URLhaus Database

You are currently viewing the URLhaus database entry for http://46.8.78.55/systemctl/bin.i586 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:3821583
URL: http://46.8.78.55/systemctl/bin.i586
URL Status:flame Online (spreading malware for 3 months, 3 days, 8 hours, 11 minutes)
Host: 46.8.78.55
Date added:2026-04-14 19:16:23 UTC
Threat:Malware download Malware download
Reporter: botnetkiller
Abuse complaint sent (?): Yes (2026-04-14 19:17:13 UTC to abuse{at}cloudbackbone[dot]net)
Tags:elf mirai link ua-wget

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2026-05-22n/aelf 2c9ce98f483d305dce4580538b0e929f8b58a54f0442274754810ccd775bc596n/aMirai
2026-05-21n/aelf 9f251c2d2ff9bc2c278e8e5c1297b9897a6542520b11adde9f9aa1d3bd6941f8n/aMirai
2026-05-21n/aelf 70fcb486ae8841bd651ee731caa72774ac6f50256428419d3f506a3f30be55a5n/aMirai
2026-05-18n/aelf 369ea644e59db3ef1068d7615223835628388b2e3ac5c6aadc83b871c061611dn/aMirai
2026-04-14n/aelf 59df147cf8b3ba79833010be75d42b5deec66c09fcb2b4540ec5eaa620566cb7n/aMirai