URLhaus Database

You are currently viewing the URLhaus database entry for https://autoimporte.com.br/upe/iaudlnl which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:2328599
URL: https://autoimporte.com.br/upe/iaudlnl
URL Status:Offline
Host: autoimporte.com.br
Date added:2022-09-30 20:20:34 UTC
Last online:2022-10-28 18:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Status unknown
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2022-10-02 12:59:09 UTC to abuse{at}hostgator[dot]com,eig-net-team{at}endurance[dot]com,jayanathan[dot]muhunthan{at}endurance[dot]com)
Takedown time:26 days, 5 hours, 1 minutes Bad (down since 2022-10-28 18:00:37 UTC)
Tags:bb Qakbot link qbot link Quakbot link TR U492 zip

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2022-10-15eNflSbbKMmlfmif.zipunknown c69348ad98f92d5c8774f0fb87f37c99155c197fa887725dacaf4c5483db99ccn/a 
2022-10-11Articul4056809219.zipzip 74e1b5c22efedb17ddffcfc71e0fd6119438bd45f0e58f937d54a4bd62612a85Virustotal results 1.56% 
2022-10-09Co1870812701.zipzip cacd46ed934078e95a0deaf2980c512ad4223c28fb2d54bbbcbf08fc8e9f91cbVirustotal results 50.00% Quakbot
2022-10-08R49787872.zipzip 44d1caa54e4ca80aa79cc3661e717115c18800a1b7c1276caebc3882ff072578Virustotal results 40.91% Quakbot
2022-10-02Accusamusest1840532974.zipzip fd9bd2b1a2ab34cb3c98073a248d2df1c21518e9d50733366ba2e60162be8aefVirustotal results 3.23%