URLhaus Database

You are currently viewing the URLhaus database entry for http://46.8.78.55:8080/systemctl/bin.armv6l which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:3847406
URL: http://46.8.78.55:8080/systemctl/bin.armv6l
URL Status:flame Online (spreading malware for 2 months, 2 days, 11 hours, 54 minutes)
Host: 46.8.78.55
Date added:2026-05-15 15:49:17 UTC
Threat:Malware download Malware download
Reporter: abuse_ch
Abuse complaint sent (?): Yes (2026-05-15 15:50:18 UTC to abuse{at}cloudbackbone[dot]net)
Tags:elf mirai link ua-wget

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2026-05-26n/aelf fbc4e5e8c0ec973857cd14a72b4f2e2f9d588182c2336c3427783ec858e20bd3n/aMirai
2026-05-22n/aelf a0fe9dfa134bd67a3d81053eaffe2e2e6e1e4c5a66e4de7acbe8b148301ff293n/aMirai
2026-05-22n/aelf 86801dc65498629e596e9576123eccbd4eeb0d94b1c17f86efa84fe05884beacn/aMirai
2026-05-21n/aelf 56cbd90b21d226320c86f2bed01c18448553ae2c8c54ae95f3ab58df5f780a8bn/aMirai
2026-05-18n/aelf db007854a1f8f35678d3f16be61a8f949ef508da346e9b694b57aa885fddf807n/aMirai
2026-05-15n/aelf bd3f1730ddab14b7738bcf408872053d788dc727cfee126730f7ffc13040e3d6n/aMirai