URLhaus Database

You are currently viewing the URLhaus database entry for https://saitech.com.np/ao/etat which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:2321601
URL: https://saitech.com.np/ao/etat
URL Status:Offline
Host: saitech.com.np
Date added:2022-09-28 18:13:51 UTC
Last online:2022-10-29 11:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2022-09-29 03:13:38 UTC to abuse{at}hostgator[dot]com)
Takedown time:1 month, 0 days, 8 hours, 5 minutes Bad (down since 2022-10-29 11:19:07 UTC)
Tags:bb H322 H436 Qakbot link qbot link Quakbot link TR U425 zip

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2022-10-19pOfYtXk.zipunknown 92aa5b79df3abef82fdb5150235fcb8742b7fed52944463987fe38586be39d75n/a 
2022-10-14dFAoJxhNoQwvPjL.zipunknown 6971bce934b6395b80cec479e52da4382457a798aaaf23a569975c378937497en/a 
2022-10-10R2461519335.zipzip bccd6b1b9037a3b4f8ee170493b4b991f392cf331a03ec403a9f1abb8a71f67fVirustotal results 48.48% Quakbot
2022-10-06ovttoiearDirlse1400882587.zipzip 347b28d0c72190f7141c129340d2982299188ac4cc04bac1e98d5c373e09a1e4Virustotal results 20.63% Quakbot
2022-10-04Card3806339721.zipzip 8f255cfc33bc49efbdab11a80342e176e0ea6f7e05168516399f63492a035cb5Virustotal results 6.25% 
2022-10-01Card4140319675.zipzip 4cc81926d2175855d5b0523b068a8f08634359e54dbc57f4b6af5c0dd6e06ae8n/a 
2022-09-30P87347228.zipzip b9a1328f3107582e58d4fef064f2d3998b658ccc513f9e98a513f5606400d9ben/aQuakbot
2022-09-30Gall376665915.zipzip dfdb854b0475ed29c38b7151226978510828c9d31b23d76e159b044811e3ec3eVirustotal results 4.84% 
2022-09-29erreeqorNu4158687248.zipzip d96e0eb7e51ee374165bdccde0296beac22670a91d19a8ce9a3460153e67df66Virustotal results 1.59% 
2022-09-29Doloribusquia4168087394.zipzip 9689769dca0490926554149a56a13639583925bae5ad1618939e5716a65f6c56n/a