URLhaus Database

You are currently viewing the URLhaus database entry for http://103.20.3.74:46889/Mozi.m which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:926621
URL: http://103.20.3.74:46889/Mozi.m
URL Status:Offline
Host: 103.20.3.74
Date added:2020-12-17 22:49:05 UTC
Last online:2020-12-19 08:XX:XX UTC
Threat:Malware download Malware download
Reporter: lrz_urlhaus
Abuse complaint sent (?): Yes (2020-12-17 22:50:03 UTC to sohailbangash{at}gmail[dot]com)
Takedown time:1 day, 10 hours, 1 minutes Poor (down since 2020-12-19 08:51:52 UTC)
Tags:elf Mozi link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-12-18n/aelf 18898080f777fb438a7c21320a2aa3ffa82fd60569d3e1a1d0bc6a975503e577Virustotal results 28.33% 
2020-12-18n/aelf c35240843875255fd351c0caed1f6897616a1921e1702f4934bab1003a7dc6c9Virustotal results 22.95% 
2020-12-18n/aelf 582ea4fbee1f51a8421a97dad48951a5d18d4878cd9aacd8fcda9ee4cc1ffc06Virustotal results 42.62% 
2020-12-18n/aelf d2924bb8beb95a3c3891af63b50515ac8069cb11ec64b0558a68a5585b6655bbVirustotal results 31.67% 
2020-12-18n/aelf b136e5d6acf223a5acdcf84342f51e5cdb3b352f45a87ba59a2b2da717b7e23bVirustotal results 31.03% 
2020-12-17n/aelf c672798dca67f796972b42ad0c89e25d589d2e70eb41892d26adbb6a79f63887Virustotal results 63.93%