URLhaus Database

You are currently viewing the URLhaus database entry for http://27.202.228.179:57713/Mozi.a which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:569993
URL: http://27.202.228.179:57713/Mozi.a
URL Status:Offline
Host: 27.202.228.179
Date added:2020-09-19 19:16:07 UTC
Last online:2020-09-21 03:XX:XX UTC
Threat:Malware download Malware download
Reporter: lrz_urlhaus
Abuse complaint sent (?): Yes (2020-09-19 19:18:16 UTC to hqs-ipabuse{at}chinaunicom[dot]cn)
Takedown time:1 day, 8 hours, 30 minutes Poor (down since 2020-09-21 03:48:18 UTC)
Tags:elf Mozi link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-09-21n/aelf 4400883acdd165da8aca227f8585c61d84122cda63a696ce912e5e25f964d0f3Virustotal results 27.59% 
2020-09-20n/aelf 1e47cc19e9504bbbe1d0828cfb3825e6fc979ef80e6800e26f0b4a16a753868dVirustotal results 13.56% 
2020-09-19n/aelf da94d528d38fa2f08628b6fef3c956b350e51a610ad72b33bfc2530c7e9cebfaVirustotal results 19.30% 
2020-09-19n/aelf c672798dca67f796972b42ad0c89e25d589d2e70eb41892d26adbb6a79f63887Virustotal results 57.89%