URLhaus Database

You are currently viewing the URLhaus database entry for http://91.92.242.138/.Sm68kUNO which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:3716811
URL: http://91.92.242.138/.Sm68kUNO
URL Status:flame Online (spreading malware for 8 hours, 9 minutes)
Host: 91.92.242.138
Date added:2025-11-25 23:12:22 UTC
Threat:Malware download Malware download
Reporter: botnetkiller
Abuse complaint sent (?): Yes (2025-11-25 23:13:13 UTC to abuse{at}lanedo[dot]net)
Tags:elf geofenced m68k mirai link ua-wget USA

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2025-11-25n/aelf d303cc7e25c65716ec3a0908cb7b4f311bc1e8c553f59f2fd570da6b97567f4en/aMirai