URLhaus Database

You are currently viewing the URLhaus database entry for http://111.75.137.163:4880/Mozi.m which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:838330
URL: http://111.75.137.163:4880/Mozi.m
URL Status:Offline
Host: 111.75.137.163
Date added:2020-11-21 01:19:07 UTC
Last online:2020-11-22 23:XX:XX UTC
Threat:Malware download Malware download
Reporter: lrz_urlhaus
Abuse complaint sent (?): Yes (2020-11-21 01:20:03 UTC to 56561125{at}qq[dot]com)
Takedown time:1 day, 21 hours, 59 minutes Poor (down since 2020-11-22 23:19:35 UTC)
Tags:elf Mozi link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-11-22n/aelf 22b46240d9263a1b705a591b0916bdfd690fd9a760beae4c82dc398bee8c7823Virustotal results 30.16% 
2020-11-22n/aelf 8b3d3a16db57ca4a75ac6b3aec0d48ddaa9d059c2c90066aa8e5c88bd555f5b1Virustotal results 26.98% 
2020-11-21n/aelf f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8Virustotal results 63.49%