🤲🏼 NEW | abuse.ch Community Hub! Earn recognition 🏅 for the malware intelligence you share, climb the leaderboards 📈, and connect with like-minded contributors who share your hunting focus 🤝. Ready to unlock your profile? Go to the Community Hub →

URLhaus Database

You are currently viewing the URLhaus database entry for http://94.154.43.192/nz/nz.sh4 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry



ID:3878054
URL: http://94.154.43.192/nz/nz.sh4
URL Status:Offline
Host: 94.154.43.192
Date added:2026-06-29 18:10:32 UTC
Last online:2026-11-01 23:XX:XX UTC
Threat:Malware download Malware download
Reporter: botnetkiller
Abuse complaint sent (?): Yes (2026-06-29 18:11:23 UTC to abuse{at}pitline[dot]net,abusep{at}kharkiv[dot]com)
Takedown time:4 months, 5 days, 5 hours, 18 minutes Bad (down since 2026-11-01 23:30:21 UTC)
Tags:elf mirai link opendir SuperH ua-wget

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2026-10-25n/aelf 5ff9117937ddf3aca952e4948a05bb2af2e618dc6754ff58dbbfddc6b08f3328n/aMirai
2026-10-24n/aelf c41923f219244fb0b28882e01c540c35706f19966b5fc070adf8be235b8be008n/aMirai
2026-07-09n/aelf 9df5e260c7adfbf68599c54660e6c6d8c2672fbf677d335713e71de8d63fdc78n/aMirai
2026-07-05n/aelf 199d875dfc1a9c87784fd681d123ba4afc31360eec72d8ef10d4428cd4f17525n/aMirai
2026-06-29n/aelf 4f70073d86149980db1331483b354b0a2d065eea40fdfce4401005dd7ea41a35n/aMirai