URLhaus Database

You are currently viewing the URLhaus database entry for http://130.12.180.64/bins/nabsh4 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:3739226
URL: http://130.12.180.64/bins/nabsh4
URL Status:flame Online (spreading malware for 3 days, 9 hours, 22 minutes)
Host: 130.12.180.64
Date added:2025-12-21 15:02:30 UTC
Threat:Malware download Malware download
Reporter: NDA0E
Abuse complaint sent (?): Yes (2025-12-21 15:03:19 UTC to abuse{at}virtualine[dot]org)
Tags:elf mirai link opendir ua-wget

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2025-12-24n/aelf 7a6b345fbb7ed8e5172788f183f4e8c7efa5804f51f49f3345667ec373bd1b88n/aMirai
2025-12-24n/aelf 20efbd4fb067c90cd93e27018dd8852a28c66af202d7ed18dad0013b9da5b691n/aMirai
2025-12-24n/aelf 33dfbe0bb1570713a9590a1765aca7a5524efafafcce529476f17df090b817c5n/aMirai
2025-12-22n/aelf 0ee3bca3679107e3d0dcb9a3c5f22a1c45dd084bab747e63f73a98ee320f36b6n/aMirai
2025-12-22n/aelf 7697f8554b8d27ab76300a50c4f5a8b8f2c038db46a9309ce61d0997a4c753aen/aMirai
2025-12-21n/aelf daaa10309a39a91cb1314173161cbfcbeafaa7ea2c2c261202151ae048ce7349n/aMirai
2025-12-21n/aelf 0073d8470a001ed1db75c8466c388cdf8608edf64f64289e7545d92702d8759an/aMirai