URLhaus Database

You are currently viewing the URLhaus database entry for http://130.12.180.20:36695//arm5 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:3745695
URL: http://130.12.180.20:36695//arm5
URL Status:Offline
Host: 130.12.180.20
Date added:2025-12-29 06:55:07 UTC
Last online:2026-01-31 23:XX:XX UTC
Threat:Malware download Malware download
Reporter: botnetkiller
Abuse complaint sent (?): Yes (2025-12-29 06:56:11 UTC to abuse{at}virtualine[dot]org)
Takedown time:1 month, 3 days, 16 hours, 39 minutes Bad (down since 2026-01-31 23:35:46 UTC)
Tags:arm elf geofenced mirai link ua-wget USA

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2026-01-28n/aelf 6054bd1f72f352f774fddf4f6e920a698fdec296212b4e804f9f70e0e4f61e49n/aMirai
2026-01-25n/aelf 645e42550a44d8d0e0a2abe2b214eed4a608425b4107b9eac8d13a3121f1971an/aMirai
2026-01-23n/aelf 4788d630ef841509bb7e7621a13501d5dae99b261347890db7d81ba8c3b0e5aen/aMirai
2026-01-20n/aelf 0867a62df3fcf2a7f563dd01d762542f6e7d10087863cba8c76c4d23743e5929n/aMirai
2026-01-02n/aelf d483e6237a589fe31eb14a318e8547d71e9c741c822b1c0d31896fea8a79be2en/aMirai
2026-01-01n/aelf a02c2092975c10068d16ee1ddb67a7fb33e06c8eaaf4ae8561ba38616e54263bn/aMirai
2025-12-29n/aelf fc542ad670c36e48b6bf573678e5e81fe884d231807256ecd06fa88801cb8eaan/aMirai