URLhaus Database

You are currently viewing the URLhaus database entry for https://homeworkcheap.com/ub/spnrtrtaeeau which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:2319393
URL: https://homeworkcheap.com/ub/spnrtrtaeeau
URL Status:Offline
Host: homeworkcheap.com
Date added:2022-09-28 17:58:09 UTC
Last online:2022-10-13 06:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Status unknown
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2022-09-29 04:46:07 UTC to abuse{at}hostgator[dot]com)
Takedown time:14 days, 1 hours, 55 minutes Bad (down since 2022-10-13 06:41:44 UTC)
Tags:bb H322 H436 Qakbot link qbot link Quakbot link TR U425 zip

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2022-10-08erreeqorNu3986465700.zipzip 8068cce0f4aa842682c26e6eb6998b88d65745ab03b58f6a0747043f9c805f04Virustotal results 45.45% Quakbot
2022-10-05CA2179356720.zipzip 9b32d837f5ccd946a991f785fa53a843f9735c9864bd6989a99e81a14eb2b9c9Virustotal results 3.39% 
2022-10-03mnuqcmHaiu2198212554.zipzip 913ce368257b5ecdebe18925b355d3d72da8ff5e4d63d0db95e90c8bd1f4bdeeVirustotal results 3.23% 
2022-09-30Quodcorrupti3874893731.zipzip d1adc8392c7e64af7912a0ecf252de7735bc13f6a5a6bd562138adfaf21e9a2cn/a 
2022-09-29G2094471040.zipzip fb2031291d3ca1e7711fb14c2393cf447f790ab051c3ad705883abde2305602dVirustotal results 3.23% 
2022-09-29Gall2250398507.zipzip dfac552c03c850ff46090b82bf36b3d3e652caf5f87904cb154b2f8e91be8160n/a