URLhaus Database

You are currently viewing the URLhaus database entry for https://webcloner.net/rro/?1 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:2634241
URL: https://webcloner.net/rro/?1
URL Status:Offline
Host: webcloner.net
Date added:2023-05-16 13:42:24 UTC
Last online:2023-05-18 22:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2023-05-16 14:36:06 UTC to abuse{at}namecheaphosting[dot]com)
Takedown time:2 days, 8 hours, 20 minutes Poor (down since 2023-05-18 22:56:19 UTC)
Tags:BB28 geofenced js Qakbot link Quakbot link USA

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2023-05-18Gbbotb.jsjs c74cf0cb7927a8438a84c9cedbdbab3e4815550813336043f39674a67b6a021aVirustotal results 28.07% 
2023-05-18Qeowat.jsjs 6016f12710a18923ed029eb1dc62882b5f1a032a7424e0169dd8c2228598f59dVirustotal results 28.81% 
2023-05-18Iigige.jsjs d3c6e06204212c1aeeef29809460056535cba3beca8cf163b7c8719671ef0c9fVirustotal results 22.03% 
2023-05-18Ekwjiesr.jsjs 51ffefa8a10b6da720a80cec4735fe173669e7c974946e46c8dda908e824d8a4Virustotal results 22.03%
2023-05-18Pcqjunt.jsjs 1bee1ef1d5e3c86ab4300a7cce20d8fa0d9256160b170637ed6c9fced0dd2d21n/a 
2023-05-18Hxwdurt.jsjs 783e0a457afb1237e0956e6ff847bfcdb49ee23036f51b4621b534f54d67112cn/a Quakbot
2023-05-18Bocpxjra.jsjs fed0fa880fd9812bea44ff765356fb74bdc116ba4a93d3e22ad855b9e789e299Virustotal results 31.03% Quakbot
2023-05-18Adwoaxv.jsjs 644d7490c3fe27e34ffb24eec109bfe9aaaab1a088b489de784de77611e65df8n/a Quakbot
2023-05-18Xlvd.jsjs 2e6fa76c0870d4318d71a8defd95759f831cb88397931327f00478d853bc9525n/a Quakbot
2023-05-18Uzkdmk.jsjs 753569ed5b6539685798c9810e39b6c67eab5c08103e0c79d4cc2f1c16cd8ac4n/a 
2023-05-18Gxuwgmym.jsjs 64dbefc6ce8b2caf9b441a36490ebed30319eed28e49ddf95d43659494906f10n/a Quakbot
2023-05-18Pveudu.jsjs dc0d873178c61dae13dac14d65611d4716e9c28ebfa216e32126dbdd1ac971ben/a Quakbot
2023-05-18Lusj.jsjs 6da4a8bacb02c6d1b3251c5978545168c0712fb14b5ec2731a867b73a3daeacan/a Quakbot
2023-05-17Zuizdw.jsjs b89d6433da85e8b53b60dd8f31aa096c923d9b4fb337c03d3b381482ef280974n/a Quakbot
2023-05-17Tffwzipf.jsjs 3e294b83a7ced7203c04c79e0e2893c636344ba211f59ff49a66d91a93fe3bc4Virustotal results 13.56% Quakbot
2023-05-17Qnxdt.jsjs 7b0e64b5b88495d402a11b16ad7776cc5e0d44a07992e8b9cf9c7006a92ac8bcn/a Quakbot
2023-05-17Gofd.jsjs 872a8726044bc6afb068028c44ba1376f7a3a6835147e080a9c5b7de41d634afn/a Quakbot
2023-05-17Yplc.jsjs 75aba79d300dca2a11da16879bf5c0fd15d388a5926381550db24144937b72fan/a Quakbot
2023-05-17Ksvddxg.jsjs 6c3bb42119a38ed4e706dec98aab8fb4f0dc1823dc596ec2ef93209f6fd5c217n/a Quakbot
2023-05-17Zlnm.jsjs 45ab96c8d5ad41b50960ac575ad360949f4ed62231606f10e248a9e7ff479128n/a Quakbot
2023-05-17Nxydxqe.jsjs c0ba9e54da203327adfb28ea1acb052e21e639ec2143057084530572e114a66cn/a Quakbot
2023-05-17Kinhjna.jsjs feb168a54003edf4e8b9a44e79e933b880493a2473e31aff65970996a75dba81n/a Quakbot
2023-05-17Sowbyq.jsjs d455f314d8a02debc991481ebb27a04ac634bb81bb0b1ff019402af140b2271fn/a Quakbot
2023-05-17Ihlj.jsjs ace9ab470aad95073acf14f093be09b2cba371f3680055a0315d0d72381544a6n/a Quakbot
2023-05-17Utpjicuv.jsjs a01a517f87b28d0f12026424239becf5e82b2204a0cf93de28936e6094e8d9b8n/a Quakbot
2023-05-17Yvddmfaz.jsjs 31146e55832ffcd2c534b8a32904cb3c8f4e419f6eff9d48acd44e3c2f9810c5n/a 
2023-05-17Kpuxi.jsjs 0075fa2ac32aa346aff93a0034cc215c4d00d7d7add5fc98ea340d7af554e4d8n/a Quakbot
2023-05-16Yfjett.jsjs f1b40199d44758beb6d7a6c68d40a5d917ba3accf2e91c120fe7fd43301b7337n/a Quakbot
2023-05-16Tepbqd.jsjs 319ad16c7cc6c4f2053565c8501358473f11df85edb59b808bfbb68f7ab01478n/a Quakbot
2023-05-16Whdxo.jsjs 8fad04400efc6a844e8361fd80c9aa65cc4ec72049597f09c59d15e8367ee738n/a Quakbot
2023-05-16Iscyulv.jsjs 3cb35f31e186aafe2252ff4833c92836639072d11cf69c4230cf3b30eb2143bfn/a 
2023-05-16Jbuuxhed.jsjs debcbc7f822fb0b674e875ff8954b34f62ec96924fb9537f52b30291c1b95d1dn/a Quakbot
2023-05-16Mwzlr.jsjs d4282d403d01ed2e09dc7346f010c6827f6bd482f39b3fd032326bde29ef3b71n/a 
2023-05-16Kfolxg.jsjs c031878a2f3923dbbbbf508791d5a26b0a1f95e8b3b76291247be99913a650a1n/a Quakbot