URLhaus Database

You are currently viewing the URLhaus database entry for https://502radiotv.com/tual/sannctrusdeeua which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:2316959
URL: https://502radiotv.com/tual/sannctrusdeeua
URL Status:Offline
Host: 502radiotv.com
Date added:2022-09-28 17:38:15 UTC
Last online:2022-10-14 13:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2022-09-28 19:16:08 UTC to abuse{at}hostgator[dot]com)
Takedown time:15 days, 18 hours, 34 minutes Bad (down since 2022-10-14 13:50:08 UTC)
Tags:bb H322 H436 Qakbot link qbot link Quakbot link TR U425 zip

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2022-10-09R2812581592.zipzip 33990564106bd8b0d8ff7aeccdc4fc5482a36f7d189cfa3e09fdf58400f868b9Virustotal results 42.42% Quakbot
2022-10-06Co3276715329.zipzip 67998e63dc5834c39a2c530fdffe607cf01dcecff27f21458668a02bbfb4d37cVirustotal results 22.22% Quakbot
2022-10-03tutA1940653516.zipzip f5359bef2bbdbcc8ac194f7863b52f940e07122fe0a529cec0f394876a545b97Virustotal results 3.23% 
2022-09-29G3749516564.zipzip 8a72ddc6aa13f0e9b3aaa280e1216e3ec34074b0b8a4d2c2dbc136aa5d8728a9Virustotal results 3.17% 
2022-09-29G1694732328.zipzip a3d5d8eda47382677e784483f2f9efb444b34e9de8a089c6fc1223f286095d2bVirustotal results 3.17% 
2022-09-28Dignissimosipsa3649628412.zipzip ddc79388c47e03a22d80a37205a65f54de4841af5e16904e3f45d91a89d0be33n/a