URLhaus Database

You are currently viewing the URLhaus database entry for http://92.42.100.131/tplink/arm which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:3856303
URL: http://92.42.100.131/tplink/arm
URL Status:Offline
Host: 92.42.100.131
Date added:2026-05-31 07:19:29 UTC
Last online:2026-06-25 00:XX:XX UTC
Threat:Malware download Malware download
Reporter: abuse_ch
Abuse complaint sent (?): Yes (2026-05-31 07:20:16 UTC to alexcimadamore{at}gmail[dot]com)
Takedown time:24 days, 16 hours, 46 minutes Bad (down since 2026-06-25 00:06:55 UTC)
Tags:elf mirai link ua-wget

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2026-06-12n/aelf 060d4594102e3e0e305a532b72e4479f3c3a9da126deece2d780d8fe8a788699n/aMirai
2026-06-12n/aelf b54e8537d844730f2dcbd3d3c61fba7b6e157141f157aa251bec400df0cc3e6fn/aMirai
2026-06-10n/aelf d2fb416e631a8385cfee7a0769cd7aeaf84c0e175ce2a44509c60e9517779b39n/aMirai
2026-06-10n/aelf d105462b5cc1c60073a4115791a00cda308507185378009a203b9f1219af303en/aMirai
2026-06-10n/aelf 1ff551e8f438916ede668ea1a388df93ebc9786a9c1e40d1bad7dd35490aa3fcn/aMirai
2026-06-09n/aelf 5d91349723270cc024e60265467a1392ca4da5d34b12b5588b1e298e2da3410an/aMirai
2026-06-03n/aelf 5917065d40454761105511f6c63d590cf9174d02453ad2f94d228fe9c996a090n/aMirai
2026-06-02n/aelf bb93a456ab8706c0f22f22d59ca613a7a14ba2a4c19b2f461fced5db0059577fn/aMirai
2026-06-02n/aelf 9b2c9193978809f503c09ae4aa0848575436aea2dc64e5b85542c2a350ab1e65n/aMirai
2026-06-01n/aelf 0cf5619b0577873f43e7960c30e7e73aacd49ba26089e57e44520b7fb4e09c63n/aMirai
2026-05-31n/aelf c48e90bf0b336d05f0e18994c0d5be637ca123d6fdeeceb6a83ad9c393e78b9dn/aMirai