URLhaus Database

You are currently viewing the URLhaus database entry for http://176.122.27.90/http.server/tmp1.elf which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:3700523
URL: http://176.122.27.90/http.server/tmp1.elf
URL Status:flame Online (spreading malware for 16 days, 1 hours, 36 minutes)
Host: 176.122.27.90
Date added:2025-11-08 12:06:06 UTC
Threat:Malware download Malware download
Reporter: BlinkzSec
Abuse complaint sent (?): Yes (2025-11-08 12:07:17 UTC to abuse{at}it-grad[dot]ru)
Tags:Metasploit opendir

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2025-11-08tmp1.elfelf e134c4df61f494f43fe6fece16a1b8b33e69f022dab25df995c0e09468785edcVirustotal results 61.54%Metasploit