URLhaus Database

You are currently viewing the URLhaus database entry for http://64.89.163.215/bins/putita.arm which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:3885286
URL: http://64.89.163.215/bins/putita.arm
URL Status:flame Online (spreading malware for 5 days, 3 hours, 40 minutes)
Host: 64.89.163.215
Date added:2026-07-12 02:32:24 UTC
Threat:Malware download Malware download
Reporter: botnetkiller
Abuse complaint sent (?): Yes (2026-07-12 02:33:18 UTC to abuse{at}nfx[dot]rip)
Tags:arm elf mirai link opendir ua-wget

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2026-07-16putita.armelf 9082d1bbe9998076cbc823607eb229b2990fc9c0ef41225966761086583d2388n/aMirai
2026-07-16putita.armelf 2ec5b69789b552a2bf8ac6fd61fc8b408efe26c422ad2ad6f466450800819035n/aMirai
2026-07-16putita.armelf 5060058f19b2271985ffc751dfe35b9b107f051a368de01358e6be85335ab1edn/aMirai
2026-07-15putita.armelf 25b58fff1db2ffe258838fd7155c76c78819c9e3cfa3f94b8907e967365f4bb1n/aMirai
2026-07-12putita.armelf a92ba723f321aa6a37d07ed61538f259c859e63cf4768a07e253361800e48758n/aMirai