URLhaus Database

You are currently viewing the URLhaus database entry for http://213.209.143.64/nklsh4 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:3727602
URL: http://213.209.143.64/nklsh4
URL Status:Offline
Host: 213.209.143.64
Date added:2025-12-06 16:37:10 UTC
Last online:2025-12-17 23:XX:XX UTC
Threat:Malware download Malware download
Reporter: BlinkzSec
Abuse complaint sent (?): Yes (2025-12-06 16:38:17 UTC to abuse{at}lanedo[dot]net)
Takedown time:11 days, 7 hours, 16 minutes Bad (down since 2025-12-17 23:54:32 UTC)
Tags:elf mirai link ua-wget

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2025-12-17n/aelf 2784b5dc3be20b4565cf0a5c2581c35d8ddf47895c3294e1ec03095d057a8db3n/aMirai
2025-12-17n/aelf ea9100193aa84dc73c29fb874e8e6fb172ec1d7585695f297ab81e8df00f373en/aMirai
2025-12-17n/aelf 8faa9c4e07b0bcb159683e21ba05b0d2b81ff6b074e701d362d676c14911204an/aMirai
2025-12-16n/aelf f50820b3f0bd90590ce9dffe2b7a18afb908455c72fbb5eda9497d3e452c9224n/aMirai
2025-12-16n/aelf ee8261928002d6ec2a60c67b3ed94338d820a75e1014272aec7434cef86b801fn/aMirai
2025-12-15n/aelf ea4f0eb524348f5039b6b5651fae329cea3cd66fa39845925770400ce94842d1n/aMirai
2025-12-15n/aelf d29fda09e5a24d3093348470d020e019284b5906c8f78ff6dbb43fe522546248n/aMirai
2025-12-15n/aelf 6372ed0e7fd545b514c83248d36cc3301b572e7d7ede3e6675d549958ac40595n/aMirai
2025-12-14n/aelf b06916f8d8fe2388a7e95d190708e82451821c57694121805039375dfe871f67n/aMirai
2025-12-14n/aelf 911d5658eece8784034ab7148a5de7264ee06b70408c90a0ddead590b6c3f164n/aMirai
2025-12-13n/aelf 0b83c706b6cd311f83cce72c0e533711a1477e03b6e89b9aece9313d5742c22fn/aMirai
2025-12-09n/aelf e97aedec12df098bcaf97646f5ba042b440fbf6dde1a349f12db6bfacdd2c1ecn/aMirai
2025-12-07n/aelf 390cfe095960ec2b619fe6beec88632e885008a873204be279481825c9921136n/aMirai
2025-12-06n/aelf ec808fb17266c4008b3c9b57cd3bc0f14e010ed85a67dc2d9a882e7b2c4439c9Virustotal results 38.71%Mirai