URLhaus Database

You are currently viewing the URLhaus database entry for http://23.140.244.57/sh4 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:3829391
URL: http://23.140.244.57/sh4
URL Status:flame Online (spreading malware for 1 month, 1 days, 10 hours, 29 minutes)
Host: 23.140.244.57
Date added:2026-04-23 05:25:17 UTC
Threat:Malware download Malware download
Reporter: NoahB
Abuse complaint sent (?): Yes (2026-04-23 05:26:17 UTC to James{at}22ovz[dot]com)
Tags:mirai link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2026-05-23n/aelf 2f02f1e69a1d0e19aa2403d85dbeb3a8e754de3a84db638bdd8c6595e08b5cfen/aMirai
2026-05-23n/aelf 369c432f8a46231b911f7f23823efc02a966ec2ada6b2236485144ce891a6f18n/aMirai
2026-05-23n/aelf 90028b9fdb38e57ec656ada217e69657a89894450d75af850f4288163f99bcban/aMirai
2026-05-23n/aelf fcc3c7646fdd174c7cc3aa0e3c7fb5f699e0fdcbcef7a57e625b62575c67aed4n/aMirai
2026-04-23n/aelf 91d0add02f99417319e40069337fbbd13b75982b9a33554bf06e39f85719517fn/aMirai