🤲🏼 NEW | abuse.ch Community Hub! Earn recognition 🏅 for the malware intelligence you share, climb the leaderboards 📈, and connect with like-minded contributors who share your hunting focus 🤝. Ready to unlock your profile? Go to the Community Hub →

URLhaus Database

You are currently viewing the URLhaus database entry for http://173.56.92.166:42238/Mozi.m which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry



ID:463211
URL: http://173.56.92.166:42238/Mozi.m
URL Status:Offline
Host: 173.56.92.166
Date added:2020-09-11 12:11:04 UTC
Last online:2022-09-14 04:XX:XX UTC
Threat:Malware download Malware download
Reporter: lrz_urlhaus
Abuse complaint sent (?): Yes (2020-09-11 12:12:13 UTC to abuse-mail{at}verizonbusiness[dot]com,abuse{at}verizon[dot]net)
Takedown time:2 years, 0 months, 12 days, 16 hours, 22 minutes Bad (down since 2022-09-14 04:34:29 UTC)
Tags:elf hajime Mozi link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2022-01-09n/aelf b19315d1b547b6543a5d11a0c8ec8c17195299c8dc99d57e9d0ad5bfa6ec7a22Virustotal results 30.00% 
2020-12-08n/aelf af0b4bfeec61ef951957b9889c0e3ff44c163e12aacf6989408fe5c2ab6c89baVirustotal results 21.67% 
2020-11-30n/aelf 4a166cdb8854c55439677b464d382c35ae1be7fd889f684438f66ac37067ae3bVirustotal results 35.85% 
2020-11-29n/aelf 86a3da808f535592cbae4b87f1dd2171efa2ea947b475aed6bd3bd6c5a58cc29Virustotal results 32.69% 
2020-11-17n/aelf ec1615cf6d4f5dfd8a270535e2f845a295f582c9458cb1553dd220a1f9432d5eVirustotal results 21.67% 
2020-09-11n/aelf a04ac6d98ad989312783d4fe3456c53730b212c79a426fb215708b6c6daa3de3Virustotal results 61.02%Hajime