URLhaus Database

You are currently viewing the URLhaus database entry for https://saitech.com.np/ao/cinumterirop which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:2321514
URL: https://saitech.com.np/ao/cinumterirop
URL Status:Offline
Host: saitech.com.np
Date added:2022-09-28 18:13:39 UTC
Last online:2022-10-22 08:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2022-09-29 04:01:08 UTC to abuse{at}hostgator[dot]com)
Takedown time:23 days, 4 hours, 14 minutes Bad (down since 2022-10-22 08:15:54 UTC)
Tags:bb H322 H436 Qakbot link qbot link Quakbot link TR U425 zip

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2022-10-15hhRBfZbqoAvptWPl.zipunknown edcbd1f0b643a8463d2161a694db914968f1e8325e09e5f4d5d5e9ce2e2eff35n/a 
2022-10-11R3258671273.zipzip 969a3d0ee19a1118a54ddb0e38c96cf0b187f49f201c91460c78bf917b8da135n/a 
2022-10-03Co3823411531.zipzip db384e9f38378a38715f236e754024136ebf2ecb1a8a98b5a8096ef5ede8ba91Virustotal results 4.76% 
2022-09-30CA2634218226.zipzip 496b015f5b51851ea0d6f8c80e831b34e801c6971d555122372cb0d5fdbf90bfn/a 
2022-09-30G2510533447.zipzip 62de3358cd1d6919482a9d819e1b78b2159aee656a9cc375562919bcfb87eff5Virustotal results 3.23% 
2022-09-29Gall1875722332.zipzip 57e675b591452e0f8e825e18cb0587904177bc39c0695a851afd45f502df0742Virustotal results 3.17% 
2022-09-29Gall1154586092.zipzip 2127f3ecd732fac25346a59be9c38a1c85d4d2e3b2a7faecff4e6a2ba6b8530fn/a