URLhaus Database

You are currently viewing the URLhaus database entry for http://31.56.209.153/nz/nz.mips which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:3892218
URL: http://31.56.209.153/nz/nz.mips
URL Status:flame Online (spreading malware for 24 days, 20 hours, 32 minutes)
Host: 31.56.209.153
Date added:2026-07-26 17:47:15 UTC
Threat:Malware download Malware download
Reporter: botnetkiller
Abuse complaint sent (?): Yes (2026-07-26 17:48:14 UTC to abuse{at}swissnetwork[dot]io)
Tags:elf mips mirai link opendir ua-wget

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2026-08-04nz.mipself 7b651e4f66c0bcc2befa5a981caaf7ea1180b8bb530bb1e384ba42e70f097db1n/aMirai
2026-08-03nz.mipself 99e62f03ab120c32193fa4170496e4fdcc80b4a952956874d7f3585c8a07dff7n/aMirai
2026-08-01nz.mipself 18866d5151d7654f2aa300f33ce2ee45c534079b7522bc4cc5e0a7395341402dn/aMirai
2026-08-01nz.mipself 25ac6e121f01285a41d461ca3f5a38b14a7c8148219ccbe270fe52d90c2f104bn/aMirai
2026-07-31nz.mipself 7d56228e11bcf1feafa30c07418322cbd223b2d95b8092fc34e7e3a346f19361n/aMirai
2026-07-26nz.mipself 8c0da2c903eaf8aeeaef90db5ff708313ff807673da59e70edf2a2569d77b332n/aMirai