URLhaus Database

You are currently viewing the URLhaus database entry for https://chinargoc.com/ea/osamialgaenetmm which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:2317885
URL: https://chinargoc.com/ea/osamialgaenetmm
URL Status:Offline
Host: chinargoc.com
Date added:2022-09-28 17:46:12 UTC
Last online:2022-10-16 17:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2022-09-29 02:14:06 UTC to abuse{at}hostgator[dot]com)
Takedown time:17 days, 15 hours, 34 minutes Bad (down since 2022-10-16 17:48:38 UTC)
Tags:bb H322 H436 Qakbot link qbot link Quakbot link TR U425 zip

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2022-10-13bcsVHNtbwjVLCcI.zipunknown 0bdef664a3707443093b42b330ffb5f9f3892f8df3ce8eb783cf33a69d0c4233n/a 
2022-10-10R2451283491.zipzip cd5f4e02d2c9c2b826bffdf96d205346ec70550d0436984ad4fba04fa5e487efVirustotal results 48.48% Quakbot
2022-10-06G4227825226.zipzip 7c69b06d3f3b8b2914bea0c6db8fa24787147171d906e62e92b33df8d0168943Virustotal results 21.88% Quakbot
2022-10-01oeMQTWVSDolzpYW.zipunknown 935798f0460962d076e54e622fba7c1b4db96f7a0429e75837c5f92483d66257n/a 
2022-09-30Gall374463401.zipzip 02bd2a98731a19900cc7d68d94d7a465699b41cfe3449a182bf8171f8765ad4dVirustotal results 3.17% 
2022-09-29G3205303946.zipzip d5e4d41e2d75df2856445b641a80c4824341345e3f8f0bae3a24cffc994201bfVirustotal results 5.00% 
2022-09-29G1145330594.zipzip fa2da17b1621f7952d00e5ecc250dc1c8c4f7e4ed442513a59f56b9272671e13n/a