URLhaus Database

You are currently viewing the URLhaus database entry for https://divinediamond.org/les/auecpslt which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:2318493
URL: https://divinediamond.org/les/auecpslt
URL Status:Offline
Host: divinediamond.org
Date added:2022-09-28 17:51:15 UTC
Last online:2022-10-07 22:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2022-09-28 23:33:08 UTC to abuse{at}hostgator[dot]com)
Takedown time:8 days, 22 hours, 56 minutes Bad (down since 2022-10-07 22:29:11 UTC)
Tags:bb H322 H436 Qakbot link qbot link Quakbot link TR U425 zip

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2022-10-05R2586897669.zipzip 2612063e574e0c27669c25d75fa5ec7b3f868669b992d5d9c3a7f860896290e7n/a Quakbot
2022-10-02Card1368647901.zipzip c4eeb2d7a439b4cc5030655c58ec4ded33cc98c33aec3d745eb547021a5b6a53Virustotal results 1.64% 
2022-09-30P3497900854.zipzip b9a1328f3107582e58d4fef064f2d3998b658ccc513f9e98a513f5606400d9ben/aQuakbot
2022-09-29G1768255702.zipzip a06210171ba4b10b6c0ea52588f0292b597005f65406527e2da7860276b37b03Virustotal results 3.17% 
2022-09-29Gall2994029267.zipzip 8da35019dd67c127f8a2d3116ca3c033b6980800fb3645c9d75eb25e53538b48Virustotal results 3.17% 
2022-09-28G830264730.zipzip c8af9aa21f10dfcc4e269ff2e139b447aa8ebfb5469f6e5c41e9766f1242bbceVirustotal results 1.79%