URLhaus Database

You are currently viewing the URLhaus database entry for http://64.89.163.215/bins/putita.arm6 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:3885285
URL: http://64.89.163.215/bins/putita.arm6
URL Status:flame Online (spreading malware for 6 days, 19 hours, 4 minutes)
Host: 64.89.163.215
Date added:2026-07-12 02:32:24 UTC
Threat:Malware download Malware download
Reporter: botnetkiller
Abuse complaint sent (?): Yes (2026-07-12 02:33:17 UTC to abuse{at}nfx[dot]rip)
Tags:arm elf mirai link opendir ua-wget

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2026-07-18n/aelf aa6d7499fa9716e23e6300969321e9ff97614249a39de6697554bf9d94103567n/aMirai
2026-07-18n/aelf 501379aa82b510cae61abd88b2403d05bd71febcd0b8a40e90ca817422c6731dn/aMirai
2026-07-18n/aelf d37db85779491056cc1e783d2e55245b16a8bc05e3adac00e610fe9a422b1e06n/aMirai
2026-07-17n/aelf 983901c109450f067920eb692a8c86a2f06e238d3ec41cf8b80568dee663464bn/aMirai
2026-07-17n/aelf 3e24ad303b4fe1d1715656a959aa40aa036128f694fa059377bac2b247ba788cn/aMirai
2026-07-16n/aelf 94a0d43d06b5823ac41cb0e4904b3df757c8a059c1f562ab129913314c9456fcn/aMirai
2026-07-16n/aelf 0e0e3b4128eea1f7c9cac8abd8097b6cd9fbb2ecc91979cc985674f6c90d9139n/aMirai
2026-07-15n/aelf 7215740b4a762e444ba1cdca3bdd8dc5f79f5a5b4af309292ac1ffb0b0d37a8bn/aMirai
2026-07-12n/aelf a92ba723f321aa6a37d07ed61538f259c859e63cf4768a07e253361800e48758n/aMirai