URLhaus Database

You are currently viewing the URLhaus database entry for https://www.quantangs.com/a7421hv/ugr/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry

You are viewing an historical record

While the URL referenced below has been used by bad actors to spread malware in the past, the malicious content has obviously been removed around 2022-12-20. Hence the the URL / website should no longer represent a threat. As a result, URLhaus considers this record as historical. This database entry has not impact on the reputation of the website / domain nor does it appear in any of our blocklists anymore.

ID:	245050
URL:	https://www.quantangs.com/a7421hv/ugr/
URL Status:	Offline
Host:	www.quantangs.com
Date added:	2019-10-15 14:45:14 UTC
Last online:	2019-12-04 20:XX:XX UTC
Threat:	Malware download
URLhaus blocklist:	Not blocked
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Not blocked
AdGuard :	Blocked
Cloudflare :	Blocked
dns0.eu :	Not blocked
ProtonDNS :	Blocked
OpenBLD :	Not blocked
DNS4EU :	Blocked
Reporter:	abuse_ch
Abuse complaint sent (?):	Yes (2019-10-15 14:46:04 UTC to anti-spam{at}list[dot]alibaba-inc[dot]com,abuse{at}12321[dot]cn,abuse{at}alibaba-inc[dot]com)
Takedown time:	1 month, 20 days, 5 hours, 44 minutes (down since 2019-12-04 20:30:48 UTC)
Tags:	emotet epoch2 exe heodo

