URLhaus Database

You are currently viewing the URLhaus database entry for http://119.56.151.86:4152/Mozi.a which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:812304
URL: http://119.56.151.86:4152/Mozi.a
URL Status:Offline
Host: 119.56.151.86
Date added:2020-11-13 02:04:06 UTC
Last online:2021-03-21 10:XX:XX UTC
Threat:Malware download Malware download
Reporter: lrz_urlhaus
Abuse complaint sent (?): Yes (2020-11-13 02:06:10 UTC to irt{at}nic[dot]or[dot]kr)
Takedown time:4 months, 8 days, 8 hours, 16 minutes Bad (down since 2021-03-21 10:22:49 UTC)
Tags:elf mirai link Mozi link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2021-03-21n/aelf 2a501c67b97c3a16deda876ed0b8a2ae84db13ae1ed09e2f403b9503e97e27f4Virustotal results 47.62% 
2021-03-21n/aelf 5d46cc4c4b198cafa3b27f4063dd07d5e15a11072b58c7715b23b615c0d545baVirustotal results 23.73% 
2021-03-21n/aelf 4ec25338afa0c6561a2b4d1175ccac8d68c60f97186f941b2df9672cf06d418eVirustotal results 26.67% 
2021-03-20n/aelf 246b2008521a461a113ab9aaaffa9f88ed498ace9b34eb92d41b848bcf3f883aVirustotal results 20.34% 
2020-11-13n/aelf 9e0a15a4318e3e788bad61398b8a40d4916d63ab27b47f3bdbe329c462193600Virustotal results 64.52%Mirai