URLhaus Database

You are currently viewing the URLhaus database entry for https://bladna24.ma/fsin/tlevotteapu which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:2317648
URL: https://bladna24.ma/fsin/tlevotteapu
URL Status:Offline
Host: bladna24.ma
Date added:2022-09-28 17:44:12 UTC
Last online:2022-09-30 19:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2022-09-28 18:40:12 UTC to abuse{at}cloudflare[dot]com)
Takedown time:1 month, 0 days, 3 hours, 7 minutes Bad (down since 2022-10-28 21:47:49 UTC)
Tags:bb H322 H436 Qakbot link qbot link Quakbot link TR U425 zip

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2022-10-15feUfJyTTGSUbFHxD.zipunknown 3b3d99993e2cbf30c6219e69a62a30badd46c447f6cd3866e4b960abfeba4eb6n/a 
2022-10-11N3169655878.zipzip cc2d7271ae3379b62efb0338cc5943a068cc1e3053363f2f9cd06f5e581b83d5Virustotal results 3.92% 
2022-10-01CA2604724142.zipzip d31fd31784723918bbb0350648f07939bbd02684e35e60d9697c9b088b4218fdVirustotal results 3.23% 
2022-09-30Post3636180418.zipzip b9a1328f3107582e58d4fef064f2d3998b658ccc513f9e98a513f5606400d9ben/aQuakbot
2022-09-29Autipsam3391287365.zipzip 1abf99c4de699c130e21c5d51d5c60b326d5db0377b9656cadf115ee1027eff0Virustotal results 3.17% 
2022-09-29Gall2432648165.zipzip cf4e6c235a0d733b3667e4ec607783b1d830b5acef6f4e138e951706657f0e1fVirustotal results 1.67% 
2022-09-28G2124636253.zipzip 409355fc548c5e690e6773e308f1cdbec6e80a26484b065cc72a30d0b238b7ean/a