URLhaus Database

You are currently viewing the URLhaus database entry for http://whiaq.com/sq/velvesuptltoa which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:2248001
URL: http://whiaq.com/sq/velvesuptltoa
URL Status:Offline
Host: whiaq.com
Date added:2022-06-23 13:05:20 UTC
Last online:2022-06-25 13:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter:Anonymous
Abuse complaint sent (?): Yes (2022-06-23 13:12:09 UTC to abuse{at}amazonaws[dot]com)
Takedown time:2 days, 0 hours, 13 minutes Poor (down since 2022-06-25 13:26:08 UTC)
Tags:aa qbot link TR

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2022-06-25Copies3843274850.zipzip 36374379c49058b1f03c81884d34666cc5668e98695ccbb3d15f35991491753cVirustotal results 0.00% 
2022-06-24Copies798439667.zipzip 2559b9d8af63d7ce18e4de29f27991b6ec21a53ab8a4411540caaac6a39a7ab3Virustotal results 0.00% 
2022-06-24Copies2314503899.zipzip 1ed84a6cade0c880a0f511b74412025c8d05d0560615a6a8df4398caf648779dn/a 
2022-06-24DataS1863354330.zipzip 9d8160b731c817cf998994aa9a358834e99d0714268547fbbd674797f7617edcVirustotal results 1.69% 
2022-06-24DataS736103333.zipzip 140437470d5ebad09d62290d536803030b9ad4afd73de077a7d3d83bf0f7c6edVirustotal results 0.00% 
2022-06-23DataS2294645144.zipzip 912653fe9a9f390581661468c794394817cab9e8c370296911d51dc6458189a6Virustotal results 0.00% 
2022-06-23Documm2528553465.zipzip 7770cc0f804cd9154897b0e05c9b090148e1de9ad7d6756c0590ee5a768a9317Virustotal results 0.00%