URLhaus Database

You are currently viewing the URLhaus database entry for http://196.251.87.155/00101010101001/morte.x86_64 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:3697422
URL: http://196.251.87.155/00101010101001/morte.x86_64
URL Status:Offline
Host: 196.251.87.155
Date added:2025-11-05 21:44:05 UTC
Last online:2025-11-12 11:XX:XX UTC
Threat:Malware download Malware download
Reporter: tolisec
Abuse complaint sent (?): Yes (2025-11-05 21:45:13 UTC to abuse{at}cheapy[dot]host)
Takedown time:6 days, 14 hours, 8 minutes Bad (down since 2025-11-12 11:53:51 UTC)
Tags:DEU elf geofenced mirai link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2025-11-12n/aelf 8c3f3518f247f415ea5c839524c51773ee552aa5ee25fdfea6a3968ebb40d241Virustotal results 39.06%Mirai
2025-11-10n/aelf b5768810f4ece322779c91d070bdb7ba4d4b05f8c799bd3f4b8966987378de0aVirustotal results 41.54%Mirai
2025-11-09n/aelf dc429fb2adf667330b96b8baa54ad0f9dc6de16c527d4de8135087107cc37c12Virustotal results 42.19%Mirai
2025-11-09n/aelf b62f61ff3db716859ea6e47971a99c90579cf2dc347ac00417d34ceadaa0bd8aVirustotal results 38.46%Mirai
2025-11-08n/aelf 55153ac8d1c681ee19432b2c774cfd78fac25e733b09b4606c41e28b7916dd8cn/aMirai
2025-11-08n/aelf d80b180c53cf88f1faea677b49df604351c4b9fb896d58c597b6ab1ecdfb4819n/aMirai
2025-11-07n/aelf a711edbd85491ecceb68adb1b16d1ed048257f1a53f7066a1ce8069b58ddb840Virustotal results 39.06%Mirai
2025-11-07n/aelf a5af8a3b9df5a58788f5f57e8ae7206c469ab566f6c5b4caecec4a32f44fcf52Virustotal results 40.00%Mirai
2025-11-06n/aelf c5243ff6efd3f304b068504509339243979f8710394014df0a9ac65eda02b7c5Virustotal results 37.50%Mirai
2025-11-05n/aelf fb7c6ced47c3dbfe2e7c4b19fcf63f30f41fda713d5af343f83f0d90c85ae298n/aMirai