URLhaus Database

You are currently viewing the URLhaus database entry for http://159.223.171.245/jklm68k which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:3858072
URL: http://159.223.171.245/jklm68k
URL Status:flame Online (spreading malware for 3 days, 13 hours, 11 minutes)
Host: 159.223.171.245
Date added:2026-06-03 15:27:06 UTC
Threat:Malware download Malware download
Reporter: uwucutecatgirl
Abuse complaint sent (?): Yes (2026-06-03 15:28:09 UTC to abuse{at}digitalocean[dot]com)
Tags:mirai link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2026-06-06n/aelf 7a18661d41801b61720486a51409747c4bfc2e7b22d07c7037bf6fa1bebeae9fn/aMirai
2026-06-06n/aelf 3be078d7d78dc15aed6b0f3443ef1e86ec60a2c7b6e3b3a28ae9d231df6fd89cn/aMirai
2026-06-06n/aelf 0153066e5d7ee45442def97d1c043ba657dcbcfe1b5218c22fb2d20d3d766cd4n/aMirai
2026-06-05n/aelf 692c07a775dc0f0d29433adf155fe5b024f494b4e2f98c9ef8a2c25bd7534a3bn/aMirai
2026-06-03n/aelf e6e6eab270c1f9931a93729f2ae630b60c3210b092a1e3a276de79506c06f8f8n/aMirai