Mozi

Malware Family

1 709 indicators of compromise attributed to Mozi across abuse.ch threat intelligence feeds.

Domains

IPs

URLs

1 492

Hashes

182

Download indicators

Indicator lists for this family. Free and anonymous downloads are a 10% sample.

IPs (35)URLs (1 492)Hashes (182)

For continuous updates, the same IOCs ship in the STIX/TAXII threat feed, ready for OpenCTI and MISP.

Threat types

Botnet C&CpayloadPayload Delivery

Sample indicators

Indicator	Type
182.124.232.250	ip
168.227.148.151	ip
115.54.108.130	ip
112.242.178.250	ip
46.99.151.227	ip
110.37.35.199	ip
103.83.9.186	ip
110.37.13.228	ip
42.233.105.79	ip
61.3.31.99	ip
110.36.65.23	ip
110.38.217.97	ip
117.22.149.202	ip
117.207.81.216	ip
110.38.210.180	ip
117.241.186.3	ip
46.99.143.224	ip
117.193.142.213	ip
61.1.218.68	ip
117.209.90.21	ip
http://110.38.240.188:46981/Mozi.m	url
http://139.135.45.168:46720/Mozi.m	url
http://202.47.57.186:45676/Mozi.m	url
http://100.66.65.82:49793/i	url
http://95.56.232.109:39091/i	url
http://112.31.189.32:57316/i	url
http://175.107.233.106:48152/Mozi.a	url
http://117.206.69.64:56045/i	url
http://112.225.195.111:53904/i	url
http://181.66.9.240:60776/i	url
http://27.216.44.248:52650/i	url
http://119.152.228.186:45436/Mozi.7	url
http://110.37.39.146:35969/i	url
http://182.119.229.88:49082/Mozi.m	url
http://175.107.1.182:56381/Mozi.7	url
http://153.117.32.90:43505/Mozi.m	url
http://175.107.212.44:38058/Mozi.a	url
http://111.92.157.249:42021/Mozi.m	url
http://115.57.232.2:33691/i	url
http://180.190.184.188:47946/i	url
b4434b43704645262b36340eb10796e44a5af0cc8424777d97ad8a9157df8240	hash
14af8f514fc5f60b0457325acd4a241204a1f521df88649559a58c8561db7f41	hash
cc5e4e7014f4eb89469fa57d3fda2bc05676e84a7de08cffa0162b6a0ba1fb7c	hash
585488837a26f33f0b5a8e9f7f36ecba800df61f0344ec55f8986a0b3fad904d	hash
c186c0b876a56d0da7b79bc2cae2e2ecf4617518fd9c996568da100e99179693	hash
2b02f61ab1d4452372f318a2e200f8f3a9b689976a8b5868046383132e0eadef	hash
3c060e8c70da8634814e0d4560ca150e087cdbf62bcacf83dbf48559ca08bb89	hash
b4610a17b2b8935d83eed7e8eba49659de82f45fdd7dd4c79fbfee8cf1b4bce0	hash
a440772884566865cab2f77cdb2956ad37a2622043070359c2e7f48b86b4ef25	hash
b5e9117593832b5f51c006c16132e4bf853b928d5fe3a54ef6982bf63d57b8c8	hash
53f62ac054faad578d592c3b7c99ababafc7d8a74f334cf1dd98ac28851d617b	hash
d97bb4393a46028fd499df9edf4851f33f9a68ffee7fef3b4d06e871f2209522	hash
ffc20fb1e844e8d29a606b31e2d33f0b351f177f4951f48686fdf7bed19233b2	hash
f7375f0ae0287b6aa966ae8ade9cadbd13821544a242f8418554ec462b71f8fd	hash
20ca5ffe941615856b06a748e882374567d8ad8f23450bd773b1440fff5866cf	hash
274dfe0dccef54949303d9ff724100270098f8f07594f97fe78b332231851a71	hash
912a709819892a175b2bed25888d0e8f4d665a78eaba17d5466da17361a2dad0	hash
78d79ace616f438782b3423c10a583ec68081680340e57270e6ed842f67ff894	hash
749754f2c09ef6871c357169520e04089f813ff440f7201e15aac0687cfdc4b2	hash
86dcb71d9bc61b68cadeca05dd7ba084b7580a6106b3da3256c881ef0890533e	hash

Another file to check? Run a file hash reputation check.