🤲🏼 NEW | abuse.ch Community Hub! Earn recognition 🏅 for the malware intelligence you share, climb the leaderboards 📈, and connect with like-minded contributors who share your hunting focus 🤝. Ready to unlock your profile? Go to the Community Hub →

URLhaus Database

You are currently viewing the URLhaus database entry for http://85.215.73.250/bot-linux-amd64 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:4045143
URL: http://85.215.73.250/bot-linux-amd64
URL Status:flame Online (spreading malware for 5 days, 19 hours, 48 minutes)
Host: 85.215.73.250
Date added:2026-10-29 22:50:13 UTC
Threat:Malware download Malware download
Reporter: zensatori
Abuse complaint sent (?): Yes (2026-10-29 22:51:14 UTC to abuse{at}strato[dot]de)
Tags:cowrie honeypot mirai link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2026-11-04n/aelf 94707b30e121f90bfff5c08f679209d1eeb322bc12587bd2188a4e8d44e7dbe5n/aMirai
2026-11-03n/aelf 6396bb30a348b36580cf4237d62e73f2caf4a3f17bb410e5b7f7b8a037237e3an/aMirai
2026-10-31n/aelf 9d248e41c44dc04235c3fa71f09bbc620e1e4cd4a488436effdfa0de47a092b7n/aMirai
2026-10-29n/aelf a2a705a959a5bbd3c455f0af6088bd73125aa21a1cf90679f566a7918989053en/aMirai