URLhaus Database

You are currently viewing the URLhaus database entry for http://176.65.139.143/POWERPC which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:3828014
URL: http://176.65.139.143/POWERPC
URL Status:Offline
Host: 176.65.139.143
Date added:2026-04-21 21:29:11 UTC
Last online:2026-04-25 11:XX:XX UTC
Threat:Malware download Malware download
Reporter: botnetkiller
Abuse complaint sent (?): Yes (2026-04-21 21:30:18 UTC to abuse{at}stormindustries[dot]llc)
Takedown time:3 days, 13 hours, 37 minutes Bad (down since 2026-04-25 11:07:58 UTC)
Tags:elf gafgyt link mirai link opendir PowerPC ua-wget

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2026-04-24n/aelf 2f7d62f92942a794d1bbc33a6447d2665b98538a9c7a49a236b1d1dd2423cc28n/aMirai
2026-04-23n/aelf e93cf6557d42cdd7657d6571c0afa5b5cee17e5dfd2838f2f18a01a4e55788c1n/aMirai
2026-04-22n/aelf 6388fba119c828a2fb8d7c58038b8f703d1e80b39615a8f1e7cfe0013eca9102n/a
2026-04-21n/aelf e9196b1a7313c41b2acd6eb03f7424aada3d6229c5cb91c0b9856fee0cf24c1bn/aGafgyt