URLhaus Database

You are currently viewing the URLhaus database entry for http://41.216.189.157/nz/nz.arm which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:3878176
URL: http://41.216.189.157/nz/nz.arm
URL Status:Offline
Host: 41.216.189.157
Date added:2026-06-29 21:43:28 UTC
Last online:2026-07-30 05:XX:XX UTC
Threat:Malware download Malware download
Reporter: botnetkiller
Abuse complaint sent (?): Yes (2026-06-29 21:44:18 UTC to abusepoc{at}afrinic[dot]net)
Takedown time:1 month, 0 days, 8 hours, 5 minutes Bad (down since 2026-07-30 05:49:43 UTC)
Tags:arm elf mirai link opendir ua-wget

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2026-07-21nz.armelf 896700e89222787a983c34556c488d3f97e7a71126e25f8decb91ab9680a3bfen/aMirai
2026-07-08nz.armelf 38e26e2e39b206a0ac983904cc58a8f3c967bef1c394acb423997944c9188226n/aMirai
2026-07-08nz.armelf 5871e9ed44d989827c88ef3308a1f808d0822d8c936dd3cc0b684a258e62b06dn/aMirai
2026-07-07nz.armelf f2d72c7d1e9d322e71f4e66e9b91ca0059019f0dc19613ef06402bcd1e3ebecdn/aMirai
2026-06-29nz.armelf 3cdd082de74b996e163163dbb7f6ee55911f7226ef5750e05b5fc14f7a26d48cn/aMirai