URLhaus Database

You are currently viewing the URLhaus database entry for https://safes-endocrine.com/edi/quilaboriosam.php which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry

Add tag Remove tag Perform URL rescan Delete this URL Report a False Positive
ID:2617838
URL: https://safes-endocrine.com/edi/quilaboriosam.php
URL Status:Offline
Host: safes-endocrine.com
Date added:2023-04-25 12:59:21 UTC
Last online:2023-04-28 01:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2023-04-25 13:02:10 UTC to abuse{at}namecheaphosting[dot]com)
Takedown time:2 days, 12 hours, 27 minutes Poor (down since 2023-04-28 01:29:46 UTC)
Tags:bb25 geofenced Qakbot link qbot link Quakbot link TR USA wsf zip

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2023-04-27Sjvx.zipzip fd27c9cd551b2b20ce76898ee292ac2a182d49d1a7763d273507aea96c0bdea1n/a 
2023-04-27Y.zipzip a35d7f4d444185b0e705b76c0a37e41394f2347821fcd0c86e0b996af95f91f1n/a 
2023-04-26Hpiq.zipzip 291e83462e4a4a534c5bf04c68aff67debb56e31f2dc493bf6e432b85dc32666Virustotal results 0.00% Quakbot
2023-04-26Ham.zipzip d757fd0237afd4884d70f94aeeedee241afedc46db7523e5d91617aa84caa43dVirustotal results 0.00% Quakbot
2023-04-25Y.zipzip 6959c5e9df1b6f16c760ed17776a5e6eaaf1eab6e4545be1de947d533f8d99b8n/a Quakbot
2023-04-25Kywg.zipzip 4abf021e0524d6dbc750758570245c28b09b89660e2c3c31ce1c7b0611ecb1b1n/a Quakbot