URLhaus Database

You are currently viewing the URLhaus database entry for https://ri.posgradocolumbia.edu.py/drms/rocket.html which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:1126577
URL: https://ri.posgradocolumbia.edu.py/drms/rocket.html
URL Status:Offline
Host: ri.posgradocolumbia.edu.py
Date added:2021-04-16 13:05:06 UTC
Last online:2021-05-04 22:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: lazyactivist192
Abuse complaint sent (?): Yes (2021-04-16 14:49:02 UTC to eig-abuse{at}endurance[dot]com)
Takedown time:18 days, 7 hours, 18 minutes Bad (down since 2021-05-04 22:07:51 UTC)
Tags:b-TDS dll Qakbot link qbot link Quakbot link SilentBuilder TR

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2021-05-04n/adll 6b028006040a8d4b524818593e52e77357ad60a17211941db2cc6cf5056a907cn/aQuakbot
2021-05-04n/adll 8e9e2d19e4391904edc664951add9c304a088c9d5f0882f7482324d6cbd12295n/a Quakbot
2021-05-04n/adll 86e0e5ca743f5098497ac8a35c5f953089b9b2126e1014b8b8ccd4b9dbf39c2cn/aQuakbot
2021-05-04n/adll 7efcb019f79266b3d5f8269b5f7f5aa0c06269a2f3623ef6de37715d98d23f1an/a 
2021-05-04n/adll 965b4b03fc3394c0f46c35abb84022fc614f32e21dd65f1b21635ed85ac94079n/a 
2021-05-03n/adll bb3c1a43008146c5b95a72cd56088feceb302ee29f89206f53b1d439e94cd049n/a 
2021-05-01n/adll 06548d52965a6d882c3be0b7237d44430a7cbcfc1ac7619931a1f9930e1ecd28n/a Quakbot
2021-04-30n/adll ae830ecbc3d1080f341117de40f0321acc5b6350ca8a4d58b5951b0b357225b1n/a Quakbot
2021-04-30n/adll 5bad5712185c48301544e9763feef1e81578d4215495697283bd60308245d8c6n/a Quakbot
2021-04-30n/adll c2aef1363b95e2ac4c6331c264460b3cf20484d08137283dd7a11b88176d9256n/a Quakbot
2021-04-30n/adll 0b3dcf10a32197566dcb9f6261ed545506bdb47983e67a331aee077647bf1a46n/a Quakbot
2021-04-30n/adll ca567d2a135184080f4b484bcf98e7c04f57ba1ee63e1e3d960f4dd64d5dd1b2n/a Quakbot
2021-04-30n/adll ddaa9e3f5db50490b03358b8aac5c3fd26f6bb37c4fccd23108a5cb8428f6f0dn/a Quakbot
2021-04-30n/adll ba79555db4e8a81afe3f6e676f75235394895a9a3cad79b88d8b49856fcbf787n/a Quakbot
2021-04-19n/adll 9f1471692d4c39ab9fc064a1e7b4ad02300406a410d7bb9547de404651bcbb5dn/a Quakbot
2021-04-19n/adll d40c655899f9c9900d288e99d86833701199376e7f05b48bca011de90dbe0115n/a Quakbot
2021-04-18n/adll b9e5c87ce51d30af35354eacb188475548c92e23ae1525213f0d0c8889da4bcdn/a Quakbot
2021-04-17n/adll 4c9beefc2203138e67f95aa097f491a37d0823ea63071a3bca2c422e440ed9bbn/a Quakbot
2021-04-16n/adll 01f29d031ced454ae85c996505324d0be7844fca692365b08493245bb65e8a38n/a Quakbot