URLhaus Database

You are currently viewing the URLhaus database entry for https://cuellargalvez.com/anam/uqooosulleterdma which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:2318222
URL: https://cuellargalvez.com/anam/uqooosulleterdma
URL Status:Offline
Host: cuellargalvez.com
Date added:2022-09-28 17:48:36 UTC
Last online:2022-10-11 02:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2022-09-29 02:48:07 UTC to mochahost{at}cloudequitygroup[dot]com)
Takedown time:11 days, 23 hours, 43 minutes Bad (down since 2022-10-11 02:31:39 UTC)
Tags:bb H322 H436 Qakbot link qbot link Quakbot link TR U425 zip

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2022-10-04Card2909164096.zipzip ae1d5231f3faa39d321afda12960027595bcc7358eaca4ff5d47b114ca0f4eacVirustotal results 6.35% 
2022-10-01C981047321.zipzip 6bcefd27aaec6b41c1320bc8faa064b8a4de5b0c4ff86631d1bd7b360dd4c9a7n/a 
2022-09-30G3760942680.zipzip 0933126d6e42b3ded69c8999b2ae853b1e25e8dc54d562ccdf002d6c7ea9042bVirustotal results 3.23% 
2022-09-29Gall1621487773.zipzip 6481c551960b3cfe6244b92fe1ddc81f29276d08a7110e65669d5eb3e7831b83Virustotal results 3.17% 
2022-09-29Gall2896862248.zipzip 5347ed794bf262260d49e3b6d0ad6ae0f92bbfc672ca4c9d215cd3662249a6b1Virustotal results 3.17%