URLhaus Database

You are currently viewing the URLhaus database entry for http://91.92.240.38/aarch64 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:3748050
URL: http://91.92.240.38/aarch64
URL Status:flame Online (spreading malware for 12 days, 5 hours, 57 minutes)
Host: 91.92.240.38
Date added:2026-01-01 12:49:19 UTC
Threat:Malware download Malware download
Reporter: ClearlyNotB
Abuse complaint sent (?): Yes (2026-01-01 12:50:20 UTC to abuse{at}lanedo[dot]net)
Tags:elf mirai link ua-wget

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2026-01-12n/aelf 6481d3a1c1d639a82462ef25cd74e644866baea0a18a28a3bb56cf5c49c381d8n/aMirai
2026-01-12n/aelf 1c69b69d87bad1d43c32d2f139f96676e3a7d863ba6ed0d0e26e843c7dbc45acn/aMirai
2026-01-05n/aelf 1bc624498a150c2401e968c270b38f92756ea2da878fb96419b243c07811395bn/aMirai
2026-01-04n/aelf 958b12be9d9a505661a548098d956122f435b468832480de80c39b5efb0e86c6n/aMirai
2026-01-02n/aelf b4b4acaa4ded42e25977d6b11c480bff3169bd55da16b685126f7432b52bfeean/aMirai
2026-01-01n/aelf 224aacf9057f11e90a086061a7941d7935e09d5472641a446fc5df5764993024n/aMirai