URLhaus Database

You are currently viewing the URLhaus database entry for http://176.65.139.40/jklarm5 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry

ID:	3945953
URL:	http://176.65.139.40/jklarm5
URL Status:	Offline
Host:	176.65.139.40
Date added:	2026-10-08 05:53:07 UTC
Last online:	2026-10-15 08:XX:XX UTC
Threat:	Malware download
Reporter:	Jerry1113
Abuse complaint sent (?):	Yes (2026-10-08 05:55:04 UTC to abuse{at}stormindustries[dot]llc)
Takedown time:	7 days, 2 hours, 13 minutes (down since 2026-10-15 08:08:13 UTC)
Tags:	automated cowrie honeypot mirai

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

Firstseen	Filename	File Type	Payload (SHA256)	VT	Signature
2026-10-14	n/a	elf	dc87aeac1008620a4587df7d0cb91ec55e55e675f994b988476258fe117d537c	n/a
2026-10-13	n/a	elf	80b75788ef444d40a485023337bb73e943e0622f00eb7c08400558892db6ef67	n/a
2026-10-12	n/a	elf	fddf40589835d295eadd648a3fbe3658955a8e47e83495ee65ea904ba4d89a2c	n/a
2026-10-12	n/a	elf	b00b96c7b100536dd4e068c2f31d0dd9bad9ac87b367f489f3395afdf0087d88	n/a
2026-10-11	n/a	elf	5cfc1f93856f8f753ce3cae560b3a4615cb8f039be6769283d77b00dc22c1408	n/a
2026-10-11	n/a	elf	fb89553bb9a0859703235338f23888e182abcae177b6d4687406981f9ed9c580	n/a
2026-10-11	n/a	elf	29d3de066fcbb6c387b7ccbdd85146b8f28499ab98f699afb35904a28435593a	n/a
2026-10-10	n/a	elf	92308383fc360b4cf20f1a75c3c858d1249dacc477fd78318cf0e985453ef48d	n/a
2026-10-09	n/a	elf	05fd5edfb93a217b8ca710d6a5e6112bfef597fdbe95ec72860b682c35c5847a	n/a
2026-10-09	n/a	elf	aa684c1bf96f4c4aa06295c39bd7a08ae3a12b042e1d5407f921f665d6fb20d3	n/a
2026-10-08	n/a	elf	4550ba3ab6c147402ae9d236741ce0958aeb3c7769193718700aa4fec3b6fa7d	n/a
2026-10-08	n/a	elf	efc37e171e6a133d0fb0e9197da76227f1794fda5a93ebab0d718f8111768176	n/a	Mirai