URLhaus Database

You are currently viewing the URLhaus database entry for http://210.101.157.199:59394/Mozi.m which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:1383923
URL: http://210.101.157.199:59394/Mozi.m
URL Status:Offline
Host: 210.101.157.199
Date added:2021-06-21 02:06:04 UTC
Last online:2021-06-21 23:XX:XX UTC
Threat:Malware download Malware download
Reporter: lrz_urlhaus
Abuse complaint sent (?): Yes (2021-06-21 02:07:02 UTC to irt{at}nic[dot]or[dot]kr)
Takedown time:21 hours, 18 minutes Good (down since 2021-06-21 23:25:29 UTC)
Tags:elf Mozi link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2021-06-21n/aelf 95bce33c16e4b2945df534c6f029f7753b864480c582e44dd778984384b24636Virustotal results 31.15% 
2021-06-21n/aelf 42cfdc43d2286618afe3917bc673143c6b71f02cf52a3ccc74550b804832f107n/a 
2021-06-21n/aelf ee123720691179f1a32d4186bbbb73b12a52eec735657f445a319f7f31bf5682Virustotal results 18.97% 
2021-06-21n/aelf 04bb64c6f717c2ca0cdd606a88d3f923f29f1cbd12ff7465b8f63ee8e5094f8aVirustotal results 20.34% 
2021-06-21n/aelf 2873ede29b8d920de7815b98aba0295c18db3abda817544af3424cc754113d43Virustotal results 15.00%
2021-06-21n/aelf 69daa68bc09f5594446d33c266700617ccc02faa293f0420bb7e209db1096086n/a