URLhaus Database

You are currently viewing the URLhaus database entry for http://imgs.googlwaa.com/lqosko/p18j/customer6.exe which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:1685656
URL: http://imgs.googlwaa.com/lqosko/p18j/customer6.exe
URL Status:Offline
Host: imgs.googlwaa.com
Date added:2021-10-16 18:03:06 UTC
Last online:2021-10-16 23:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: zbetcheckin
Abuse complaint sent (?): Yes (2021-10-16 22:00:03 UTC to abuse{at}scalabledns[dot]com)
Takedown time:27 days, 23 hours, 43 minutes Bad (down since 2021-11-13 17:47:58 UTC)
Tags:exe

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2021-11-13n/aexe 3a3b5bab7905c91585685a1d5832fe31ea0134a5c9d89049879c686a5816bf15n/a
2021-10-21n/aexe 5c1052fb39abba3f34e2f7f033267059dfa32b0929e09048f437c985af07f294n/a 
2021-10-19n/aexe eae36eba857fac64d7b10f7055df67010c65bdf968734007462a9d6e2bdae47cn/aDownloader.Upatre
2021-10-16n/aexe d788b085cc98c274abd24c4ac8d00f870297dc4f5b68684af8a5c328cc50beb4Virustotal results 47.76%