URLhaus Database

You are currently viewing the URLhaus database entry for http://2.180.9.57:12220/Mozi.m which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:3216553
URL: http://2.180.9.57:12220/Mozi.m
URL Status:flame Online (spreading malware for 1 year, 9 month, 23 days, 16 hours, 49 minutes)
Host: 2.180.9.57
Date added:2024-10-06 12:53:26 UTC
Threat:Malware download Malware download
Reporter: NDA0E
Abuse complaint sent (?): Yes (2024-10-06 12:55:37 UTC to abuse{at}ito[dot]gov[dot]ir)
Tags:elf hajime

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2026-02-23n/aelf 3d6e6391bbe1290dfcb07adb4d6b123649f6caadb9e1b74c0926087eab5eabbdn/a 
2026-02-22n/aelf c398d4bec07436852d70e4b7997739152bc716283b82c4e7855bb467218ae39dn/a 
2026-02-20n/aelf a1c10d1b9d5f284c218aa697e0abb510231add2b3730e50182a853ca0267b293n/a 
2026-02-16n/aelf 9b0c6ad8c77ac0371ea2ccb9b2ca7e36deb5c8f44e753c10b771a63e8636641cn/a 
2026-02-14n/aelf 6d15f08ffab2f11cd5b36cf228b02d83f6a80578b176060cb1f3e5647d539530n/a 
2026-02-12n/aelf 423bf0b66d0213e1f43705cf66c6571a4f0368b93f4c8293aeaee26299ebedb2n/a 
2026-02-10n/aelf 46957327c696b8fdb0599c12dbaceb57b30a70a665217c2801f1ac4715e2dbe7n/a 
2026-02-10n/aelf b3c7e34a85fc506057319c4a5eb7b3cbcf2234ea2a6fe1c1000cd40ad7c50c12n/a 
2026-02-02n/aelf 63b54249e7f3961bd9bba0dadb17f5aa6415b9c9c490ea7b310124e725ebe6a6n/a 
2026-01-31n/aelf 380633eed0f1d529720d30e5e9e216ef642200e2063639a5cc6ce1933f74edc6n/a 
2024-11-01n/aelf 7c5941c4348973458ad746c47b7695121de89b0ce5aacfc486edbdacf92bbaa3Virustotal results 27.12% 
2024-10-06n/aelf a04ac6d98ad989312783d4fe3456c53730b212c79a426fb215708b6c6daa3de3Virustotal results 74.19%Hajime