URLhaus Database

You are currently viewing the URLhaus database entry for https://koionrekber.com/srue/pqrouteciuxe which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:2336458
URL: https://koionrekber.com/srue/pqrouteciuxe
URL Status:Offline
Host: koionrekber.com
Date added:2022-09-30 21:22:40 UTC
Last online:2022-11-30 13:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Status unknown
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2022-09-30 21:23:08 UTC to abuse{at}idnic[dot]net)
Takedown time:2 months, 0 days, 16 hours, 36 minutes Bad (down since 2022-11-30 13:59:17 UTC)
Tags:bb Qakbot link qbot link Quakbot link TR U492 zip

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2022-11-27LhlFLxsRaLKsn.zipunknown bf96334362c9226ed0899d1d25e6f55a1056dc614e49ba85fe3baa577376b99dn/a 
2022-11-19ffHgWSWGLfXh.zipunknown bfaf4b04adee932ee0d54e6d0bc41643c7df18add7fbcf057c65a312f2840b88n/a 
2022-11-04KyDsgapevHGBUNKcY.zipunknown 54135e446988ec3ada968c68a7a8c73a623a6363206eae9254a68f809f8c5bd9n/a 
2022-10-25mPYtRlIz.zipunknown 8e591bd90cce68e011cf78d3d1d3d1596922078d840a474acb752676f7c3f664n/a 
2022-10-17PSsHUlkajZEZBJJzn.zipunknown 3cbdd6f7a2c51e4f868f61e8411351058e2dd7d353a15f3e3918dc69b4551045n/a 
2022-10-11N677299966.zipzip c45326e1355578b765ae25124559b3e9823a9122d9b7cb2df583a1e383918989n/a 
2022-10-10Co4092562565.zipzip aa611d6955626348f3b20561ec475dd111413884b631a866e43ea81dc33570ceVirustotal results 26.56% Quakbot
2022-10-08Co273516099.zipzip f583518753482a2b79264fc3d46efcb0b25635e74811fe15b2c06e64842006c6Virustotal results 48.48% Quakbot
2022-10-06Card153818685.zipzip 1dcc126d2aacb87f24153cf24411a4a39e299c8734faee69e80743d06139efbdVirustotal results 19.70% Quakbot
2022-10-02Assumendaquaerat2386804983.zipzip f4f5b1e17a059e3c0c3dba25c0d85bd9398464bbc165b708706b24edc0a3e367Virustotal results 4.76% 
2022-09-30DGIoqCXmVaA.zipunknown 0c12a3dabd00c51d2060d2c640461dac459626a01f36137db3a7cc41e0ab48e2n/a