🤲🏼 NEW | abuse.ch Community Hub! Earn recognition 🏅 for the malware intelligence you share, climb the leaderboards 📈, and connect with like-minded contributors who share your hunting focus 🤝. Ready to unlock your profile? Go to the Community Hub →

URLhaus Database

You are currently viewing the URLhaus database entry for http://94.154.43.192/00101010101001/morte.arm7 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:3878082
URL: http://94.154.43.192/00101010101001/morte.arm7
URL Status:flame Online (spreading malware for 4 months, 4 days, 15 hours, 40 minutes)
Host: 94.154.43.192
Date added:2026-06-29 19:09:29 UTC
Threat:Malware download Malware download
Reporter: botnetkiller
Abuse complaint sent (?): Yes (2026-06-29 19:10:23 UTC to abuse{at}pitline[dot]net,abusep{at}kharkiv[dot]com)
Tags:arm elf mirai link opendir ua-wget

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2026-10-25n/aelf 3e58d175f08fe7a183330fddc222c0fa793054dc64ecb35645913b7ca464f498n/aMirai
2026-10-25n/aelf 35dcbbd2c5315df0e276733792bf49c0aa44ba1a4f38e12db96662ae86c9af68n/aMirai
2026-06-29n/aelf 37c3bce4bc35fc0215acd0cdc4be0b93ce1a5fb11b78f94d7e29bdf4dcc19057n/aMirai