URLhaus Database

You are currently viewing the URLhaus database entry for http://srv892825.hstgr.cloud/systemcl/x86_64 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:3713677
URL: http://srv892825.hstgr.cloud/systemcl/x86_64
URL Status:flame Online (spreading malware for 1 month, 3 days, 15 hours, 55 minutes)
Host: srv892825.hstgr.cloud
Date added:2025-11-21 22:12:15 UTC
Threat:Malware download Malware download
URLhaus blocklist:Blocked
Spamhaus DBL :Abused domain (malware)
SURBL :Not blocked
Quad9 :Blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Blocked
OpenBLD :Blocked
DNS4EU :Blocked
Reporter: botnetkiller
Abuse complaint sent (?): Yes (2025-11-21 22:13:14 UTC to abuse{at}hostinger[dot]com)
Tags:elf geofenced mirai link ua-wget USA x86

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2025-12-20n/aelf 970d48b9edbe3f7877701b695eec9e47f7f64409a951de973b4e40e72e0da785n/aMirai
2025-12-19n/aelf a2a1fb60fdd552ac64941f4aa8bbb5914b8b25d1a43097337b5a8afb6598ba0en/aMirai
2025-12-14n/aelf ef31846f8d265aafd1270df025c64b31285a00ec361a51bbd5ea87677e073502n/aMirai
2025-12-13n/aelf b666e212424b1f06a5eac020055c6521a6dfed257a23e1b6156a4eff1eb5031an/aMirai
2025-12-04n/aelf c5f9a88d8ab060c8fedbb93c6f905b158740f04ae4453e8716b9c418f99be15eVirustotal results 43.08%Mirai
2025-12-04n/aelf ed71d4c8f7be4a5b3c2028efe7f89e79f85b4e19820a150eba7284f6c2db592bVirustotal results 49.23%Mirai
2025-11-21n/aelf 6f83f9621bd8b0e62a71359b184969f147b0046328455d84a8f20aa1a7ad0faeVirustotal results 59.38%Mirai