URLhaus Database

You are currently viewing the URLhaus database entry for http://42.115.89.131:58736/Mozi.m which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:297942
URL: http://42.115.89.131:58736/Mozi.m
URL Status:Offline
Host: 42.115.89.131
Date added:2020-01-25 15:09:00 UTC
Last online:2020-01-27 12:XX:XX UTC
Threat:Malware download Malware download
Reporter: Gandylyan1
Abuse complaint sent (?): Yes (2020-01-25 15:10:12 UTC to hm-changed{at}vnnic[dot]vn)
Takedown time:1 day, 21 hours, 36 minutes Poor (down since 2020-01-27 12:46:13 UTC)
Tags:elf gafgyt link Mozi link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-01-27n/aelf 3c4e1704c3ddd0ee2daced74abf7e344e50e8fb6ab495f400eb4a5e94acf86d2Virustotal results 8.62% 
2020-01-27n/aelf 45be165d49e34911d25376c471205828ace5d88ecea78ae3b9ae931ae3a82c51Virustotal results 1.72% 
2020-01-27n/aelf aef7100932b0e7918cb32cca746fa9a1f698033bb213626e67eca271c5b4161dVirustotal results 3.45% 
2020-01-25n/aelf cf9df240da6c91b7447555f3aff6feefbf98aa19c9eed23b21950e8510cf34c1n/a 
2020-01-25n/aelf c6f6ca23761292552e6ea5f12496dc9c73374be0c5f9d0b2142ca3ae0bb8fe14Virustotal results 61.40%Gafgyt
2020-01-25n/aelf 0bf95aa95f5a4a7e6a9e5872c54ef0f2544b0f6800c480011e3019be905e39a7Virustotal results 3.33% 
2020-01-25n/aelf 285d3ca6572e18556e5e426605b357dcce06fdfec2123864c782ce63f7f578e5Virustotal results 3.33%