URLhaus Database

You are currently viewing the URLhaus database entry for http://130.12.180.64/splsh4 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:3739411
URL: http://130.12.180.64/splsh4
URL Status:flame Online (spreading malware for 3 days, 14 hours, 3 minutes)
Host: 130.12.180.64
Date added:2025-12-21 15:13:20 UTC
Threat:Malware download Malware download
Reporter: NDA0E
Abuse complaint sent (?): Yes (2025-12-21 15:14:17 UTC to abuse{at}virtualine[dot]org)
Tags:elf mirai link ua-wget

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2025-12-24n/aelf 677dd974a94d8f27bcbf2d487d0c7f1609324d7fc5c0a9ec7d96500e31e7bccbn/aMirai
2025-12-24n/aelf 33dfbe0bb1570713a9590a1765aca7a5524efafafcce529476f17df090b817c5n/aMirai
2025-12-23n/aelf c0e5e329988731ca2a595ca0a63e768f99c53dd7e6c9d078d01748479d31237cn/aMirai
2025-12-22n/aelf 000b03b1ac1152525503e65266ba1d1697f92a48a9594a3da36293214492af31n/aMirai
2025-12-21n/aelf 0409d17ad9b9cf3872045526dca480ed2b4a5523f2b8e7853389a97ad4e47f30n/aMirai
2025-12-21n/aelf 13f61233c15e5b506231b6ff9478ff3e355466bd82fa5527f2c7f2b4e33f153an/aMirai