URLhaus Database

You are currently viewing the URLhaus database entry for http://190.5.216.156:59456/Mozi.m which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:706964
URL: http://190.5.216.156:59456/Mozi.m
URL Status:Offline
Host: 190.5.216.156
Date added:2020-10-17 10:07:05 UTC
Last online:2020-10-19 11:XX:XX UTC
Threat:Malware download Malware download
Reporter: lrz_urlhaus
Abuse complaint sent (?): Yes (2020-10-17 10:08:14 UTC to abuse{at}lacnic[dot]net)
Takedown time:2 days, 1 hours, 13 minutes Poor (down since 2020-10-19 11:21:32 UTC)
Tags:elf Mozi link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-10-18n/aelf 23ec0380a527211b46b3164d77678b7a6ddba01b1b128288dc5b0b3b3e6ba1bcVirustotal results 46.67% 
2020-10-18n/aelf 1e47cc19e9504bbbe1d0828cfb3825e6fc979ef80e6800e26f0b4a16a753868dVirustotal results 13.56% 
2020-10-18n/aelf 18898080f777fb438a7c21320a2aa3ffa82fd60569d3e1a1d0bc6a975503e577Virustotal results 28.33% 
2020-10-17n/aelf a94f7a05db13229a4db070e19ee9494cf8638bb7e61856380743e26b1fdea8fen/a 
2020-10-17n/aelf 79ba5c3de1a8e9f0a72ca0678a88517d18173b1f0166a499de1ea4686217cf73Virustotal results 16.95% 
2020-10-17n/aelf 61d28829475546c9b39b6dc291072d73dff35d2c23644e7bf3f6c0b14759e3fbVirustotal results 25.49% 
2020-10-17n/aelf c672798dca67f796972b42ad0c89e25d589d2e70eb41892d26adbb6a79f63887Virustotal results 62.71%