🤲🏼 NEW | abuse.ch Community Hub! Earn recognition 🏅 for the malware intelligence you share, climb the leaderboards 📈, and connect with like-minded contributors who share your hunting focus 🤝. Ready to unlock your profile? Go to the Community Hub →

URLhaus Database

You are currently viewing the URLhaus database entry for http://94.154.43.192/00101010101001/morte.arm which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:3878075
URL: http://94.154.43.192/00101010101001/morte.arm
URL Status:flame Online (spreading malware for 4 months, 2 days, 11 hours, 12 minutes)
Host: 94.154.43.192
Date added:2026-06-29 19:09:10 UTC
Threat:Malware download Malware download
Reporter: botnetkiller
Abuse complaint sent (?): Yes (2026-06-29 19:10:23 UTC to abuse{at}pitline[dot]net,abusep{at}kharkiv[dot]com)
Tags:arm elf mirai link opendir ua-wget

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2026-10-25morte.armelf d775b0ac605c34e8c083f8c69e1f14fa5d8b6238d6448c1929175af7a5137e5bn/aMirai
2026-10-25morte.armelf 2f92eb2728a385f2cd0780e6104cc8b4c909339d69d90a0d6af1dedf71586eb5n/aMirai
2026-06-29morte.armelf 6361f5497881328549d7432fd77bc16f671aeacc051830fa789a5a591c3e7380n/aMirai