustotal results 39.06%Mirai
2025-11-11n/aelf 46c401c900cd22bf9f25f9629c354628d414fa98fe4c6c898043c01559f7eeefVirustotal results 31.25%Mirai
2025-11-09n/aelf 8904730e5d116f098ee6ce754da8b909c5105c2a87c99ce923774c6d701f6bc1Virustotal results 26.56%Mirai
2025-11-09n/aelf 9dff495aeab1ad81f5d87ea42c9da20fc20d40564704798041899f0a3efff0b5n/aMirai
2025-11-08n/aelf 2150af3d03c0636424e453df3de1434791a2e09e95eb7f6bc628cc115615c4a0n/aMirai
2025-11-08n/aelf 7b40f6a6dd6321cddc1c47375db53b43409bb7ccaf973ca0c48e17475a78184eVirustotal results 28.12%Mirai
2025-11-07n/aelf 2b64907c869e4e56e3f5c86a4b1a9d34b9cf6ce8bdd744cfea58584372a8aee7Virustotal results 28.12%Mirai
2025-11-06n/aelf 6fb63595342f492c66867c859487bcdaa913d88ab60fea183bff5dddc947be44n/aMirai
2025-11-06n/aelf 067596c99fdcc69982183028666d41772b90ab0bfeafb813f0bbe99bde2d5014Virustotal results 25.00%Mirai
2025-11-05n/aelf 1b5877ea179306d2bc577bdda8547ad9478f4f30b67d6f60c6e011058b33843an/aMirai