URLhaus Database

You are currently viewing the URLhaus database entry for http://45.150.195.235/tarm which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:3881733
URL: http://45.150.195.235/tarm
URL Status:flame Online (spreading malware for 10 days, 5 hours, 22 minutes)
Host: 45.150.195.235
Date added:2026-07-06 22:37:22 UTC
Threat:Malware download Malware download
Reporter: botnetkiller
Abuse complaint sent (?): Yes (2026-07-06 22:38:18 UTC to support{at}62yun[dot]com)
Tags:arm elf gafgyt link mirai link ua-wget

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2026-07-16n/aelf 56c52a322002465f87f847e9ed0798635b6dc8990b73676c0f49f91845af5cd8n/aGafgyt
2026-07-15n/aelf 2b84dc665c76d9749356f9f2e38f9e347a7a0a0831ebb3218f931157d8b6d48fn/aMirai
2026-07-14n/aelf f72ac48dc9763deba326900931a9dd8ea8b57b0b8d43ac786b5c4048c1f99e05n/aGafgyt
2026-07-11n/aelf 706677a6f92cdb5390ba7a2812b2de906fe6db4a39698266a18eff39ee7b9191n/aGafgyt
2026-07-06n/aelf 1a79ab7090db6c42752c45524edae6a9c042afc59d6754748a5dd3e3154a6ad0n/aMirai