URLhaus Database

You are currently viewing the URLhaus database entry for http://1.246.222.98:3491/Mozi.m which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:275141
URL: http://1.246.222.98:3491/Mozi.m
URL Status:Offline
Host: 1.246.222.98
Date added:2019-12-21 23:29:16 UTC
Last online:2022-06-19 10:XX:XX UTC
Threat:Malware download Malware download
Reporter: Gandylyan1
Abuse complaint sent (?): Yes (2019-12-21 23:30:02 UTC to irt{at}nic[dot]or[dot]kr)
Takedown time:2 years, 6 months, 10 days, 11 hours, 22 minutes Bad (down since 2022-06-19 10:52:07 UTC)
Tags:elf mirai link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2021-02-10n/aelf 6ac11884e57c16cf0650b4a71445811bd62cf5c03c2a1ed37b0f57cd195a120dVirustotal results 45.16% 
2020-12-18n/aelf 24b7312949d30f51aad1e76e8b393b24d7d3b59b51c090848ba4b201e9300bedVirustotal results 23.64% 
2020-02-03n/aelf edcb64c316d01f48fc92367c6716d1d7516197b65f628637ca49d0370cfbfd89Virustotal results 34.48% 
2019-12-21n/aelf e15e93db3ce3a8a22adb4b18e0e37b93f39c495e4a97008f9b1a9a42e1fac2b0Virustotal results 53.45%Mirai