URLhaus Database

You are currently viewing the URLhaus database entry for http://103.75.219.130:40928/Mozi.m which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:800879
URL: http://103.75.219.130:40928/Mozi.m
URL Status:Offline
Host: 103.75.219.130
Date added:2020-11-09 18:36:25 UTC
Last online:2020-11-20 05:XX:XX UTC
Threat:Malware download Malware download
Reporter: lrz_urlhaus
Abuse complaint sent (?): Yes (2020-11-09 18:38:02 UTC to Abuse{at}northtelecom[dot]com)
Takedown time:10 days, 11 hours, 10 minutes Bad (down since 2020-11-20 05:48:10 UTC)
Tags:elf mirai link Mozi link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-11-20n/aelf 87668b63338ee57c8c9c8ae3ef5e30767d500bf8e46f3d5f44158177d69b6166Virustotal results 24.19% 
2020-11-17n/aelf a6c6e6101bd06ae1df1943eefcc5164f4e6ea979453a0a65924e49ad47973d5cVirustotal results 22.95% 
2020-11-17n/aelf b0fc2246a238f0c1a34eda62d6bbbdbe6f3d4f200b452f33d259dd96c430d1b3n/a 
2020-11-17n/aelf 971ff7709211085840c6fa9ec35466acd5c39430ccd1c6635aaca74dd6643c1bn/a 
2020-11-15n/aelf c9374796c940d63dc41689e3cd6e59cf9d12054bf63a3161ba9713dfef1d2836Virustotal results 31.75% 
2020-11-15n/aelf 397a0c8b6b973c732892d2ee38ca73250454bc654f6b7899122f5db69311b0b0Virustotal results 25.00% 
2020-11-14n/aelf 9d82cc26b143698c3b8e05d2ae846930a563a873c0f1c2bff6088ee0e787b7feVirustotal results 24.19% 
2020-11-13n/aelf 8a8d8b1c3604288da27c96d2d39beecd8bf62347d78f41b1160a33e0b3d23a8eVirustotal results 45.90% 
2020-11-10n/aelf f0695be734404199e2205d7c8386efad8c09fbc44523e5d480983b55f94fecebn/a 
2020-11-09n/aelf 12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efVirustotal results 71.43%Mirai