URLhaus Database

You are currently viewing the URLhaus database entry for http://103.75.219.114:40158/Mozi.m which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry

You are viewing an historical record

While the URL referenced below has been used by bad actors to spread malware in the past, the malicious content has obviously been removed around 2022-12-20. Hence the the URL / website should no longer represent a threat. As a result, URLhaus considers this record as historical. This database entry has not impact on the reputation of the website / domain nor does it appear in any of our blocklists anymore.

ID:	661973
URL:	http://103.75.219.114:40158/Mozi.m
URL Status:	Offline
Host:	103.75.219.114
Date added:	2020-10-06 22:36:32 UTC
Last online:	2020-10-22 02:XX:XX UTC
Threat:	Malware download
Reporter:	lrz_urlhaus
Abuse complaint sent (?):	Yes (2020-10-06 22:52:02 UTC to Abuse{at}northtelecom[dot]com)
Takedown time:	15 days, 3 hours, 15 minutes (down since 2020-10-22 02:07:34 UTC)
Tags:	elf mirai Mozi

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

Firstseen	Filename	File Type	Payload (SHA256)	VT	Signature
2020-10-22	n/a	elf	11b376e0f71135371e0c8dcb3439bd1323992bf6b5d213454ac730ebace42885	n/a
2020-10-21	n/a	elf	af91969af57706820886eb120d4bbbda3604137af46711ca577726249edbbd2a	n/a
2020-10-21	n/a	elf	433fc4028450f78a7fa4e593374263a034ea8a3109d0017c12409cfb72081c8d	n/a
2020-10-18	n/a	elf	70c0bcf16f394118c7760778cd08d14905a677e8834f0abe257e4f16bc27cfc5	n/a
2020-10-09	n/a	elf	48766ac9d52205c1aa24299c1e783ad4169014325be282ed8d01c3c99dfe2e49	n/a
2020-10-06	n/a	elf	12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0ef	70.00%	Mirai