URLhaus Database

You are currently viewing the URLhaus database entry for http://113.92.157.173:39870/Mozi.m which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:1082803
URL: http://113.92.157.173:39870/Mozi.m
URL Status:Offline
Host: 113.92.157.173
Date added:2021-03-22 03:19:05 UTC
Last online:2021-03-22 18:XX:XX UTC
Threat:Malware download Malware download
Reporter: lrz_urlhaus
Abuse complaint sent (?): Yes (2021-03-22 03:20:03 UTC to anti-spam{at}ns[dot]chinanet[dot]cn[dot]net)
Takedown time:15 hours, 13 minutes Good (down since 2021-03-22 18:33:38 UTC)
Tags:elf mirai link Mozi link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2021-03-22n/aelf 9e0a15a4318e3e788bad61398b8a40d4916d63ab27b47f3bdbe329c462193600Virustotal results 59.68%Mirai
2021-03-22n/aelf 2a501c67b97c3a16deda876ed0b8a2ae84db13ae1ed09e2f403b9503e97e27f4Virustotal results 47.62% 
2021-03-22n/aelf 76be4a5c3b8bf61e5623d7f9af246badd7542cc949d410e5d6ae9aa66645e95dVirustotal results 26.67%