URLhaus Database

You are currently viewing the URLhaus database entry for http://180.232.106.164:1981/Mozi.m which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:2499582
URL: http://180.232.106.164:1981/Mozi.m
URL Status:Offline
Host: 180.232.106.164
Date added:2023-01-07 03:49:06 UTC
Last online:2023-01-13 07:XX:XX UTC
Threat:Malware download Malware download
Reporter: lrz_urlhaus
Abuse complaint sent (?): Yes (2023-01-07 03:50:09 UTC to ipnetworks{at}etpi[dot]com[dot]ph)
Takedown time:6 days, 3 hours, 45 minutes Bad (down since 2023-01-13 07:35:40 UTC)
Tags:elf Mozi link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2023-01-13n/aelf 2aec5415870068d35a7d908974ad5e95331a5141dc199a71800200fd9ac42fbfVirustotal results 35.00% 
2023-01-12n/aelf 232cc44af01cef65bb8a7016914e618bd0a2ff3667a304b45b8241aa29c21d51Virustotal results 47.62% 
2023-01-12n/aelf df08b50ae1cf428b74e5deaa1896c66f0b19d3d399bc0e7b11cdb54aa09b4c32Virustotal results 45.90%
2023-01-09n/aelf 1509cb4a59087be095de34a01f19e292933a3133bc63de252555d0188d0710bdVirustotal results 45.90% 
2023-01-07n/aelf 82d9f145ce232de7c305d22e701ed96d514413f9412dbb5802a52d002feb026dVirustotal results 49.21% 
2023-01-07n/aelf a5cae1a63747e60ed69d3a522d889beda4514014f06c7a33868eef217c45ccdcVirustotal results 45.76% 
2023-01-07n/aelf 4293c1d8574dc87c58360d6bac3daa182f64f7785c9d41da5e0741d2b1817fc7Virustotal results 71.43%Mozi