URLhaus Database

You are currently viewing the URLhaus database entry for http://teamc2.duckdns.org/00101010101001/morte.arm which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:3697762
URL: http://teamc2.duckdns.org/00101010101001/morte.arm
URL Status:flame Online (spreading malware for 18 days, 3 hours, 32 minutes)
Host: teamc2.duckdns.org
Date added:2025-11-06 07:45:16 UTC
Threat:Malware download Malware download
URLhaus blocklist:Blocked
Spamhaus DBL :Abused domain (malware)
SURBL :Blocked
Quad9 :Blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Blocked
OpenBLD :Blocked
DNS4EU :Blocked
Reporter: BlinkzSec
Abuse complaint sent (?): Yes (2025-11-22 22:45:16 UTC to abuse{at}vpsvault[dot]host)
Tags:botnetdomain elf gafgyt link mirai link ua-wget

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2025-11-24morte.armelf ff2fcda7803f95d2c26456ef0905bb00ddc352524f7a8ab11f3ce3ff33684b31Virustotal results 26.98%Mirai
2025-11-23morte.armelf 1b1a2fb34139cfb426301a7077b6e56bc116cc559fe67aabb83d2e9682bed69bVirustotal results 30.16%Mirai
2025-11-22morte.armelf 2e494f734701ab05cbe6a64a651e12d21858399c26ff2565802303dcb8fc45a2n/aMirai
2025-11-12morte.armelf 70bd62673da4b4863a79b91bc5ba9a5636257685dbb981e669af123313def828n/aMirai
2025-11-11morte.armelf 676f07b21ec3361e11448aa36989bbb7e788782ee7b76e6159e170be3c31555eVirustotal results 39.06%Gafgyt
2025-11-09morte.armelf 6a7d9348e63a3d48bbf8c423f4b129de09dec30de6b648ea179b54bfdffca1ddVirustotal results 27.69%Mirai
2025-11-09morte.armelf 421914f8d100f529cc4ec8bef4b5d1689137deee6964d2b2ba07a697abfc7691Virustotal results 26.56%Mirai
2025-11-08morte.armelf 1dbf137ce559af2b55c6d16727671b7799d4886816255d025a2b5be037d680e2n/aGafgyt
2025-11-08morte.armelf e40ebba75f3c7095b74fedfbd56a86628df76b9bed6621b961f3af416850e3eaVirustotal results 28.12%Mirai
2025-11-07morte.armelf 52a837a2153d2232a248d758f2fa6ecd9defb7a83acc87830a316c45520eb222Virustotal results 26.56%Mirai
2025-11-07morte.armelf 8dfa1b63873d8aa1ffb943710cca05bd9d563db6851361923103fbdc35dc98b3Virustotal results 29.69%Mirai
2025-11-06morte.armelf de9584462860682ca4f177fbf91a12cdfadabb8ddb9449f8ec63f1c847a2b025n/aMirai