URLhaus Database

You are currently viewing the URLhaus database entry for http://dmobileinc.com/vq/vitadtecia which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:2316748
URL: http://dmobileinc.com/vq/vitadtecia
URL Status:Offline
Host: dmobileinc.com
Date added:2022-09-28 17:36:12 UTC
Last online:2022-10-15 07:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Status unknown
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2022-09-28 17:45:08 UTC to abuse{at}godaddy[dot]com)
Takedown time:16 days, 13 hours, 44 minutes Bad (down since 2022-10-15 07:30:05 UTC)
Tags:bb H322 H436 Qakbot link qbot link Quakbot link TR U425 zip

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2022-10-13vqEjT.zipunknown b9fbccc31b096845c70fc61817714806c6ecee98844b644a33ba3ce38180cd7dn/a 
2022-10-08R2802460451.zipzip 0e9a25872b5ddd089a3b081e9b6d79128aaf86d33f4cc5b1ab4cab12cbdb8bb5Virustotal results 47.69% Quakbot
2022-10-06C849774798.zipzip 6edad01e8b6d45f0ce0b92df70223741e402fbfe0f7a59ec86d0800e78e973adVirustotal results 25.76% Quakbot
2022-10-03jukTnoHxOiT.zipunknown 017ef0e3df20caf9de3896ed9d1817fee16f80869799479571470e1810ecc404n/a 
2022-09-30P1587271118.zipzip 9cc4fc2f7dcf3de990bf68529b8bf6143dcfa553918621d560ff3b91dbcbc02en/a 
2022-09-29tutA1326879330.zipzip 444d86966411e28c25e8783bf2eb2767d67229f6d47783230c58838beb11f50cVirustotal results 3.17% 
2022-09-28G3569424449.zipzip 956e9ee547fa2b75d38d7e05541b870e66930ca28c9e7eab4b0b54077cf059f7n/a