URLhaus Database

You are currently viewing the URLhaus database entry for https://chinargoc.com/ea/oensdtolisr which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:2317946
URL: https://chinargoc.com/ea/oensdtolisr
URL Status:Offline
Host: chinargoc.com
Date added:2022-09-28 17:46:20 UTC
Last online:2022-10-21 06:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2022-09-29 03:03:07 UTC to abuse{at}hostgator[dot]com)
Takedown time:22 days, 3 hours, 49 minutes Bad (down since 2022-10-21 06:52:52 UTC)
Tags:bb H322 H436 Qakbot link qbot link Quakbot link TR U425 zip

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2022-10-15doXVhqmWe.zipunknown eaf0fb761831cdb65685334ee0d9d2b36bb9f8f4715891fa3c849622ed4cb0dan/a 
2022-10-09R1541055018.zipzip 80d318ce4fefb8397fd983b15926eccb8c356e275ffc2f801d36ccdd272221d2Virustotal results 45.45% Quakbot
2022-10-08Co623751799.zipzip 16885928da480575794b122c9ac2adb01f0c2621835ec05e26e4510e220b746fVirustotal results 44.44% Quakbot
2022-09-30C2964677401.zipzip 9533a30cd725f242b48b316ce16188e6062e32ca4be2ca293c47d6651aed5a0fn/a 
2022-09-30G3930476272.zipzip 6d3f62c7602ca077bd027da76830bc8722313214c6c9e1e34b4fc86995d84ea2Virustotal results 1.59% 
2022-09-29Gall172762410.zipzip 7bbc1ed8e60c1b0584db3cd1d7b69eae209ca7e5e16fc947f44ceadae7a373a8Virustotal results 3.17% 
2022-09-29G3206890617.zipzip 2c7d0644873a3a9ab0e8aeb758d9e0e8c428ebbfeb6d5e4528b520dee936c8ban/a