URLhaus Database

You are currently viewing the URLhaus database entry for http://educaplus-zg.com/etcommodi/saepedeserunt-8543022 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry

Add tag Remove tag Perform URL rescan Delete this URL Report a False Positive
ID:1859576
URL: http://educaplus-zg.com/etcommodi/saepedeserunt-8543022
URL Status:Offline
Host: educaplus-zg.com
Date added:2021-12-06 15:31:22 UTC
Last online:2021-12-08 18:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2021-12-08 02:31:34 UTC to abuse{at}global[dot]ba)
Takedown time:1 day, 21 hours, 18 minutes Poor (down since 2021-12-08 18:14:42 UTC)
Tags:ChaserLdr Qakbot link Quakbot link TR zip

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2021-12-08saepedeserunt-8543022.zipzip 273a90e192bcbab716df7fa7f6106b04f102f41f43b34ad58898763e41cc3804n/a Quakbot
2021-12-07saepedeserunt-8543022.zipzip 53782a7e92efa94a27c3b0fd9ec20e4be66c7a7c4fa4fccc237bc1f414e83516n/a 
2021-12-07saepedeserunt-8543022.zipzip ee6c8a16d682efa31e050c32656b3fd59994e862662cebf00ea596df56cf3b3fn/a Quakbot
2021-12-06saepedeserunt-8543022.zipzip 94abadbe5e289f47e405f6493e1d92c77431d4d7486daf52e6d236968c85d518n/a Quakbot
2021-12-06saepedeserunt-8543022.zipzip 649ccefbd5342f14150ef6afc620efb9fd8ca1481971819f69d2ed8345204c6aVirustotal results 16.67% Quakbot