URLhaus Database

You are currently viewing the URLhaus database entry for http://187.68.35.92:60772/Mozi.m which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:870203
URL: http://187.68.35.92:60772/Mozi.m
URL Status:Offline
Host: 187.68.35.92
Date added:2020-11-30 16:55:54 UTC
Last online:2020-12-05 07:XX:XX UTC
Threat:Malware download Malware download
Reporter: lrz_urlhaus
Abuse complaint sent (?): Yes (2020-11-30 16:56:03 UTC to abuse{at}lacnic[dot]net)
Takedown time:4 days, 14 hours, 49 minutes Bad (down since 2020-12-05 07:45:37 UTC)
Tags:elf mirai link Mozi link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-12-05n/aelf c9c1f2f5c2ca5005ad45a1f89f5923bfbbb1b04320b6e2b4d294ef71b26d0cceVirustotal results 30.00% 
2020-12-05n/aelf 75c77f3162d8d1c1172051c3633621f7af3ce54a0cb08733fe694133a0fb7fe2Virustotal results 21.31% 
2020-12-02n/aelf 1eb23b1bb9ad55ee41f2cdae591f8dd6b70ecc276813a7747e77625857673652Virustotal results 20.34% 
2020-12-01n/aelf 125586ad6c6e740d4e785944aef9e29a14897e58742a4548d79a82057b29d225Virustotal results 26.67% 
2020-11-30n/aelf 9e0a15a4318e3e788bad61398b8a40d4916d63ab27b47f3bdbe329c462193600Virustotal results 62.90%Mirai
2020-11-30n/aelf dabb578865d76372ad70ba654999a7879dea2ecac90c71f20069c4d3587c673aVirustotal results 30.00%