URLhaus Database

You are currently viewing the URLhaus database entry for http://41.216.189.157/nz/nz.arm7 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:3878187
URL: http://41.216.189.157/nz/nz.arm7
URL Status:flame Online (spreading malware for 23 days, 7 hours, 21 minutes)
Host: 41.216.189.157
Date added:2026-06-29 21:43:29 UTC
Threat:Malware download Malware download
Reporter: botnetkiller
Abuse complaint sent (?): Yes (2026-06-29 21:44:19 UTC to abusepoc{at}afrinic[dot]net)
Tags:arm elf mirai link opendir ua-wget

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2026-07-21n/aelf 8793d30a43d8d26aad7c46f03752199a39434a1350708eedf2b238de7728c52an/aMirai
2026-07-08n/aelf 6d462a26472f5bc3d7986a04fcd8ef3c46e5f1c25eb62e87dfed74c9e7701e66n/aMirai
2026-07-08n/aelf b60a4c6391bcab56d7b152aabec161ef462ca4a3dd5469019aca5b45a4b09c91n/aMirai
2026-07-07n/aelf c014f24f7abec5d49a5cbf149704ee8784a7b8db893103532b18223314cc2c4bn/aMirai
2026-06-29n/aelf 4e2532c5ba90c45d1693dea76d31070edd5e3472ece0d723be303531e6f7c768n/aMirai