URLhaus Database

You are currently viewing the URLhaus database entry for http://221.160.177.169:3128/Mozi.m which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:303086
URL: http://221.160.177.169:3128/Mozi.m
URL Status:Offline
Host: 221.160.177.169
Date added:2020-01-30 17:04:57 UTC
Last online:2020-02-26 18:XX:XX UTC
Threat:Malware download Malware download
Reporter: Gandylyan1
Abuse complaint sent (?): Yes (2020-01-30 17:06:15 UTC to irt{at}nic[dot]or[dot]kr)
Takedown time:27 days, 1 hours, 32 minutes Bad (down since 2020-02-26 18:38:48 UTC)
Tags:elf mirai link Mozi link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-02-26n/aelf 7ac12520c1f294001aa4fd43b5e103e883738089877c94dbd5f62bb955173a8fVirustotal results 36.67% 
2020-02-26n/aelf 5b2d15268ce1a5be7a59e6c95e5f86d6f1e329370aaf18d740c9815e9b192072Virustotal results 36.67% 
2020-02-20n/aelf c2481fa7a1c3d2310a8119c8081466b84e9636994af76d6ec3f935b2e4e3e711Virustotal results 35.00% 
2020-02-20n/aelf da05c1638aeccec0e895aa34c3c5bdcf3ba32f08da843c480269aab184f42fbaVirustotal results 24.14% 
2020-02-20n/aelf ae72014ed28cb5927ba2bc879ea187b1c43042e69a6964d811bef144818c3a66Virustotal results 33.90% 
2020-02-19n/aelf e3ee24ce5e90ceeeb100163ae760ffa77844bbf8c37de87fed1840c5fe2404abVirustotal results 33.33% 
2020-02-19n/aelf d9b497cae877d5657ac01d54b941f5f452e252c02698d1db8edddc1456de540cVirustotal results 35.59% 
2020-02-19n/aelf 056bee90c9ee92b6213c3442b965367ff5927d82026188f1319d92fbb58b30f9Virustotal results 37.29% 
2020-01-30n/aelf e15e93db3ce3a8a22adb4b18e0e37b93f39c495e4a97008f9b1a9a42e1fac2b0Virustotal results 62.07%Mirai