URLhaus Database

You are currently viewing the URLhaus database entry for http://124.152.111.68:42319/Mozi.m which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:933867
URL: http://124.152.111.68:42319/Mozi.m
URL Status:Offline
Host: 124.152.111.68
Date added:2020-12-20 22:49:08 UTC
Last online:2021-01-10 10:XX:XX UTC
Threat:Malware download Malware download
Reporter: lrz_urlhaus
Abuse complaint sent (?): Yes (2020-12-20 22:50:18 UTC to hqs-ipabuse{at}chinaunicom[dot]cn)
Takedown time:20 days, 12 hours, 3 minutes Bad (down since 2021-01-10 10:53:57 UTC)
Tags:elf Mozi link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-12-29n/aelf c35240843875255fd351c0caed1f6897616a1921e1702f4934bab1003a7dc6c9Virustotal results 22.95% 
2020-12-21n/aelf 8d99b187b3b2c160201c6e922af5f134f82ffee3f9b8560bf75f0f884e5ada29Virustotal results 17.24% 
2020-12-21n/aelf 61d28829475546c9b39b6dc291072d73dff35d2c23644e7bf3f6c0b14759e3fbVirustotal results 30.65% 
2020-12-20n/aelf c672798dca67f796972b42ad0c89e25d589d2e70eb41892d26adbb6a79f63887Virustotal results 64.52%