URLhaus Database

You are currently viewing the URLhaus database entry for http://103.75.219.130:40928/Mozi.a which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:802153
URL: http://103.75.219.130:40928/Mozi.a
URL Status:Offline
Host: 103.75.219.130
Date added:2020-11-09 22:34:20 UTC
Last online:2020-11-20 05:XX:XX UTC
Threat:Malware download Malware download
Reporter: lrz_urlhaus
Abuse complaint sent (?): Yes (2020-11-09 22:36:02 UTC to Abuse{at}northtelecom[dot]com)
Takedown time:10 days, 6 hours, 58 minutes Bad (down since 2020-11-20 05:34:46 UTC)
Tags:elf mirai link Mozi link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-11-17n/aelf 8a8d8b1c3604288da27c96d2d39beecd8bf62347d78f41b1160a33e0b3d23a8eVirustotal results 61.90% 
2020-11-15n/aelf 48d715ad0e868ca6fef3a4eb3f8ead5de468954155703d6aedee8f9140ba5ab6Virustotal results 24.19% 
2020-11-15n/aelf aa5a8c06773b8ff97fc578eeb9e62d66332e855077e9f0bc5d25268e90f04ce0n/a 
2020-11-14n/aelf c23876ecb8b55e36dc55ad7089376313a64785b33198d5b07166d61d9a8f9f71Virustotal results 31.75% 
2020-11-13n/aelf 1840eec24425778358d2afefcacf399ea0ab28789f9393b5c6348669ffeceab9n/a 
2020-11-12n/aelf 25c71dd46b5ccc94daa3262121a92411dc785609b27525601899b1ba533e56beVirustotal results 23.81% 
2020-11-12n/aelf e1e3829d5bdae0315b4fbe9e296dd642514570f5f07a86c0aacc86fd121aa36fVirustotal results 25.81% 
2020-11-11n/aelf b497df83ecfd364e90174b8b8447627c8412101e2b5445f00231b723214b85fdn/a 
2020-11-09n/aelf 12013662c71da69de977c04cd7021f13a70cf7bed4ca6c82acbc100464d4b0efVirustotal results 71.43%Mirai