DigitalSide Threat Intel

Mozi.m

First submission 2022-10-11 11:36:03 Last sumbission 2024-09-05 19:37:04

File details

File type: ELF 32-bit MSB executable, MIPS, MIPS-I version 1 (SYSV), statically linked, no section header
File size: 134.26 KB (137480 bytes)
MD5: 6b0fb88c187a6dbf48017f66f262edab
SHA1: c27a02fbe6525becc24193041359a9adce663f24
SHA256: ded36b111f815e57e2658bd881beaf247be1fea999902456df83840100f5ae65

File features detected

Is DLL
Packers
Anti Debug
Anti VM
Signed
XOR

OSINT Enrichments

Virus Total: 38/62 VT report date: 2022-09-13 23:18:00

URLs, FQDN and IP indicators 6

URL Host (FQDN/IP) Date Added
hXXp://42.224.0.20:49234/Mozi.m VirusTotal Report 42.224.0.20 VirusTotal Report 2024-09-05 19:37:07
hXXp://59.183.10.157:54519/bin.sh VirusTotal Report 59.183.10.157 VirusTotal Report 2024-09-04 14:12:06
hXXp://59.183.2.134:54519/Mozi.m VirusTotal Report 59.183.2.134 VirusTotal Report 2024-09-03 13:53:04
hXXp://117.245.40.95:42201/Mozi.m VirusTotal Report 117.245.40.95 VirusTotal Report 2024-09-02 23:45:05
hXXp://59.88.227.112:38860/i VirusTotal Report 59.88.227.112 VirusTotal Report 2024-08-31 04:37:09
hXXp://59.88.227.112:38860/bin.sh VirusTotal Report 59.88.227.112 VirusTotal Report 2024-08-31 04:29:13

Strings analysis - File found

XML
M7c.xml

Strings analysis - Possible URLs found 1

http://upx.sf.net