URLhaus Database

You are currently viewing the URLhaus database entry for http://158.94.208.27/bins/psh4 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:3740584
URL: http://158.94.208.27/bins/psh4
URL Status:Offline
Host: 158.94.208.27
Date added:2025-12-22 21:24:17 UTC
Last online:2026-01-10 16:XX:XX UTC
Threat:Malware download Malware download
Reporter: ClearlyNotB
Abuse complaint sent (?): Yes (2025-12-22 21:25:26 UTC to abuse{at}lanedo[dot]net)
Takedown time:18 days, 18 hours, 55 minutes Bad (down since 2026-01-10 16:21:09 UTC)
Tags:elf mirai link ua-wget

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2026-01-10n/aelf 58d58774c2c497deb1f96eb0cadc065dc8699a04c38111d212fcc68808a85cben/aMirai
2026-01-09n/aelf 76e6852da492f3fc3e087b20579f6e315d43860bf4f3a54119ffd8cb5d47c0edn/aMirai
2026-01-03n/aelf 4e49fbeee717728935e64e493d8b0685c0da63b15b10c5c8875f1499e8a89a92n/aMirai
2026-01-03n/aelf ee89fb176f3d53abb8137c782d53589d3d6df1c864682e1d05e8e7a212480e61n/aMirai
2026-01-01n/aelf fa6a15d5310544991c512318f0af5839086c3b0b8b862af9bb96d46cd5372c3fn/aMirai
2025-12-22n/aelf f781d6e0007ab364f1ae59be8e1f6b62bcf1c35bc0144775f62e6352d84ba25dn/aMirai