URLhaus Database

You are currently viewing the URLhaus database entry for https://502radiotv.com/tual/rltausopvtatthicubocie which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:2316935
URL: https://502radiotv.com/tual/rltausopvtatthicubocie
URL Status:Offline
Host: 502radiotv.com
Date added:2022-09-28 17:38:09 UTC
Last online:2022-10-13 22:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2022-09-28 18:22:07 UTC to abuse{at}hostgator[dot]com)
Takedown time:15 days, 4 hours, 6 minutes Bad (down since 2022-10-13 22:29:06 UTC)
Tags:bb H322 H436 Qakbot link qbot link Quakbot link TR U425 zip

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2022-10-10R7748688.zipzip 418f90ce0bdc1e10e653f6b7d234e8e69e10867799553464340e2e7f96d1667cVirustotal results 45.45% Quakbot
2022-10-02Card3587867422.zipzip 9c92ea7958bf9333768b60e3e2759a152c9c7d798947053c50882b568a3ab87fVirustotal results 3.17% 
2022-09-30Card3879848854.zipzip 5e34a3d7fd4957e952abcae69bd62fa193a100e560ec938420537b0a0908398dn/a 
2022-09-30G1488662718.zipzip b9a1328f3107582e58d4fef064f2d3998b658ccc513f9e98a513f5606400d9ben/aQuakbot
2022-09-29G620721892.zipzip f005df88b020055c67e99519860133f29b45bd3aaeec55f81a83a3ed0c3ad7b4n/a 
2022-09-29Gall2217720986.zipzip 0f21596e106270c2d4aba30302de129c3ed9f79349fe4ec1326cda4d39700d45Virustotal results 3.23% 
2022-09-28Doloribusvel2990956805.zipzip 9b8bf3e86ef52abda9b825d952b9191f0bec65e6c57ff6b81dd7c51a3a7f6683n/a