URLhaus Database

You are currently viewing the URLhaus database entry for http://130.12.180.2/bins/xnxnxnxnxnxnxnxnriscv32xnxn which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:3739945
URL: http://130.12.180.2/bins/xnxnxnxnxnxnxnxnriscv32xnxn
URL Status:Offline
Host: 130.12.180.2
Date added:2025-12-22 07:00:22 UTC
Last online:2026-01-12 12:XX:XX UTC
Threat:Malware download Malware download
Reporter: abuse_ch
Abuse complaint sent (?): Yes (2025-12-22 07:01:32 UTC to abuse{at}virtualine[dot]org)
Takedown time:21 days, 5 hours, 53 minutes Bad (down since 2026-01-12 12:54:37 UTC)
Tags:elf mirai link ua-wget

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2026-01-10n/aelf 7b992e44140e3c83161be35cfe9a5ecec8c9c6f1b8fd329ec74bb086561e1d23n/aMirai
2026-01-01n/aelf 8d4114085617b84cccd9aabfd521f669d11e8e4f8dc1f966f5ec12ba1d07cf6fn/aMirai
2025-12-31n/aelf eaa4fe4c5622661698ee95e030cb7d60516c9a9abdf6e40f8e9d4fa8226de876n/aMirai
2025-12-31n/aelf 829966e77d23abd834e23fa34f336ee41b35a298ae317b3031ff2cb64279d3b0n/aMirai
2025-12-22n/aelf 6d6c9579ca57b1d3d5a3961be5ef90e7e145f071263042b23afa461e99e3713an/aMirai