🤲🏼 NEW | abuse.ch Community Hub! Earn recognition 🏅 for the malware intelligence you share, climb the leaderboards 📈, and connect with like-minded contributors who share your hunting focus 🤝. Ready to unlock your profile? Go to the Community Hub →

URLhaus Database

You are currently viewing the URLhaus database entry for http://176.65.139.157/fvbig/sever1078.x86 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:3918575
URL: http://176.65.139.157/fvbig/sever1078.x86
URL Status:flame Online (spreading malware for 1 month, 2 days, 15 hours, 38 minutes)
Host: 176.65.139.157
Date added:2026-09-18 15:01:24 UTC
Threat:Malware download Malware download
Reporter: BlinkzSec
Abuse complaint sent (?): Yes (2026-09-18 15:02:17 UTC to abuse{at}stormindustries[dot]llc)
Tags:176-65-139-157 elf mirai link ua-wget

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2026-10-14n/aelf 6f12c62343a378f90683531249670e18dbed4927cfc3068338e9440f9d97d358n/a 
2026-09-24n/aelf 565dd866c9a66ee014ea17690bceedc8cfdfe894b8d52dfe2ec3bc3685efff05n/aMirai
2026-09-20n/aelf 80828752354b3a770b7c63f46006334fc705c718d40cf3e1df1dc5a4f0fdf043n/aMirai
2026-09-19n/aelf 8cee7bb01c81f76621019dbbd1770314a86eb7f8bfd1cbb3504d96bd0e44ef68n/aMirai
2026-09-19n/aelf e7a9f44542e8665d4b0710821ea3705fc46ffcd74b2e43b1f19f6943de8545b4n/aMirai
2026-09-18n/aelf 248cdcb6008da5e198c4ee92ec38ba3a0c716b8f2e2ff41c1cab9b0ab4bb5bc2n/aMirai