URLhaus Database

You are currently viewing the URLhaus database entry for http://89.32.41.16/bins/psh4 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:3840656
URL: http://89.32.41.16/bins/psh4
URL Status:flame Online (spreading malware for 2 months, 11 days, 12 hours, 30 minutes)
Host: 89.32.41.16
Date added:2026-05-06 19:19:20 UTC
Threat:Malware download Malware download
Reporter: botnetkiller
Abuse complaint sent (?): Yes (2026-05-06 19:20:16 UTC to abuse{at}hostmaze[dot]com)
Tags:elf mirai link opendir SuperH ua-wget

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2026-06-20n/aelf dde65e9db0231051abe658d6edda8e5e4fc08e7d67d22abf40ed8476bc8af42fn/aMirai
2026-06-18n/aelf afd19c7e46fef49fcd095806fe43735f68bcfd5a6d4ca3d7b7fe06fc0bbb7ad9n/aMirai
2026-06-16n/aelf 893fb76c3be1ef821fea1b3f581418338a1a22e5b598652bf3934eb60de67ea0n/aMirai
2026-06-16n/aelf 66ef8da9addeba0e7de0fefae2d0c33c29d2442894950d2244ab04883da30fb3n/aMirai
2026-06-09n/aelf e31baaf0b4c81494cbc21047b396cfe0f8ad8d83592c28a829a55a2090f3c0e4n/aMirai
2026-05-07n/aelf c6486adf985db95d787e1e1b064465513aaa1fa582e24163b83324aab67a5725n/aMirai
2026-05-06n/aelf 66fa56021b909359c796bedc33b01acd4e31e01c602eb1355f4ec3513a6155aen/aMirai