URLhaus Database

You are currently viewing the URLhaus database entry for http://91.92.241.10/x86_64.kokz which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:3749720
URL: http://91.92.241.10/x86_64.kokz
URL Status:Offline
Host: 91.92.241.10
Date added:2026-01-03 18:29:10 UTC
Last online:2026-01-12 01:XX:XX UTC
Threat:Malware download Malware download
Reporter: botnetkiller
Abuse complaint sent (?): Yes (2026-01-03 18:30:18 UTC to abuse{at}lanedo[dot]net)
Takedown time:8 days, 6 hours, 50 minutes Bad (down since 2026-01-12 01:20:36 UTC)
Tags:elf geofenced mirai link ua-wget USA x86

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2026-01-11x86_64.kokzelf 78e260a5118578e0b4d1a55374c217c218c48ab8f7455dd5a28a70746f99f715n/aMirai
2026-01-10x86_64.kokzelf 47e1b67862e668c9398b010a3b0d49dfce4162795b5db6219318cef9ba5fcc60n/aMirai
2026-01-10x86_64.kokzelf b4acd870a0c58c3e0e8639cf73b5ade6e1249fe063654b08d34a7d7339eee973n/aMirai
2026-01-05x86_64.kokzelf c3cb105a7ffe98533890d15cea4ce9caaa2d984ceca518f52b9143eab083e69cn/aMirai
2026-01-03x86_64.kokzelf ef95d9a07ed4c15f062f6730970876a57228154730f826c7039b931a0415cb5an/aMirai