URLhaus Database

You are currently viewing the URLhaus database entry for https://koionrekber.com/srue/oquunatcertus which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:2336335
URL: https://koionrekber.com/srue/oquunatcertus
URL Status:Offline
Host: koionrekber.com
Date added:2022-09-30 21:22:11 UTC
Last online:2022-11-28 19:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Status unknown
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2022-09-30 21:23:08 UTC to abuse{at}idnic[dot]net)
Takedown time:1 month, 28 days, 22 hours, 20 minutes Bad (down since 2022-11-28 19:43:54 UTC)
Tags:bb Qakbot link qbot link Quakbot link TR U492 zip

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2022-11-20mkJpZbL.zipunknown a84235830c4ae03bcb5d1f80afc56477fbeb4459e7677f0ab17e2690b7527ba6n/a 
2022-11-16nTNd.zipunknown 902f4de42a239971a4b24e81d3f49caf81b310dafdb9fd5b58fcaa15e5abcdfbn/a 
2022-11-04QPORVpUprOdGcMEVMc.zipunknown 9ac0968ce956cdf6f67fe4264c8aa572336ca38ec94978004abad1ace256effdn/a 
2022-10-24rVDubEPsefwbQQloa.zipunknown 97f8fa9e67279e964b74bca2f5a6b12d9959f9a304132eebf6e23ae045c37ba9n/a 
2022-10-20OuHxrvWLwfSQ.zipunknown 068dadb821440dc40157474cfa14788d7b2161eb1f141ddbbbc9933a757752e0n/a 
2022-10-14BVtTmiMgWjGWOkqjLT.zipunknown d4fb5a2a7a8f062b332b6ab630e62320e9d92264ed5e12319a3d7b4080be14bcn/a 
2022-10-09P868472055.zipzip 8e9b09223a6b2bbe4163e7c98b9669fac1db5922d5d1847468eec9a05695e53aVirustotal results 43.08% Quakbot
2022-10-05R3883883752.zipzip 5379dcbac4c082d9e6c33df40abae01ef1875e6ccc16dcc36a888c7cd553d24fVirustotal results 19.70% Quakbot
2022-10-01C1694145504.zipzip 29ac5b0e5ba65cfcada6d1b40463bb9fd889b1da9a31f5a6bb66163f2bdac096Virustotal results 3.28% 
2022-09-30tGheFCQMG.zipunknown da277d428372607414f3c10b410abf1d173f34af8fed45b60c2a9d94132e1ddfn/a