URLhaus Database

You are currently viewing the URLhaus database entry for http://185.250.148.213/44466.6342006944.dat which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:1645639
URL: http://185.250.148.213/44466.6342006944.dat
URL Status:Offline
Host: 185.250.148.213
Date added:2021-09-27 16:04:04 UTC
Last online:2021-09-27 17:XX:XX UTC
Threat:Malware download Malware download
Reporter: nokae8
Abuse complaint sent (?): Yes (2021-09-27 16:05:04 UTC to abuse{at}pq[dot]hosting)
Takedown time:1 hour, 51 minutes Good (down since 2021-09-27 17:56:10 UTC)
Tags:obama104 Qakbot link qbot link Quakbot link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2021-09-2744466.6342006944.datdll 748988401e73e0452cbea84aff5460da7f44b9275dea21031235fc8a75bf7b24n/a Quakbot
2021-09-2744466.6342006944.datdll cdcea0e329b1d26125ee6691f95d1423667df3ab9a72b9a2f1ffdc55563e0373n/a Quakbot
2021-09-2744466.6342006944.datdll 894c984cfb466263d4da8feac7b21849d8d21fca2f4961bc22bdd171f9f648bbn/a Quakbot
2021-09-2744466.6342006944.datdll 47e5eda71367fa24a13f5ca94fb5aa0cc9e2eca1041c252e6457f904ed29a6d0n/a Quakbot
2021-09-2744466.6342006944.datdll 227c1ecd7522bfed892b4acf3cd9e8d4fea130a6b129c2d628838da0d38ef4can/a Quakbot
2021-09-2744466.6342006944.datdll 8c859395c0d61b82be6ff5262555ee3f30176a3a8c1cb51ca5b4cc49fe863247n/a Quakbot