🤲🏼 NEW | abuse.ch Community Hub! Earn recognition 🏅 for the malware intelligence you share, climb the leaderboards 📈, and connect with like-minded contributors who share your hunting focus 🤝. Ready to unlock your profile? Go to the Community Hub →

URLhaus Database

You are currently viewing the URLhaus database entry for http://94.154.43.192/nz/nz.x86 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry



ID:3878048
URL: http://94.154.43.192/nz/nz.x86
URL Status:Offline
Host: 94.154.43.192
Date added:2026-06-29 18:10:31 UTC
Last online:2026-11-01 22:XX:XX UTC
Threat:Malware download Malware download
Reporter: botnetkiller
Abuse complaint sent (?): Yes (2026-06-29 18:11:23 UTC to abuse{at}pitline[dot]net,abusep{at}kharkiv[dot]com)
Takedown time:4 months, 5 days, 4 hours, 41 minutes Bad (down since 2026-11-01 22:53:18 UTC)
Tags:elf mirai link opendir ua-wget x86

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2026-10-26n/aelf cb01c2973a9a95fe148c0b675efcaa9bd696f5309ef9bfd8affe123ef161a5f7n/aMirai
2026-10-24n/aelf d18fc3342edcb34993008782e4e614d761c7a6e477a44136f9f0a19194b104edn/aMirai
2026-07-09n/aelf 40e83008c5442f1faff8e0a0b5b9dbdd1c745aacc90c838adae015e0cd0c031an/aMirai
2026-07-05n/aelf b463b4bd78682210a7876555be1251453be68c65793d48ae640ad5fa0ced1882n/aMirai
2026-06-29n/aelf be4a96f9d0b9dc81beaa335cb4e31a80e576527500319668f31eca63b7a6c521n/aMirai