🤲🏼 NEW | abuse.ch Community Hub! Earn recognition 🏅 for the malware intelligence you share, climb the leaderboards 📈, and connect with like-minded contributors who share your hunting focus 🤝. Ready to unlock your profile? Go to the Community Hub →

URLhaus Database

You are currently viewing the URLhaus database entry for http://111.39.25.148:51365/Mozi.a which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry



ID:2442333
URL: http://111.39.25.148:51365/Mozi.a
URL Status:Offline
Host: 111.39.25.148
Date added:2022-12-03 01:34:06 UTC
Last online:2023-01-25 20:XX:XX UTC
Threat:Malware download Malware download
Reporter: lrz_urlhaus
Abuse complaint sent (?): Yes (2022-12-03 01:35:11 UTC to abuse{at}chinamobile[dot]com)
Takedown time:1 month, 23 days, 19 hours, 4 minutes Bad (down since 2023-01-25 20:39:59 UTC)
Tags:elf mirai link Mozi link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2023-01-19n/aelf 854bfb63dd2c4cb47a58c267ca7765869650de877c1724daedca6a052097e0dcVirustotal results 43.33% 
2023-01-19n/aelf 474e1cd30c834ba5ed7e50dbcf0fb0d4ce41a10b8c5725c99986c0e53f09fe25Virustotal results 31.15% 
2023-01-19n/aelf 54aaf05d0a9e8aa28b58d1f5f1d43a8ff0c87d44292b6f657a9b120a840f033fVirustotal results 41.67% 
2022-12-05n/aelf ca35f2e3b3f297c371f0a58398cb43e24c1d1419f08baff9b9223b9032ccf4c1Virustotal results 61.90% 
2022-12-03n/aelf 12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efVirustotal results 76.19%Mirai