URLhaus Database

You are currently viewing the URLhaus database entry for http://31.56.209.222/zero.armv7l which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:3857188
URL: http://31.56.209.222/zero.armv7l
URL Status:Offline
Host: 31.56.209.222
Date added:2026-06-01 20:43:18 UTC
Last online:2026-06-20 09:XX:XX UTC
Threat:Malware download Malware download
Reporter: tolisec
Abuse complaint sent (?): Yes (2026-06-01 20:44:10 UTC to abuse{at}swissnetwork[dot]io)
Takedown time:18 days, 13 hours, 6 minutes Bad (down since 2026-06-20 09:51:04 UTC)
Tags:elf mirai link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2026-06-10n/aelf 7da672e7724059bee3484f18a98c387e7f1b16bf1df541d4ff7febfd5c798074n/aMirai
2026-06-09n/aelf 771b53080bd868d2b006aeb4077ff6503d60115db6c94624bc6b0bbc1cf698a2n/aMirai
2026-06-09n/aelf 1c4f277a3176ea468a8850b38372daf7cfcd3f44ca77de009af5a2ebbef5a9b6n/aMirai
2026-06-08n/aelf 2ff2cd8905d460657accda31408b249329fd39810cac556ab9b8a50c6a25d44an/a
2026-06-07n/aelf e2a4438cef6f08b706d3fde8d0b90cb5febd57a002ab850e980e51d8fe5b8f8cn/aMirai
2026-06-06n/aelf d8ae3d33313f68341836f45e876e7b9d0de9594a19a85521a870810af5901025n/aMirai
2026-06-06n/aelf 0ca55b1d6fba8c84f2678cb7793613a228e479fc58d6c6fda157d4972b8ec10fn/aMirai
2026-06-01n/aelf 1f92f98ec05335281ac746d097026fd89a14a3b74eadd37b9c02901339aed25bn/aMirai