URLhaus Database

You are currently viewing the URLhaus database entry for https://villamove.com/eutq/ndtedlieueparcls which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:2322497
URL: https://villamove.com/eutq/ndtedlieueparcls
URL Status:Offline
Host: villamove.com
Date added:2022-09-28 18:20:46 UTC
Last online:2022-10-10 05:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2022-09-28 23:07:13 UTC to abuse{at}dimenoc[dot]com)
Takedown time:11 days, 6 hours, 26 minutes Bad (down since 2022-10-10 05:34:12 UTC)
Tags:bb H322 H436 Qakbot link qbot link Quakbot link TR U425 zip

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2022-10-07Co663468636.zipzip 49e6e8a7553ff22b8d464cccb1fb2146d76e967140376bc1a46500579888c682Virustotal results 19.70% Quakbot
2022-10-02CA596512693.zipzip 6d2688aefb9a01bd9738a8d0b0b6fc2b8a5c9622250fca9f7de8ecbef96d0fd8Virustotal results 4.76% 
2022-09-30P2178061215.zipzip b781f85579a459ed60e8badb62e66b7573eb39b37929855b3b2f23304f2f16adn/a 
2022-09-30G2050525809.zipzip f2324363247300a73d2bbed2b1a41e35d4b5929b006a75018978668f1ebfde48Virustotal results 3.17% 
2022-09-29G1549407404.zipzip 329dedcba99cfb5e67325ba72ce4bd75d6baca50417e0c5c0e5f6a1925b6e603n/a 
2022-09-28rpsmeuaRi25362502.zipzip 2482818f606c891ef40475bf7e60613d014ffd1a8761867b57d5aa45623e9d07n/a