URLhaus Database

You are currently viewing the URLhaus database entry for http://177.56.145.34:41104/Mozi.a which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry

You are viewing an historical record

While the URL referenced below has been used by bad actors to spread malware in the past, the malicious content has obviously been removed around 2022-12-20. Hence the the URL / website should no longer represent a threat. As a result, URLhaus considers this record as historical. This database entry has not impact on the reputation of the website / domain nor does it appear in any of our blocklists anymore.

ID:	613324
URL:	http://177.56.145.34:41104/Mozi.a
URL Status:	Offline
Host:	177.56.145.34
Date added:	2020-09-26 11:52:07 UTC
Last online:	2020-09-29 16:XX:XX UTC
Threat:	Malware download
Reporter:	lrz_urlhaus
Abuse complaint sent (?):	Yes (2020-09-26 11:54:02 UTC to abuse{at}lacnic[dot]net)
Takedown time:	3 days, 4 hours, 26 minutes (down since 2020-09-29 16:20:17 UTC)
Tags:	elf mirai Mozi

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

Firstseen	Filename	File Type	Payload (SHA256)	VT	Signature
2020-09-29	n/a	elf	1047d7ed437b93cdf606fbe7a221e1b02749643dd0564ac1b45ab93f786ba409	19.67%
2020-09-29	n/a	elf	53e6c6c9c94a201dfd04d1ac47401cdb032bdb520f019fa333946383be97f41a	n/a
2020-09-29	n/a	elf	b9e463d9e5888c29ec9ff899409ed4a85f9d976f3b79bd039e46756ed11c8b31	n/a
2020-09-28	n/a	elf	a5cbb1559a23a9e526d2f6dd8ce69889e3ecc545bea51ddb377e5b3b4794bdaf	n/a
2020-09-26	n/a	elf	71afe1104b5e1bc020dcc7a4db22fda6a09b0149cc1a842d148f652923ef1b27	n/a
2020-09-26	n/a	elf	9e0a15a4318e3e788bad61398b8a40d4916d63ab27b47f3bdbe329c462193600	54.24%	Mirai