URLhaus Database

You are currently viewing the URLhaus database entry for http://31.56.209.222/zero.mips which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:3857194
URL: http://31.56.209.222/zero.mips
URL Status:Offline
Host: 31.56.209.222
Date added:2026-06-01 20:44:19 UTC
Last online:2026-06-20 08:XX:XX UTC
Threat:Malware download Malware download
Reporter: tolisec
Abuse complaint sent (?): Yes (2026-06-01 20:45:15 UTC to abuse{at}swissnetwork[dot]io)
Takedown time:18 days, 11 hours, 39 minutes Bad (down since 2026-06-20 08:24:33 UTC)
Tags:DDoSAgent elf mirai link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2026-06-15zero.mipself fbca14cc7e5058c968c73addfe937549aec8460674cd74df086d1d46775c7b7bn/a
2026-06-11zero.mipself 7ee9c6c2c26eef34a8e751bc789ec89ed0303fa6100fb666e383b0e0e9205631n/aMirai
2026-06-10zero.mipself 82a74fc89051a49ddd7337a8b520d27997960f315d6c59afb2b44362e82513e0n/aMirai
2026-06-09zero.mipself d00a5e9da30b117b9a44f04607263ffe603634024bfdca9668452fa55b56480cn/aMirai
2026-06-08zero.mipself b9a75b071539b6e54d7e7b49873b1b301a19fa936ec35ac7274134abd215d161n/aDDoSAgent
2026-06-07zero.mipself 702e6a19a4ede3ea2d96edd1e8570af3b0e612b80530b56c37ee1d39d425d68bn/aMirai
2026-06-06zero.mipself ebb675df5af535404f15f512b3b8e760a66369604158f34b22487948eaa22a1bn/aMirai
2026-06-06zero.mipself 1f5d6cbf14b81f2fdb724dcf124c772487629ebb559e54513999f67a0cb618edn/aMirai
2026-06-06zero.mipself 0138f6c04444b88bd3ef107ed0f3fd99104de46bd8bdd2a8d696d05ac99acbecn/aMirai
2026-06-01zero.mipself 0e9a4eb615706f7d7099d954e2c09d33cbcde4952177c5910456f4ec1a101975n/aMirai