URLhaus Database

You are currently viewing the URLhaus database entry for http://151.242.30.13/bins/sh4 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:3719325
URL: http://151.242.30.13/bins/sh4
URL Status:flame Online (spreading malware for 25 days, 14 hours, 49 minutes)
Host: 151.242.30.13
Date added:2025-11-29 04:00:10 UTC
Threat:Malware download Malware download
Reporter: botnetkiller
Abuse complaint sent (?): Yes (2025-11-29 04:01:13 UTC to report{at}abuseradar[dot]com)
Tags:elf geofenced mirai link opendir SuperH ua-wget USA

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2025-12-15n/aelf 14d4af82d5566a2cd3a4f81aef840a0f5d4c6f62f95eee5d7ae9e838bccabdf3n/aMirai
2025-12-13n/aelf 69093ef0bd87f2e329863cd4d9f682d04e05d22e8f075c71d8b9bc56cdcca073n/aMirai
2025-12-13n/aelf 313dc0c6aff5aedde146233d5e85adbb2ed29521b6d90534333610d42ada04c7n/aMirai
2025-12-04n/aelf b1eccaad4aab582b888afd3ff0964c870aa22c01c6c848a5402f42f7461eee7fVirustotal results 53.12%Mirai
2025-12-01n/aelf 4c047ad8042d6ea8e338e77b133cdf4be8ded4734ba150c3bc2865812dca2a0fVirustotal results 51.56%Mirai
2025-11-29n/aelf 31c21d5080f6e516124f8e9d9ca4011e9c6133766fd58c2e6b0b4e222fe78a0cVirustotal results 54.69%Mirai