URLhaus Database

You are currently viewing the URLhaus database entry for http://5.175.192.197/bot_x86_64 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:3883706
URL: http://5.175.192.197/bot_x86_64
URL Status:flame Online (spreading malware for 5 days, 3 hours, 19 minutes)
Host: 5.175.192.197
Date added:2026-07-08 00:20:14 UTC
Threat:Malware download Malware download
Reporter: BlinkzSec
Abuse complaint sent (?): Yes (2026-07-08 00:21:18 UTC to abuse{at}ghostnet[dot]de)
Tags:5-175-192-197 elf mirai link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2026-07-12n/aelf fc7bd58cb79f8e00d92ee58dd6f421e494f5076c97a84cd556e916d9b55777ben/aMirai
2026-07-11n/aelf d5d7ba7df2e3e90930879859614cdebacce22236a1d6d15486a8187b63f81082n/aMirai
2026-07-11n/aelf 48a8dfd9665440464f0b2a79f3679a00c21757a208ec96aabcf5166ac8e6ad31n/aMirai
2026-07-11n/aelf 34c5914364cea48489d453a76641c05fff75e4f10108d6a3d2604501648bb835n/aMirai
2026-07-11n/aelf 7adc483cfc90af9b7ab531152dddcca0d9d7e8b7927f6aae14cc5052613f2e8dn/aMirai
2026-07-09n/aelf 2f7f6b80fd6456c0acd2d1a45e3499df42f6504060d52c907e61382dbaad4aa6n/aMirai
2026-07-08n/aelf 00423a283cfa8baed7018cc00e9c82785231dcdfb53d615104002714c36e1c97n/aMirai
2026-07-08n/aelf 6a89179df5a928a0dabbc9a792f4f39729a343f8c13c10487cdf9271d44d8383n/aMirai