URLhaus Database

You are currently viewing the URLhaus database entry for http://45.148.120.23/bins/pmips which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:3759565
URL: http://45.148.120.23/bins/pmips
URL Status:Offline
Host: 45.148.120.23
Date added:2026-01-17 18:15:22 UTC
Last online:2026-02-28 19:XX:XX UTC
Threat:Malware download Malware download
Reporter: NDA0E
Abuse complaint sent (?): Yes (2026-01-17 18:16:09 UTC to abuse{at}spectraip[dot]nl)
Takedown time:1 month, 12 days, 1 hours, 13 minutes Bad (down since 2026-02-28 19:29:28 UTC)
Tags:elf mirai link ua-wget

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2026-02-26n/aelf cfa09e4cc6203fd08bedb20b2d4929f5036ab6e9bdd1f08c8fad07b24e67b8b3n/aMirai
2026-02-26n/aelf cf1b3c8d3fa0c89c58af0e7f48eddd1d8c206bd002d1accb0af540a6e2921been/aMirai
2026-02-21n/aelf 45112c11d5784f6368260c5919119755c0316869d0c2c5c3eb6f4337a7be8df0n/aMirai
2026-01-17n/aelf 4c46273d4d2e8b7404b2bb6f4809d2869f946f9d7359a21d700f24125a86c1bcn/aMirai