URLhaus Database

You are currently viewing the URLhaus database entry for http://213.209.143.64/bins/zerarm7 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:3726267
URL: http://213.209.143.64/bins/zerarm7
URL Status:Offline
Host: 213.209.143.64
Date added:2025-12-05 18:07:25 UTC
Last online:2025-12-19 00:XX:XX UTC
Threat:Malware download Malware download
Reporter: NDA0E
Abuse complaint sent (?): Yes (2025-12-05 18:08:13 UTC to abuse{at}virtualine[dot]org)
Takedown time:13 days, 6 hours, 46 minutes Bad (down since 2025-12-19 00:54:13 UTC)
Tags:censys elf mirai link ua-wget

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2025-12-17n/aelf 85e820c56acd10a63589c956ac80b187e1519a5ce248684656763150c044a27en/aMirai
2025-12-17n/aelf ef885bc4081bea74842eee840a90c48901bec4356b047ddc3ac19c98fcf2598en/aMirai
2025-12-16n/aelf 4e95334ee4d507f28fe0895dbb6d895cef6b620283e5d7b2c181687ff4f72359n/aMirai
2025-12-16n/aelf 3db6b24eb26a076e5702499332a5f22b085ba585dea15f1fc9bfd95998b6c854n/aMirai
2025-12-16n/aelf f367b003d782c9b8b07fc4b214959a3b67b05dddcc1c617cbeab360b25f84ba9n/aMirai
2025-12-16n/aelf 430d4e59301f367fd53c86c62b640b9a2331fb078c0e47936b75de2596d80ee1n/aMirai
2025-12-15n/aelf 1070fe59ad847da5109a9d95fd69ef4f3fefcc86af57db1c26cdb32b237a40e0n/aMirai
2025-12-14n/aelf 76c3372be9f7508aa8dac82a02725a9845a94dc87a5bf7f6263f874bbdef132fn/aMirai
2025-12-14n/aelf cb0d819e976cd3cae8c6d18c306b90d7dad904d355b46ad803d68ec8e2533e1bn/aMirai
2025-12-09n/aelf bb63108b584cabb39ad72fb5d79d80d325b5cfcd3e0511015129d1fb8fcaf29fn/aMirai
2025-12-07n/aelf ef12fe69eb0c0ec839cc768a64b74563981254355bfc070aa3f710ef76444447n/aMirai
2025-12-05n/aelf 07a3cd112d50a1758a535cc97221249993a84090f5144ed81d235daeeae525e9n/aMirai