URLhaus Database

You are currently viewing the URLhaus database entry for http://srv892825.hstgr.cloud/systemcl/sh4 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:3724530
URL: http://srv892825.hstgr.cloud/systemcl/sh4
URL Status:flame Online (spreading malware for 20 days, 19 hours, 21 minutes)
Host: srv892825.hstgr.cloud
Date added:2025-12-03 23:25:10 UTC
Threat:Malware download Malware download
URLhaus blocklist:Blocked
Spamhaus DBL :Abused domain (malware)
SURBL :Not blocked
Quad9 :Blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Blocked
OpenBLD :Blocked
DNS4EU :Blocked
Reporter: botnetkiller
Abuse complaint sent (?): Yes (2025-12-03 23:26:15 UTC to abuse{at}hostinger[dot]com)
Tags:elf geofenced mirai link SuperH ua-wget USA

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2025-12-24n/aelf 94311880fc4a17910d18cc6cb2ea64fd4cef29ac2653f21e03cbb195c7f140afn/aMirai
2025-12-23n/aelf a4505941a2503ba6dac66d3110ae0a93f278ee52fc24b77eff9e23dc6976d978n/a
2025-12-20n/aelf 6d1e8f244ece4575dd4fa0e405b758ba2bf4b265cdf25eda7084d2d7bd3d1a83n/aMirai
2025-12-19n/aelf e6533dbffd6c21c4dd57f854ba5ac2d0e8ac1b81ebfef63c5444d466c691937an/aMirai
2025-12-13n/aelf ad899bc9d6e9ae87ed14efce57595e358b7e8ab9deb8d258cf68363816e8e946n/aMirai
2025-12-04n/aelf 0db6a24801c0d8c0d3cb88c3fb40aaced0e50a4b96b56f9a8389238b3cc643beVirustotal results 49.23%Mirai
2025-12-03n/aelf f7cb757927c07b0abec0bdb8d8cb07a784d672da50b5846ffdcf598ea6f622f2Virustotal results 50.77%Mirai