URLhaus Database

You are currently viewing the URLhaus database entry for http://221.160.177.226:4481/Mozi.m which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:274469
URL: http://221.160.177.226:4481/Mozi.m
URL Status:Offline
Host: 221.160.177.226
Date added:2019-12-20 20:25:10 UTC
Last online:2020-04-12 01:XX:XX UTC
Threat:Malware download Malware download
Reporter: Gandylyan1
Abuse complaint sent (?): Yes (2019-12-24 14:54:02 UTC to irt{at}nic[dot]or[dot]kr)
Takedown time:3 months, 19 days, 10 hours, 28 minutes Bad (down since 2020-04-12 01:22:31 UTC)
Tags:elf mirai link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-02-20n/aelf d9b497cae877d5657ac01d54b941f5f452e252c02698d1db8edddc1456de540cVirustotal results 35.59% 
2020-02-20n/aelf ca5d93efe5580ceb0b3406238331bff0228d4db7116a84e49549204c38360e50Virustotal results 27.12% 
2020-02-20n/aelf e3ee24ce5e90ceeeb100163ae760ffa77844bbf8c37de87fed1840c5fe2404abVirustotal results 33.33% 
2019-12-24n/aelf e15e93db3ce3a8a22adb4b18e0e37b93f39c495e4a97008f9b1a9a42e1fac2b0Virustotal results 56.90%Mirai