URLhaus Database

You are currently viewing the URLhaus database entry for http://31.56.209.222/zero.mipsel which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:3857192
URL: http://31.56.209.222/zero.mipsel
URL Status:Offline
Host: 31.56.209.222
Date added:2026-06-01 20:43:18 UTC
Last online:2026-06-20 08:XX:XX UTC
Threat:Malware download Malware download
Reporter: tolisec
Abuse complaint sent (?): Yes (2026-06-01 20:44:10 UTC to abuse{at}swissnetwork[dot]io)
Takedown time:18 days, 12 hours, 4 minutes Bad (down since 2026-06-20 08:48:43 UTC)
Tags:DDoSAgent elf mirai link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2026-06-15n/aelf ca921bbc5a33fa64d3a5bea672110c98f863bdc76cad7a58f1a832a8fc3fffd3n/aMirai
2026-06-11n/aelf 5fbe02421d2a64401d7fa66a68dbc0833cd405512331a64919fb831887a5d5fan/aMirai
2026-06-10n/aelf 6068adbdb12ccc8d1d80152df902def9730ffe318cbae4feb5f0a6b26f00a193n/aMirai
2026-06-09n/aelf e7c2eff2d9f2e76a1cd48d4920c499d057b1b28f1fe7c43ec1c78b11af15d033n/aMirai
2026-06-08n/aelf f63df0ad3e1e94138bb942d2998337041e2c2362d6fa81b3126d91dcbe368c4bn/aDDoSAgent
2026-06-07n/aelf 201612fec18158cdfafe7eb09995c8b20d45ea7a8e38bc21662230d72fd81058n/a
2026-06-07n/aelf fe5f0469f75966c32d7ce67181ea81321a4a6e7b68b843da79930ffec9d9883cn/aMirai
2026-06-06n/aelf 2d9bd86f98e00aeae196d03d8650fa5b69c0c29cbb4239bf7858888e1bb8a1fdn/aMirai
2026-06-06n/aelf e6e20e3d968364f220c3d09954e06c674475b8b2ff846aca2b6a3b74b8f731b1n/aMirai
2026-06-06n/aelf f4ff17900802e33cbe04e6d8a710a66513ba683ea42aa7167139139cdad3dd27n/aMirai
2026-06-01n/aelf e9aac8a3d62145fdf9d70c37edb7ec1355831006bb2b6cdcba05ba51ccd68461n/aMirai