URLhaus Database

You are currently viewing the URLhaus database entry for http://fucfx.com/qu/gsnaiitm which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry

Add tag Remove tag Perform URL rescan Delete this URL Report a False Positive
ID:2247924
URL: http://fucfx.com/qu/gsnaiitm
URL Status:Offline
Host: fucfx.com
Date added:2022-06-23 13:05:07 UTC
Last online:2022-06-25 07:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter:Anonymous
Abuse complaint sent (?): Yes (2022-06-23 19:36:05 UTC to abuse{at}amazonaws[dot]com)
Takedown time:1 day, 12 hours, 16 minutes Poor (down since 2022-06-25 07:52:38 UTC)
Tags:aa qbot link Quakbot link TR

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2022-06-25Copies3504062895.zipzip 1954eed1f4f434dfdf28aad33c1cd52fc7af8e4c20005ed786a05983e7bc69ceVirustotal results 0.00%Quakbot
2022-06-24Dcm582926327.zipzip 1e91146fcae06e108318ece58516662412d39efa3394787918e8792cb35a81bfVirustotal results 0.00% 
2022-06-24DataS1051315357.zipzip e2a5481380bca97698d2a3e134cb2f2091e619ffa857ab7de23f8979a3df6cfbn/a 
2022-06-24DataS2475674062.zipzip b92cc1b4284b7ae7235668001122cc6fd1a88923c7ffad6e81e36199cb3b0d57Virustotal results 0.00% 
2022-06-24DataS222123821.zipzip 1f300bc319ba326afef8a0e4158c26ad742e461eccd69c7a41a6af4c751a842dVirustotal results 0.00% 
2022-06-23DataS451609787.zipzip e9bc6df122ccab1f1e042a2148970a0a805b310f1166e24187ef666a9e9f4785Virustotal results 0.00%