URLhaus Database

You are currently viewing the URLhaus database entry for http://1.246.222.245:4391/Mozi.m which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:273062
URL: http://1.246.222.245:4391/Mozi.m
URL Status:Offline
Host: 1.246.222.245
Date added:2019-12-19 15:50:31 UTC
Last online:2021-10-13 02:XX:XX UTC
Threat:Malware download Malware download
Reporter: Gandylyan1
Abuse complaint sent (?): Yes (2021-10-10 16:05:23 UTC to irt{at}nic[dot]or[dot]kr)
Takedown time:3 years, 8 months, 8 days, 4 hours, 45 minutes Bad (down since 2023-08-08 20:37:57 UTC)
Tags:elf mirai link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2023-07-07n/aelf 2fb6a5ed702b75c912a40ddf5485a908863f58442ed68ce7ecc6c7403e2b68d5n/a 
2021-12-29n/aelf b4f351f4c1db54d50aca3eb44bb5458bf00c35d93bd14102de3f92e90fea7ac5Virustotal results 24.14% 
2020-08-05n/aelf 323dab29ef9d10dc150ef7cde86054bc4b29a06b66a9bc0f8235521bc9a3aabdVirustotal results 41.67% 
2019-12-19n/aelf e15e93db3ce3a8a22adb4b18e0e37b93f39c495e4a97008f9b1a9a42e1fac2b0Virustotal results 55.00%Mirai