URLhaus Database

You are currently viewing the URLhaus database entry for https://autoimporte.com.br/upe/tsntesi which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:2328504
URL: https://autoimporte.com.br/upe/tsntesi
URL Status:Offline
Host: autoimporte.com.br
Date added:2022-09-30 20:20:12 UTC
Last online:2022-10-25 21:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Status unknown
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2022-10-02 09:29:09 UTC to abuse{at}hostgator[dot]com,eig-net-team{at}endurance[dot]com,jayanathan[dot]muhunthan{at}endurance[dot]com)
Takedown time:23 days, 11 hours, 59 minutes Bad (down since 2022-10-25 21:28:50 UTC)
Tags:bb Qakbot link qbot link Quakbot link TR U492 zip

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2022-10-17hyccQmsFgWVHgrucGt.zipunknown 6c09dc7baa1141be39b94f5da88750aa1b63806ae58072a4410d3e85fd0a773an/a 
2022-10-12WSCgRjqfQLFAZdnZG.zipunknown 711e13216948d9303cf79a21f0e865399c64706563bc966f8b0134edb5545521n/a 
2022-10-07Co2633007593.zipzip b9bd6e51f1ffc9d3ca06ae88cb3b3165c096a34cdd00cf74ad5878881e746896Virustotal results 48.48% 
2022-10-04Co2880242724.zipzip c6186fc95c3ab436d479e1e131c4e57637e11483a0ab5bc6a99d8691d40b0a39Virustotal results 3.17% 
2022-10-02PXGU.zipunknown 98d0dcc32fd314b82a9a70e3bc8157c06fd7aa80e95a36d36217d580b5709f13n/a