URLhaus Database

You are currently viewing the URLhaus database entry for http://89.32.41.16/bins/psh4 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:3840656
URL: http://89.32.41.16/bins/psh4
URL Status:flame Online (spreading malware for 1 day, 6 hours, 15 minutes)
Host: 89.32.41.16
Date added:2026-05-06 19:19:20 UTC
Threat:Malware download Malware download
Reporter: botnetkiller
Abuse complaint sent (?): Yes (2026-05-06 19:20:16 UTC to abuse{at}hostmaze[dot]com)
Tags:elf mirai link opendir SuperH ua-wget

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2026-05-07n/aelf c6486adf985db95d787e1e1b064465513aaa1fa582e24163b83324aab67a5725n/aMirai
2026-05-06n/aelf 66fa56021b909359c796bedc33b01acd4e31e01c602eb1355f4ec3513a6155aen/aMirai