URLhaus Database

You are currently viewing the URLhaus database entry for http://41.216.189.236/nz/nz.mips which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:3887339
URL: http://41.216.189.236/nz/nz.mips
URL Status:Offline
Host: 41.216.189.236
Date added:2026-07-16 20:38:35 UTC
Last online:2026-08-05 02:XX:XX UTC
Threat:Malware download Malware download
Reporter: botnetkiller
Abuse complaint sent (?): Yes (2026-07-16 20:39:28 UTC to abusepoc{at}afrinic[dot]net)
Takedown time:19 days, 5 hours, 59 minutes Bad (down since 2026-08-05 02:38:38 UTC)
Tags:elf mips mirai link opendir ua-wget

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2026-08-04nz.mipself 7bde05f508735b0933fd33608e0abf468231243200ae64e313246ec1d0bfb29an/aMirai
2026-07-25nz.mipself cd8103d0eaab7ebdf0617da38859a0274505986ff9c45583d4e4d95886f8e3d7n/aMirai
2026-07-25nz.mipself 3edda772f2cd053ca6fe316444e6ba4e4a6f826eb84845ea27a8f3fc4b78b18fn/aMirai
2026-07-24nz.mipself f174e7eab45e7f63b65ec5353fa91af214ed024d0c44aeaff5488996485b21e1n/aMirai
2026-07-22nz.mipself d02f97bf8d46da0f09d12d4703053fca5b8f703f9a63b1b0a850f005c0f001c3n/aMirai
2026-07-21nz.mipself ecd48e585d767d48436611c32cde8150c75c640ffee1b19363801315bab2cd37n/aMirai
2026-07-18nz.mipself 8ebb41b0bfd24c9f2525723c51b6612aade42f84591e2323417636886774d49an/aMirai
2026-07-17nz.mipself 59b756899825573563cd53ae62bcd1f703a765f85797c352964e5246f04a85c0n/aMirai
2026-07-16nz.mipself c697966246050da34197787a8fb958c8f93fac0fbfe9dbc9b0cda818498b5d1dn/aMirai