URLhaus Database

You are currently viewing the URLhaus database entry for http://45.248.194.202:43881/Mozi.m which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:833898
URL: http://45.248.194.202:43881/Mozi.m
URL Status:Offline
Host: 45.248.194.202
Date added:2020-11-19 19:21:05 UTC
Last online:2020-11-20 12:XX:XX UTC
Threat:Malware download Malware download
Reporter: lrz_urlhaus
Abuse complaint sent (?): Yes (2020-11-19 19:22:35 UTC to skylineinfonet{at}gmail[dot]com)
Takedown time:17 hours, 12 minutes Good (down since 2020-11-20 12:34:41 UTC)
Tags:elf Mozi link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-11-20n/aelf 582ea4fbee1f51a8421a97dad48951a5d18d4878cd9aacd8fcda9ee4cc1ffc06Virustotal results 42.62% 
2020-11-20n/aelf 21f74ab12f8d1256710b643816a2d15edb01265481c11690a7f8136e1c8398e3Virustotal results 23.73% 
2020-11-20n/aelf 13f6228edaecd9125102faa905b029fd0dc2382a155cfe9429000726dbae4382Virustotal results 15.52% 
2020-11-19n/aelf b6773f6eb3fb3673d9550ea18b5b96241ac524e559a84e50a7bb35a1697e6dd5Virustotal results 25.86% 
2020-11-19n/aelf c672798dca67f796972b42ad0c89e25d589d2e70eb41892d26adbb6a79f63887Virustotal results 65.08%