URLhaus Database

You are currently viewing the URLhaus database entry for https://jyothichitra.com/anie/ttpuleraela which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:2319892
URL: https://jyothichitra.com/anie/ttpuleraela
URL Status:Offline
Host: jyothichitra.com
Date added:2022-09-28 18:01:48 UTC
Last online:2022-10-15 08:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2022-09-28 23:53:09 UTC to eig-abuse{at}endurance[dot]com)
Takedown time:16 days, 8 hours, 38 minutes Bad (down since 2022-10-15 08:31:10 UTC)
Tags:bb H322 H436 Qakbot link qbot link Quakbot link TR U425 zip

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2022-10-11N385047051.zipzip 5042212fa1d6e603b2e93d5bbbc5e8b617b685aaf8adfc3a728e857c4772e587Virustotal results 3.12% 
2022-10-06Co2355970128.zipzip d37dd45c7305a3da7a1c739f5658e5d7af225c7fd618bace00d42ca686f90644Virustotal results 21.21% 
2022-10-01C222580874.zipzip 64c339a88a941d2d60a9137cd2ae8dccd7f2b92305407d58b4bec7da32f4280bn/a 
2022-09-30P1928014572.zipzip b9a1328f3107582e58d4fef064f2d3998b658ccc513f9e98a513f5606400d9ben/aQuakbot
2022-09-29Gall1554453579.zipzip b23953bfe419578bbb7c14f2fd6982e67d5d35084531e7a38b28d95164b149bdVirustotal results 1.59% 
2022-09-29Gall1452427079.zipzip 4fb9f494b16ddc09d279da6b9d6d87d335506593abef3f02f72ea85bf8409453Virustotal results 1.64% 
2022-09-28Gall3353310868.zipzip 69ed6da13f42df3983ed4a0e2f6b37d736fd2b1541b55212c6ca9b1d092a46c9n/a