URLhaus Database

You are currently viewing the URLhaus database entry for http://185.250.148.213/44466.5877234954.dat which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:1645654
URL: http://185.250.148.213/44466.5877234954.dat
URL Status:Offline
Host: 185.250.148.213
Date added:2021-09-27 16:04:11 UTC
Last online:2021-09-27 18:XX:XX UTC
Threat:Malware download Malware download
Reporter: nokae8
Abuse complaint sent (?): Yes (2021-09-27 16:05:04 UTC to abuse{at}pq[dot]hosting)
Takedown time:2 hours, 28 minutes Good (down since 2021-09-27 18:33:52 UTC)
Tags:obama104 Qakbot link qbot link Quakbot link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2021-09-2744466.5877234954.datdll 0605a6272eda81de8651e385be5da29868f922f5278494385bf69c7829ce1d19n/a Quakbot
2021-09-2744466.5877234954.datdll f04096ffd09e8af392b4891e8e0e485cb16f97bcf5f41c41a1234b15f1f42abcn/a Quakbot
2021-09-2744466.5877234954.datdll 02378c93a69b4fe74ca8c969ebdb3c53b8fae8e1853970dac30fc8250b6f4243n/a Quakbot
2021-09-2744466.5877234954.datdll 8663208ee2556fd5ed9025a1fcae82277df256937e71c59c6bf9c9a019fac372n/a Quakbot
2021-09-2744466.5877234954.datdll 103f6a126b7174917327eb8140038bb6ceb8e6de7ca8dcb34d6679ea8a0b8950n/a Quakbot