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

Firstseen	Filename	File Type	Payload (SHA256)	VT	Signature
2019-10-17	klq219515.exe	exe	c4689416ad787d839872bf056c7ad149c191a33f4e069137de7300c0e1ca0f65	15.94%	Heodo
2019-10-17	zpd74n4415392388.exe	exe	ac00aabd272e9eafc441a6889ea8b6ff68d833ff46e85a108f721c656b1ef174	7.04%	Heodo
2019-10-17	qbut1i98.exe	exe	18ddc3eb572219bb27e0f03a0c6a76e46c2a2798bbe37caec1ae56f489837dd5	8.70%	Heodo
2019-10-17	cmuzkor0xl4830837.exe	exe	a9adb247281346b4ade9ac8ed3f86a2e450ef9069e8f95094fa0a42649cc0a42	7.04%	Heodo
2019-10-17	xotns57414353.exe	exe	358636c44ff22a4728fe0fed3285f322b2099c105d4fe78f8ba61c5420cb0b4f	7.25%	Heodo
2019-10-17	ww154794.exe	exe	283ada268aed41766cd90bcce8ad8b44774fd999d8d58e30567dc321aa468ffd	5.63%	Heodo
2019-10-17	c5347775370.exe	exe	64f0b743579dd6806bf7e7a9aaf8d5405ad73b8ca8a2d58b84c4e18d46e16e31	8.57%	Heodo
2019-10-17	xfnnkdowc71.exe	exe	38d77f4fa6241520b75b5edb2851b8ff9eb2f953bea7b86396f496357e8569c9	5.71%	Heodo
2019-10-17	xb56333574.exe	exe	b7f6eb251838f78c15260370e237980c48a7d674d6a32648af55980026cac8a4	5.80%	Heodo
2019-10-17	1yw83dn909808234.exe	exe	b5a9315c63d35b0239dee37e09a3d82141b5e0b32dfc4c6b10648294f2b4ecc3	4.29%	Heodo
2019-10-17	1zxjz2oul37.exe	exe	102b934e2a311a4ee8e84118cb1900a6d412bc40787094a5519aca131a0c5ad6	11.27%	Heodo
2019-10-17	n558105.exe	exe	238d739989cd1b467e0d3d84fa9bfd70f3e467e8b9f48dd41c5199cc4adab7aa	10.00%	Heodo
2019-10-17	vrme1i840.exe	exe	80647d075b8de1f6554759a01cfc4030c6ed14814277328a4e8707202d109956	5.63%	Heodo
2019-10-17	f265.exe	exe	c8f5bfd038088da96af341813e29553a7b719296df1a55bc01e5f922164bb4a7	7.04%	Heodo
2019-10-17	dmv3922.exe	exe	4b58c4ea81deaa87adb481f436d5d31523f971f457e6a41f6becb5fd39c4f2bf	5.63%	Heodo
2019-10-17	c644.exe	exe	09472d6a9da060a5574965258423c210ae2e86f248aed0886658dee088f69d1d	7.14%	Heodo
2019-10-17	6440gol51.exe	exe	563e4a9c9a917e80688e73c3d8146d7c12aa2d5caf1e836599ffd7512b23e0bb	5.71%	Heodo
2019-10-17	v5qg9h1903.exe	exe	919a1dab9edf36017431963fdf69dfba0968fa843eec8d0a8c08fde47f998c17	4.35%	Heodo
2019-10-16	kCgji4Afe9.exe	exe	e62fe8e49e2d077356458392658f48d69f70a1a379dd7dcde9b85bcab838e359	4.29%	Heodo
2019-10-16	9QO9703.exe	exe	ffc71ad85c6af487fbfcc2f25b12ae3decca9180d89b909b6720ef2b43fea384	2.90%	Heodo
2019-10-16	W757803.exe	exe	955c33f89260cc44d1c546f3770a10b8cb96b1457686043e44942a1329247e3e	2.86%	Heodo
2019-10-16	aSh6dX2629001.exe	exe	307723aa0a454b7cb1a49b1ef565502f0f71fee15ed81c701a18eb3196f40125	2.86%	Heodo
2019-10-16	WM286901.exe	exe	a8cb72d7f6fed290a89d7320aa539af4f2753c4f65bfbd579b2a6c8d6f50e98a	2.94%	Heodo
2019-10-16	4U6FeBh85749227.exe	exe	4960ee8376cd621939f53fe5ace099a6b15b2d6347648988a278d87b04a0d8b7	2.86%	Heodo
2019-10-16	V21.exe	exe	d0798de6a98efa6664d4e9dbdd9ce79a86d3eba6a5fa42e031eec52408ccbbf8	1.43%	Heodo
2019-10-16	1aS1209383065.exe	exe	ebc69d24302d9f9262b4d07cd4022317358009156651555af9ae7e5a80ab151d	1.45%	Heodo
2019-10-16	Id0bHi860.exe	exe	1836b34b05ad413cd596eda27cadc12b051e47f68bf64029deb9606473a581a3	0.00%	Heodo
2019-10-16	a3955447673.exe	exe	ef6af0844b3321c71024845188ddf305dabe6be2445be86eefacaaa942837e6d	0.00%	Heodo
2019-10-16	sKIT5ZnHc763.exe	exe	8482ec884e39ba88dc0fc76ba8e81c553f0e4572c4360540c6582bfa8a368226	10.14%	Heodo
2019-10-16	w9YXWCe3WF0782175.exe	exe	5f57806615245c072c1930ac74a311cb536cfed7bf8570389f7f9ae6cac61a40	12.86%	Heodo
2019-10-16	L30.exe	exe	8eb78f57619a173819ea9ef22dbebdf89bb7b0497c29eb6e3f0c72413049cac7	5.97%	Heodo
2019-10-15	zmptt3zmK13872.exe	exe	deca3be654504d28d58507d7d847b1bb35c9d23535c008ef7ce27d9ad1a23f5f	4.29%	Heodo
2019-10-15	47841326074.exe	exe	88cb9fee414906e4d55a82c4c3564bb1181072683db1c3f0e9820090a6f40072	8.70%	Heodo
2019-10-15	B444044.exe	exe	6de788187b9a790f0a378b94f02582e1453d4f77f5ac4c742c7ffc4bef0ea157	10.00%	Heodo