URLhaus Database

You are currently viewing the URLhaus database entry for http://61.52.11.87:51728/Mozi.m which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:1080580
URL: http://61.52.11.87:51728/Mozi.m
URL Status:Offline
Host: 61.52.11.87
Date added:2021-03-21 01:20:06 UTC
Last online:2021-03-31 01:XX:XX UTC
Threat:Malware download Malware download
Reporter: lrz_urlhaus
Abuse complaint sent (?): Yes (2021-03-21 01:21:02 UTC to hqs-ipabuse{at}chinaunicom[dot]cn)
Takedown time:10 days, 0 hours, 8 minutes Bad (down since 2021-03-31 01:29:56 UTC)
Tags:elf Mozi link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2021-03-30n/aelf 249f1190d8ef2bf15a8df68d1b3d4daa8828cd2949049f69216b9e29183ec613Virustotal results 31.58% 
2021-03-30n/aelf 4ac557dfb898c8afadea539fdc740ba538b3304df76c16f989a2a0507ceb758cVirustotal results 33.33% 
2021-03-24n/aelf 475aad916cf4815f985cd89e85034f52a84a8904ac12aa6efe6bd0fcffc7b44bVirustotal results 23.81% 
2021-03-24n/aelf 37fbe934e0a63efd6d9d10b7091415fd01647b20fda7f8f8440a1f18905bb876Virustotal results 30.00% 
2021-03-22n/aelf 8d12149bdc4c91c5dbf520bcea3c4966881b75f003559941ff8b54742e428837Virustotal results 24.19% 
2021-03-22n/aelf 76d0ca44c775bd55fdc4900a224400625b3ff70cf8561143538e7fe2c5668bf0Virustotal results 23.33% 
2021-03-21n/aelf 2e4506802aedea2e6d53910dfb296323be6620ac08c4b799a879eace5923a7b6Virustotal results 59.68%