URLhaus Database

You are currently viewing the URLhaus database entry for http://31.56.209.153/nz/nz.m68k which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:3892229
URL: http://31.56.209.153/nz/nz.m68k
URL Status:flame Online (spreading malware for 22 days, 5 hours, 54 minutes)
Host: 31.56.209.153
Date added:2026-07-26 17:48:19 UTC
Threat:Malware download Malware download
Reporter: botnetkiller
Abuse complaint sent (?): Yes (2026-07-26 17:49:14 UTC to abuse{at}swissnetwork[dot]io)
Tags:elf m68k mirai link opendir ua-wget

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2026-08-04n/aelf b1e7123c09c5cc0d00ba274aa17f7f0c6b1871251063d071398d3199449115b9n/aMirai
2026-08-03n/aelf 1d87d05a3772a774667df44d1ebdec9a31eb460d8e6fb4ea4ed4ab9314dcaa78n/aMirai
2026-08-01n/aelf 33cc89f9b48508e891ba55037e290d802c428c610e7bcd326e8dfa21715d1e86n/aMirai
2026-08-01n/aelf 7f697ed4ca05f453a3d6ec8d8bdfd6cb70453e992a6daf2e2d4b08cdef618115n/aMirai
2026-07-31n/aelf 0d4084ab9f5a342fd470daf60de5365b55bb21d4e1388963fa193cb6db0fa4efn/aMirai
2026-07-31n/aelf fc9bd6c223ac22eb42514c55fc138e534d03c24ea41baa598cea4dc54a24e541n/aMirai
2026-07-31n/aelf b7f40db7b2110281b3606c24e44d97751fc58b7a504641a4bd3525b053047836n/aMirai
2026-07-26n/aelf 4e7f5ea43897e1e55cf846ed552d85e675f3bd1918d923127c6e1f37f8215cd2n/aMirai