URLhaus Database

You are currently viewing the URLhaus database entry for http://teamc2.duckdns.org/00101010101001/morte.sh4 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:3697760
URL: http://teamc2.duckdns.org/00101010101001/morte.sh4
URL Status:Offline
Host: teamc2.duckdns.org
Date added:2025-11-06 07:45:15 UTC
Last online:2025-11-23 17:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Abused domain (botnet C&C)
SURBL :Blocked
Quad9 :Blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Blocked
OpenBLD :Blocked
DNS4EU :Not blocked
Reporter: BlinkzSec
Abuse complaint sent (?): Yes (2025-11-22 22:30:17 UTC to abuse{at}vpsvault[dot]host)
Takedown time:17 days, 9 hours, 41 minutes Bad (down since 2025-11-23 17:28:06 UTC)
Tags:botnetdomain elf gafgyt link mirai link ua-wget

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2025-11-23n/aelf dac512886e310336c0f39fd82cfdb69d6100ac1dc1a981e1fca7cd4a384a61a6n/aMirai
2025-11-22n/aelf e97096eb400ca9c9093da2518b913f845246c482101cb7a3826cd2179d40e331Virustotal results 53.85%Mirai
2025-11-12n/aelf 66399f695954db7bf91e7e52e7e8f1331b4e0fb091610c5b22a4c1172b942531Virustotal results 63.08%Mirai
2025-11-11n/aelf 2988f90a969a0b0854e5723f6a848f1e23edfd2d64dfc43d4c041b1a5a5af9e4Virustotal results 64.52%Mirai
2025-11-09n/aelf 77931039f828d4ff7d68fc87b52b5d4f4c51982d420057cf3215d1874d2bc0d6n/aMirai
2025-11-09n/aelf 26ee6da9ed5801a1cff5c0fae86dbc7af5f857364380a7fe6a3a7c47ce140f35Virustotal results 60.94%Mirai
2025-11-08n/aelf 13ba233a5f5eee120980717639fbda989d5bb94301e7d90cc280c4399a7f948fVirustotal results 60.32%Mirai
2025-11-07n/aelf 696e8d862ac88c010a36a16d0bf84c80b08d6ab47db4078aea013694f3bc4760Virustotal results 52.54%Mirai
2025-11-07n/aelf 2ce8ccef24e979d2b071aaea88997d51247f2420aa3c4286df310c9e521fe5e7Virustotal results 54.69%Mirai
2025-11-06n/aelf 41eb114186f138b88fc1014df1f51e2445b5602cbdd88d6cc611aa1a3d130980Virustotal results 59.38%Mirai