URLhaus Database

You are currently viewing the URLhaus database entry for https://vishnusoman.com/ne/?1 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:2634156
URL: https://vishnusoman.com/ne/?1
URL Status:Offline
Host: vishnusoman.com
Date added:2023-05-16 13:42:11 UTC
Last online:2023-05-18 21:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2023-05-17 20:04:08 UTC to abuse{at}cloudflare[dot]com)
Takedown time:2 days, 7 hours, 42 minutes Poor (down since 2023-05-18 21:26:30 UTC)
Tags:BB28 geofenced js Qakbot link Quakbot link USA

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2023-05-18Asjmmyg.jsjs 76443e093ed6d6e3961cb5f9bbd546bab2d05f6bc2536c5744dc86f7a769bea8Virustotal results 30.51% 
2023-05-18Xakgk.jsjs d7522ab4f64ae0950e24bb00df9157136bbcb900ace0c77bd1a46f06149bf37aVirustotal results 23.73% 
2023-05-18Gvclra.jsjs 77a97bbae92dc7a7845ded72bd28a849a3c41c2912628816d93ff4b9a27ed45fVirustotal results 32.20% Quakbot
2023-05-18Zwicrvac.jsjs 6003ec795de91a5d5a9a9abb15e037b5f4dcd8cbf43bac5330005fdda61c603aVirustotal results 25.86% Quakbot
2023-05-18Ngls.jsjs b243ce7f5b24e6eab35ff99fcc718064f5897388b337460b05226b50e50b7dfen/a Quakbot
2023-05-18Qoihamt.jsjs 7fc4905fb7d4a1e1c931e869fdfaabceabbdbf242ca9e35ff7178f74e6f7b207Virustotal results 25.42% Quakbot
2023-05-18Ymufroom.jsjs d6e5d8bb312aa607d892cd90a910040c5ff30ee3a76f41fd9c177f3c09b59f21n/a Quakbot
2023-05-18Idsgu.jsjs 86fa62e0346304f7f35a32db756544d5f0b031a7794b54ab9008570bd7ef65f8Virustotal results 20.69% Quakbot
2023-05-18Valexg.jsjs 0651c77d8fadac8f6e3798ca1534ef6af11482867d22cfb20df41d868c3cc727n/a 
2023-05-18Ixtm.jsjs c3f8749b256087bbe0dcc6d662f467c1d34f701e65acfb75292a72aba0657e26Virustotal results 32.20% 
2023-05-17Mauj.jsjs 5ed8c2a8ffd44a6f80d52c65210bcb3ab9bbfc42a217a03db9d435fe66f68833Virustotal results 25.42% Quakbot
2023-05-17Elwwcv.jsjs ef903a00f557175fbe1af9263796fbdaad81dc6578e948729821675219196f43n/a Quakbot
2023-05-17Feeazah.jsjs 3a2fe931e43de04dd026f5fa57590b2baf3539c2930e6d9239ec3a95a1ec6bd7Virustotal results 32.20% Quakbot
2023-05-17Iuqwnr.jsjs 0e6261c9c8d05c96074d71e8c45d5c3dbb78736803c84ec4565a0db8dd83510bVirustotal results 29.63% Quakbot
2023-05-17Ndup.jsjs 72495f905e654ea365738e7e3ac93200be27ad81df4327197c8d1a1427209a25n/a Quakbot
2023-05-17Tcqai.jsjs 2570cf55120f499263bb8841172328a59101385bd1804bb919458e9bf167319bVirustotal results 25.86% Quakbot
2023-05-17Lapjw.jsjs 73abfbef5c169e5239c78d4c04f3d18f7f72490c2ca0cbbb33d92cac9675dd16Virustotal results 27.12%Quakbot
2023-05-17Vpnsbfug.jsjs 621773bfcb5362ccb6657273c17d30ae363a4e6332adb6d56e38b404a64b5f58n/a Quakbot
2023-05-17Gnrx.jsjs b70eea60425f21fb5f2d5d6ee1f4cd6c4a41f0a567ecc733517d717fa3b67628n/a Quakbot
2023-05-17Hhzmfgid.jsjs 029d3a67f9e361b39731f0d44a2cba420c6b8f9a5a3beeef1fe29b703a201ca8n/a Quakbot
2023-05-17Ltiepkmd.jsjs 5b2c51553fb417cdb33a811ed3c3f3db5be4b0432b6e88c087fe8ba9330b3cffn/a 
2023-05-17Zzjt.jsjs de7e4b8b3700f0fd38f1a439e67ca6c165792c1fc13e51f55297923b6a377355n/a Quakbot
2023-05-17Ekzrzifg.jsjs 7a932648a7b64f2e852720bf6e046549e802a877a154df8f5fcb51e86438ea10n/a Quakbot
2023-05-17Unaufp.jsjs 99ea25b6a8fdb0fa76a59cb6146edbcaad6387125e6800effbcba190510840c4n/a Quakbot
2023-05-17Yovp.jsjs 78a99af1cf77eb25b736c88d8fd9ba99e53070d24c6270c18489c484f8a46fa6n/a Quakbot
2023-05-16Uyxpg.jsjs 35972654e6b23db094655228b5b39612282da914723b721c6dee62c2f91552a1n/a 
2023-05-16Ffcq.jsjs bd6e64e2339c844d7b16ea6337bf5b4b4478ade2fa7dfbe512fa045e596cfd53n/a 
2023-05-16Beowse.jsjs c1c6d33d745f2eefdb29f559b7feeabe820a31a392609cd9ed0fdfd05bd9bb74n/a Quakbot
2023-05-16Voipey.jsjs e115122350b05f63f08d5816a3c5348c3758120fb33e33aca0c41e75f9cc54d8n/a Quakbot
2023-05-16Uzurp.jsjs 50adbf62fbf861a3786c8338f196cfec9aaa3685b9ea0353482fc9de95591b35n/a 
2023-05-16Lebarbl.jsjs 5b2b9daa68cd83d7d5d65788b97573eb1fdfd3962581a672a6287d0c376e271fn/a Quakbot