URLhaus Database

You are currently viewing the URLhaus database entry for http://46.8.78.55:8080/systemctl/bin.arc which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:3847409
URL: http://46.8.78.55:8080/systemctl/bin.arc
URL Status:flame Online (spreading malware for 2 months, 5 days, 3 hours, 15 minutes)
Host: 46.8.78.55
Date added:2026-05-15 15:49:17 UTC
Threat:Malware download Malware download
Reporter: abuse_ch
Abuse complaint sent (?): Yes (2026-05-15 15:50:18 UTC to abuse{at}cloudbackbone[dot]net)
Tags:elf mirai link ua-wget

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2026-05-26bin.arcelf 74707438dea1265f4c5218df4a9283fd97af545ecec779f5a1a3d285dcde430bn/aMirai
2026-05-22bin.arcelf cda8f951b9147d755fa313930d27c21025657cc2a7f829dccc394de7aa334e25n/aMirai
2026-05-22bin.arcelf 000848890df52f2e73234c7681e7aaceb9dab00ccbfcb5952ed09f5d4b872c9cn/aMirai
2026-05-21bin.arcelf 4d3a11c0d32c34fd8b4e803dcfd843e2ecbce805f26f2618632aaf7b2b831137n/aMirai
2026-05-15bin.arcelf f72c63b9bb8ea52c32c395d742a8f5d2428b230c18b87a4b7877e259344adc99n/aMirai