URLhaus Database

You are currently viewing the URLhaus database entry for http://92.112.126.188/bins/parm6 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:3849982
URL: http://92.112.126.188/bins/parm6
URL Status:flame Online (spreading malware for 3 days, 20 hours, 12 minutes)
Host: 92.112.126.188
Date added:2026-05-19 09:08:12 UTC
Threat:Malware download Malware download
Reporter: burger
Abuse complaint sent (?): Yes (2026-05-19 09:09:16 UTC to abuse{at}deluxhost[dot]net,report{at}abuseradar[dot]com)
Tags:mirai link opendir

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2026-05-20n/aelf 97170c57f9e0455a647d07228097966cb5b127185d8b181cdd53c833b27c4142n/aMirai
2026-05-19n/aelf 6ff612ce6d56f2211fb9142c36cdce8eff4a08e7be1ea7edb18df957471140b9n/aMirai
2026-05-19n/aelf fa6dd67a0703a23f2c74a2dd5c9df52f1baf5d9e3856142da695c62254536ccen/aMirai