URLhaus Database

You are currently viewing the URLhaus database entry for https://raengenharias.com.br/ee/itomsaudn which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:2339377
URL: https://raengenharias.com.br/ee/itomsaudn
URL Status:Offline
Host: raengenharias.com.br
Date added:2022-09-30 21:52:15 UTC
Last online:2022-11-28 23:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2022-10-02 04:26:10 UTC to abuse{at}hostgator[dot]com,eig-net-team{at}endurance[dot]com,jayanathan[dot]muhunthan{at}endurance[dot]com)
Takedown time:1 month, 27 days, 18 hours, 38 minutes Bad (down since 2022-11-28 23:04:56 UTC)
Tags:bb Qakbot link qbot link Quakbot link TR U492 zip

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2022-11-21ZHGMjsJL.zipunknown 14a7b9a00ade65942b32e738ff7f568ecc50efc00b3f24b218983a115639e442n/a 
2022-11-18oDwjEXfMQ.zipunknown 77e434e2cb0136b39b3fdb78e69041e5278fc39610ebfc2e9a874b8d031d4fb8n/a 
2022-11-03YJWJxoqDXRtuAtEVLly.zipunknown 61c822b5e57aa4195a885fada7150246fcfa20ff97e1bb6182914c1af32c5f35n/a 
2022-10-24DxAaeVPHfMTRBWCpO.zipunknown 679d5864ae49ec5cf90d56ef8dd73833ee2ca6c50cc2b43863a5067ce6225014n/a 
2022-10-18UyVkcIOSet.zipunknown aad1086b01a72a052f93e0261bbe5f2fb4c348b74e7330d99e28b233a41bb896n/a 
2022-10-12xxmZKrHbYw.zipunknown cec9b81285b3ed07f510a8e3ce339b1618e272e607c5fba46a6bf714658c871en/a 
2022-10-04R255861485.zipzip 634c2de1aa601596b0870d32fabaa62983d6c4aa49897370307a12774b4f36a5n/a 
2022-10-02C4093571789.zipzip 73168eb8cf2acb515ba7f89052130ee3c7fe16c708d7e15ddbdc16db55aa0562Virustotal results 3.23%