URLhaus Database

You are currently viewing the URLhaus database entry for http://91.92.241.10/x86_64.kok which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:3749718
URL: http://91.92.241.10/x86_64.kok
URL Status:Offline
Host: 91.92.241.10
Date added:2026-01-03 18:29:10 UTC
Last online:2026-01-23 20:XX:XX UTC
Threat:Malware download Malware download
Reporter: botnetkiller
Abuse complaint sent (?): Yes (2026-01-03 18:30:18 UTC to abuse{at}lanedo[dot]net)
Takedown time:20 days, 2 hours, 23 minutes Bad (down since 2026-01-23 20:53:42 UTC)
Tags:elf geofenced mirai link ua-wget USA x86

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2026-01-18x86_64.kokelf 3bb5a1a647c716df5c0cdf477329689b9ade084bafee91ee4505437f8f473217n/aMirai
2026-01-14x86_64.kokelf 1570e62aef9187e14d40c0951f9c40ae6b9ab24391a4713f8434943b037fb750n/aMirai
2026-01-13x86_64.kokelf 873687b0875f9454484ecddf75cd5ca42d45372ee89fd6f334f828ff48ee117an/aMirai
2026-01-12x86_64.kokelf 302ec7130c37581b0c5f59c7ddceec53ef2169cb9d66711f7670c4ecf40a118bn/aMirai
2026-01-11x86_64.kokelf 78e260a5118578e0b4d1a55374c217c218c48ab8f7455dd5a28a70746f99f715n/aMirai
2026-01-10x86_64.kokelf 47e1b67862e668c9398b010a3b0d49dfce4162795b5db6219318cef9ba5fcc60n/aMirai
2026-01-09x86_64.kokelf 430122ce9b795d5744234385ebfd0698d767f005cd663f6f6e9761ee1e885661n/aMirai
2026-01-09x86_64.kokelf b5f0994117bf18e836aa1a1281171e823e36ce2480c107291a6b51255b6b324an/aMirai
2026-01-03x86_64.kokelf c6acc6b8b1a257ed0487001ae9347fd97de10a2ffa47a9941b56e93f4da58705n/aMirai