URLhaus Database

You are currently viewing the URLhaus database entry for http://teamc2.duckdns.org/00101010101001/morte.arm5 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:3697768
URL: http://teamc2.duckdns.org/00101010101001/morte.arm5
URL Status:Offline
Host: teamc2.duckdns.org
Date added:2025-11-06 07:45:26 UTC
Last online:2025-11-23 15:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Abused domain (phishing)
SURBL :Blocked
Quad9 :Blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Blocked
OpenBLD :Blocked
DNS4EU :Not blocked
Reporter: BlinkzSec
Abuse complaint sent (?): Yes (2025-11-22 21:27:15 UTC to abuse{at}vpsvault[dot]host)
Takedown time:17 days, 7 hours, 48 minutes Bad (down since 2025-11-23 15:51:39 UTC)
Tags:botnetdomain elf gafgyt link mirai link ua-wget

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2025-11-23n/aelf be120b8b2d1bdd04648bffc0d79550559b3265abc74505b35373977d93beee5dn/aGafgyt
2025-11-22n/aelf 38dd1b3d0520b670d6e0b899a25ab5fbf9839a3fa74fd0d0d3f5773625f2a1ben/aMirai
2025-11-12n/aelf df160fac5cfdece27ef21645ff664f2816187e034b0db7673f05af254a5f607eVirustotal results 39.06%Mirai
2025-11-10n/aelf 46c401c900cd22bf9f25f9629c354628d414fa98fe4c6c898043c01559f7eeefVirustotal results 26.15%Mirai
2025-11-09n/aelf 8904730e5d116f098ee6ce754da8b909c5105c2a87c99ce923774c6d701f6bc1Virustotal results 26.56%Mirai
2025-11-09n/aelf 9dff495aeab1ad81f5d87ea42c9da20fc20d40564704798041899f0a3efff0b5Virustotal results 26.56%Mirai
2025-11-07n/aelf 6fb63595342f492c66867c859487bcdaa913d88ab60fea183bff5dddc947be44Virustotal results 21.05%Mirai
2025-11-06n/aelf fcff939fbc114467edd98b5937e0b9e23af797c0f23ecf01e32d37eff77da99an/aMirai
2025-11-06n/aelf 067596c99fdcc69982183028666d41772b90ab0bfeafb813f0bbe99bde2d5014Virustotal results 25.00%Mirai