URLhaus Database

You are currently viewing the URLhaus database entry for http://defineoverseas.com/cida/qauseatipra which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:2249462
URL: http://defineoverseas.com/cida/qauseatipra
URL Status:Offline
Host: defineoverseas.com
Date added:2022-06-25 03:43:59 UTC
Last online:2022-06-29 04:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2022-06-25 04:00:09 UTC to abuse{at}publicdomainregistry[dot]com)
Takedown time:4 days, 0 hours, 20 minutes Bad (down since 2022-06-29 04:20:56 UTC)
Tags:aa Qakbot link qbot link TR U523 zip

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2022-06-28Copies3666617782.zipzip 367fc89079345be709689247549d2d5246ac4be0019ed7026052ab20bc0ca5c4Virustotal results 3.33% 
2022-06-28Copies771172023.zipzip 20c78632a43da97deec763f9edea238bfb4e8588092a254a11c542970a85dad7Virustotal results 1.67% 
2022-06-28LL612224822.zipzip 5a954c4617723a6e680b15db6f7ab9c356d14333b45677a1637a2a44a01835cfVirustotal results 0.00% 
2022-06-28Copies1621870218.zipzip 8b2a0ccb45cdb5596252e4ccfc137ff50e572507f6254b31574af337abec2984Virustotal results 0.00% 
2022-06-27Copies2325888639.zipzip 4d75d84526dc90ab7558524833911b17c4c8b950142565de610ac45b47dbcb91Virustotal results 0.00% 
2022-06-27Copies2363926099.zipzip 438b13f142ce3394a0652f7f818e369637f4ede5b2ba8639cdf6aece58dcc8c3Virustotal results 0.00% 
2022-06-27Copies3635223693.zipzip 61cb01f9f84ea238f9929255b291c95aa4e6c271374043b429038390c7be3078Virustotal results 0.00% 
2022-06-26Copies440771967.zipzip 48ffa39b7a72c1ec1e2c75a1822fd91e8dc3e1de42523a85039401cb727dc853Virustotal results 0.00% 
2022-06-26Copies2781146034.zipzip f57238c92410fbacff213430a1e20e027c375becb693bc0b0d2a8037028917a2Virustotal results 1.69% 
2022-06-26Copies4278623088.zipzip 414ebac64eefb9f96f17de2f52ac72aa8876f250a0ba537358d22dfd43323cc5Virustotal results 0.00% 
2022-06-25Copies3737858018.zipzip 522605269f0aba99df9f9c524fd6a6ede53570a9cc25cecae27d55599c19df1dVirustotal results 0.00% 
2022-06-25Copies3654816470.zipzip 23631d549b8b9aba8af1a38568603cbc70e4753d9237253eb44c9695e0926bdfVirustotal results 1.69% 
2022-06-25Copies1318750106.zipzip a5655f3a07397d789cffb4dcd0bd69bb22bcf462c9556a8d78919b9cec89440bVirustotal results 0.00%