Skip to main content

Mozi

Malware Family

1 585 indicators of compromise attributed to Mozi across abuse.ch threat intelligence feeds.

Domains

0

IPs

35

URLs

1 369

Hashes

181

Download indicators

Indicator lists for this family. Free and anonymous downloads are a 10% sample.

Need continuous updates instead of static lists? The same IOCs ship in the STIX/TAXII threat feed, ready for OpenCTI and MISP.

Threat types

Botnet C&CpayloadPayload Delivery

Sample indicators

IndicatorType
115.48.55.41ip
46.99.251.91ip
182.124.232.250ip
59.96.136.199ip
46.99.151.227ip
110.37.35.199ip
42.224.96.49ip
42.238.239.136ip
103.83.9.186ip
42.233.105.79ip
61.3.31.99ip
110.36.65.23ip
110.38.217.97ip
59.88.2.109ip
117.207.81.216ip
117.241.186.3ip
61.1.218.68ip
117.205.84.145ip
117.242.196.149ip
117.209.21.103ip
http://103.104.215.10:57760/Mozi.murl
http://217.209.57.38:43481/iurl
http://103.176.16.40:52056/Mozi.7url
http://123.129.14.244:35858/Mozi.aurl
http://119.73.19.131:53332/Mozi.murl
http://223.123.124.0:54646/Mozi.murl
http://123.146.27.101:56834/Mozi.murl
http://182.124.115.245:57876/iurl
http://120.238.189.72:40002/iurl
http://125.44.192.104:52231/iurl
http://190.196.253.76:10135/Mozi.aurl
http://103.65.30.139:59145/Mozi.murl
http://223.123.43.213:56599/Mozi.murl
http://139.135.46.126:60940/Mozi.7url
http://14.1.106.91:54093/Mozi.murl
http://163.142.93.150:37596/iurl
http://110.37.35.79:33903/Mozi.murl
http://182.240.3.9:43335/iurl
http://113.236.127.92:45950/iurl
http://123.4.180.185:53655/iurl
dcadd68faed2126397c2d17a485fe9e9eb1e3ccef8780479fd3c0cda2a47ef39hash
fd851655a0cc12da68cc0a81320476fb69a4a00835b5ad7341b55ea36f2cdbf7hash
aa8deabb2747dee21fc1ba8f43aaaeb5dc6a49b782c08c8b8c102c8e31a55394hash
3c060e8c70da8634814e0d4560ca150e087cdbf62bcacf83dbf48559ca08bb89hash
f2d0eef8fe8f9159365c5bbb24a4e3103c89fcc2888df8c2035474cd89aa3ea6hash
9d29f9e0a5aba8c077e1ab299a9b11f38f66f872f78a938e695ae969543812c7hash
d2c69883dfc565a394cb4416a142e1c013d34d69bba13c1d6f833683687915e5hash
a5cae1a63747e60ed69d3a522d889beda4514014f06c7a33868eef217c45ccdchash
30c382cb63dfc23e100745f21de7089d0af6b5db3505c138b304c4e89e430d38hash
9d4d04b9d8bc88ca50056a88c3065a1eaa9f1218542cddf715159939beda8b0ahash
42d48936eb179cb91603d60922eab7e5b2bd7981e96578d8460651b96a6c8bf9hash
a6f5798fb99210c9a6e5acec0a2050e420c030d04ab141e239b423751d62a1c8hash
f8d5a46bd7c77b2dec2d4463765ce3b0baa2d8279b81b84a43d52caaf81504a6hash
464da070bde1dab0c1b305fe62bc66f39686da71cbe342b70a8a4e137eb3c492hash
678e9279cad14fb0897b03300a4a6f0920b5f1986ae299c5a342e046186ef5cdhash
25316823b17af6c88157412f46b776033a39123af4bb42f720ba6ad564024a8ehash
98e18637f434e1db7a61909baa09eb9fd8d92310e20db5c0f8d1192e579660b8hash
274dfe0dccef54949303d9ff724100270098f8f07594f97fe78b332231851a71hash
a25d3ded351be6a5817976b9844345ac740d5918a5481ab8e4a5a68aa18052f8hash
86dcb71d9bc61b68cadeca05dd7ba084b7580a6106b3da3256c881ef0890533ehash

Another file to check? Run a file hash reputation check.