URLhaus Database

You are currently viewing the URLhaus database entry for http://27.124.65.221:46362/bin.sh which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:3881627
URL: http://27.124.65.221:46362/bin.sh
URL Status:Offline
Host: 27.124.65.221
Date added:2026-07-06 13:48:22 UTC
Last online:2026-07-11 07:XX:XX UTC
Threat:Malware download Malware download
Reporter: geenensp
Abuse complaint sent (?): Yes (2026-07-06 13:49:30 UTC to gaurav{at}ethen[dot]in)
Takedown time:4 days, 17 hours, 40 minutes Bad (down since 2026-07-11 07:29:33 UTC)
Tags:32-bit arm elf mirai link Mozi link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2026-07-09bin.shelf a33b673d3bdc52c6fa15d0d30caf8d714ac3b77cb318b6f1e74b74fad4e3d2e4n/a 
2026-07-08bin.shelf 079a9b3411cd1fc8f24c440a771df02d366a31596d38b2c03d3a346d672849e4n/aMirai
2026-07-08bin.shelf 82a7132d24dda9ef4a6e165926a9f0dc6d0fdcd70b064ad21eaaeb66e8da8268n/a 
2026-07-08bin.shelf 04db8af4e7af2ccdeec7ce14ae5240d844ce1f63d781a20ee41840f3ff8d96e0n/a 
2026-07-08bin.shelf b5bc53ee395db78c5922a5556ad50bc6fc6f9ab0524194fe5be8e1d4d9f3b859n/a 
2026-07-07bin.shelf b2e3be99904f4f88b1b35d164ec82a62d6c78bd84cb6d173a2874e0facfc2726n/a 
2026-07-07bin.shelf e1e3829d5bdae0315b4fbe9e296dd642514570f5f07a86c0aacc86fd121aa36fn/a 
2026-07-06bin.shelf 12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efn/aMirai