URLhaus Database

You are currently viewing the URLhaus database entry for http://62.60.159.184/bins/parm which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:3865877
URL: http://62.60.159.184/bins/parm
URL Status:flame Online (spreading malware for 2 days, 7 hours, 4 minutes)
Host: 62.60.159.184
Date added:2026-06-17 01:35:14 UTC
Threat:Malware download Malware download
Reporter: BlinkzSec
Abuse complaint sent (?): Yes (2026-06-17 01:36:10 UTC to abuse{at}netcrafters[dot]host)
Tags:62-60-159-184 elf mirai link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2026-06-19n/aelf 9b6c432f0a6292bcb510d15fbddfcf47a43b68d7eb14316cbfadad40b201c84cn/aMirai
2026-06-18n/aelf 1165677cf4b80c45321379f8df41f3283dd0b67513dc5cacc94c092426f4332cn/aMirai
2026-06-17n/aelf 6bcc2d13c5c37a5110d1bcd3ab6be9fe478795e5b5c8e37560e0d56b94d26271n/aMirai
2026-06-17n/aelf 4ed56c8642d3462aa81310586137324e78d2f135f6e1d3fdb3750c8aad8e9893n/aMirai