URLhaus Database

You are currently viewing the URLhaus database entry for https://drillaltd.co.uk/dro/dro.php which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry

Add tag Remove tag Perform URL rescan Delete this URL Report a False Positive
ID:2605918
URL: https://drillaltd.co.uk/dro/dro.php
URL Status:Offline
Host: drillaltd.co.uk
Date added:2023-04-11 13:48:24 UTC
Last online:2023-04-14 02:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2023-04-11 13:49:47 UTC to abuse{at}namecheaphosting[dot]com)
Takedown time:2 days, 12 hours, 39 minutes Poor (down since 2023-04-14 02:29:22 UTC)
Tags:BB23 geofenced Qakbot link qbot link Quakbot link R89 TR USA wsf zip

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2023-04-13Qvw.zipzip fe18bc60af684eaf4a565d35fc6cc77e9c959d029bb00010c34e9af1bcd6ad57Virustotal results 12.90% 
2023-04-13Dmi.zipzip fc79b15382a7ee55db03411b93584105dafd762561587d03f2f508e629e1ece2n/a Quakbot
2023-04-12C.zipzip e264351aa90e08f844e11f1d8ac8314e8cda243ab8918c6f3b93ebeba5eb5be5n/a 
2023-04-12Ucm.zipzip a6f0d0fc9f2e695296ba1e46e652ec7cb8978dfc63905ec73163016af413be06n/a Quakbot
2023-04-11A.zipzip f3abd393364a43391d70a984704b64b01e6f77ad645aa65f13dad2bf988d3ee6Virustotal results 0.00% 
2023-04-11Gn.zipzip 6afb128f500aff9084fa106734dbe82237d76b576832158619dbef479681675cn/a