URLhaus Database

You are currently viewing the URLhaus database entry for http://62.60.159.184/bins/parm6 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:3865874
URL: http://62.60.159.184/bins/parm6
URL Status:flame Online (spreading malware for 2 days, 7 hours, 3 minutes)
Host: 62.60.159.184
Date added:2026-06-17 01:35:09 UTC
Threat:Malware download Malware download
Reporter: BlinkzSec
Abuse complaint sent (?): Yes (2026-06-17 01:36:10 UTC to abuse{at}netcrafters[dot]host)
Tags:62-60-159-184 elf mirai link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2026-06-19n/aelf 7bec2a9b2d5a482b0468be31546c6ce33e875d93fecea2afaa2b9e4d46902444n/aMirai
2026-06-18n/aelf 8b818a26156080447becd53da5370ecd9e673642356c271fe79ccf9228056d83n/aMirai
2026-06-18n/aelf 5ac51bac7018c766350db3ca8ef588296aa0f67df65fa42740cf33f94bcfdfa8n/aMirai
2026-06-17n/aelf a8b1f41cbec5db022c56a016e3a75d3153fadd655c4bd846269fa19a1fbd08b0n/aMirai
2026-06-17n/aelf 443753a7213d33401fae6251e739c3f1ea48f46ab1bf07cfc6c061da97c50cacn/aMirai