URLhaus Database

You are currently viewing the URLhaus database entry for http://159.223.171.245/jklarm6 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:3858062
URL: http://159.223.171.245/jklarm6
URL Status:flame Online (spreading malware for 3 days, 0 hours, 14 minutes)
Host: 159.223.171.245
Date added:2026-06-03 15:26:13 UTC
Threat:Malware download Malware download
Reporter: uwucutecatgirl
Abuse complaint sent (?): Yes (2026-06-03 15:27:11 UTC to abuse{at}digitalocean[dot]com)
Tags:mirai link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2026-06-06n/aelf bfbe7015a7845d8fbec9de7136722f8e50a4d5e64a0638c0795f890d5a9c8afdn/aMirai
2026-06-05n/aelf 1f522ef19fb99f6a7a0d83667fe2927bbc3883967629125bd0975a10b388c10bn/aMirai
2026-06-03n/aelf e03a67abec4888dee4eaceab033954ccb0a1315f78a945e6b23bef8847aa5758n/aMirai