URLhaus Database

You are currently viewing the URLhaus database entry for https://lares17.com/atep/?1 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:2634558
URL: https://lares17.com/atep/?1
URL Status:Offline
Host: lares17.com
Date added:2023-05-16 19:11:18 UTC
Last online:2023-05-18 21:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2023-05-16 19:12:22 UTC to abuse{at}godaddy[dot]com)
Takedown time:2 days, 1 hours, 52 minutes Poor (down since 2023-05-18 21:05:17 UTC)
Tags:BB28 geofenced js Qakbot link qbot link Quakbot link USA

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2023-05-18Pbeogpbc.jsjs c74cf0cb7927a8438a84c9cedbdbab3e4815550813336043f39674a67b6a021aVirustotal results 28.07% 
2023-05-18Zglvxp.jsjs 51ffefa8a10b6da720a80cec4735fe173669e7c974946e46c8dda908e824d8a4Virustotal results 22.03%
2023-05-18Sgyor.jsjs 76443e093ed6d6e3961cb5f9bbd546bab2d05f6bc2536c5744dc86f7a769bea8n/a 
2023-05-18Fpxlhs.jsjs 2936b6742f1d05f0f4625a1582b4bb5e44cf16340984eb0eaf2118709e5f7933Virustotal results 30.00% 
2023-05-18Shbc.jsjs e8cadb2bfe88e91c6f0a88fbfa3c83c7cce944155ffde2920ad925df8ba77f75Virustotal results 24.56% 
2023-05-18Fbvqd.jsjs 59eafea575993fa2b9b1a5a60ec2852f5cbda6491cc6c163e79d91e7fc9b1d7eVirustotal results 30.51% Quakbot
2023-05-18Wxfebwcb.jsjs 83743f2158c1cfe6f65635d6a1c2aeec71545802940ab5e083fa9d3a98d650aan/a Quakbot
2023-05-18Rfuk.jsjs 719ff669cd7b0754e787346601124ede6c1238c49809ebd0d6b58a3bf4b5a9bcn/a Quakbot
2023-05-18Rmnw.jsjs 6d9b8f4761b3d2b4e1c031cece4e6ae593e6a9e7de18a01dd28c1235bf7900d7n/a Quakbot
2023-05-18Cmjicnl.jsjs 946d5e2c822a804863dd95b51f9cf5738b216cacbfd4e739d28af66952e4821cn/a Quakbot
2023-05-18Vyehr.jsjs f4454d45458f3aaadcdfc328fc4107a6c670b1c0e04df1d476ca56e831b83818Virustotal results 27.12% Quakbot
2023-05-18Ounoapp.jsjs f7b76f7e79498990be74945924e01e7f53e3b42e5be51e93dd0c4c7a5ecb47d3Virustotal results 27.12% Quakbot
2023-05-17Rpswaok.jsjs ddfe74e26faf2b35c9062f09a66b41c79d391c1658c3fa8b4e2ce20752a2b05fVirustotal results 27.12% Quakbot
2023-05-17Vbbqm.jsjs 654d79d5b714216fcec5efd06082250b58afb76155c0be229ba139acd68d0797Virustotal results 25.86% 
2023-05-17Skhqi.jsjs c1460321f81f5ddaf0e6965fdc14511326240b2d261c1e2c98e92f73eb1accd4n/a Quakbot
2023-05-17Fixbflr.jsjs 83a6906128b93fb8777e46c5a7c736321ce2cabe58ece643b53dd9884a1c6c77n/a Quakbot
2023-05-17Loenn.jsjs 4df2da0e1a60159c49866a7e3899e305f80766c9bae6b676bf18955d4e2ee8ecn/a Quakbot
2023-05-17Wfpfqwx.jsjs 6e988a313f3e3723e109adec17cbf1513010e50c972114a245ebf3ed743e84bdn/a Quakbot
2023-05-17Yuxw.jsjs 1e96a7079b653386193018082948ee18ee1ca517dd96395eb46b4d5e30507b87n/a Quakbot
2023-05-17Hzgq.jsjs 157bb75790dbe57318f5bda502ced28ef8abbae196729a4659c1cbe4878499fcn/a Quakbot
2023-05-17Qskgmrnk.jsjs 5ef1689ed74415100a37fe34315a918933d219143877fd492049da036b44ed72n/a Quakbot
2023-05-17Kaniwcfs.jsjs dd0b446309d09852a2c5752ae53351cedc9d0910f3285e5b6a65de71360b0e60n/a Quakbot
2023-05-17Vdrn.jsjs de84dc91f85b8c7e9db6a3585a5341e97d42f80ceb67361a1d8a12254f6846fen/a Quakbot
2023-05-17Jlxmsp.jsjs 545734e1dc89893191527ea38760246ad224b54d73fab5910e2f730d3864d3a9n/a Quakbot
2023-05-17Yqewrycw.jsjs 22ee474e0e1ca2a2db8f8cc88e14ab942e2640df7d640cc4b78414f656fedf8en/a Quakbot
2023-05-16Syaez.jsjs fbf5259567f4394e689937419fffe75534ca665fdff4d19c26c7b51028eadf6an/a Quakbot
2023-05-16Ysotnosm.jsjs e086edf0913988681550dcf42f145360b75dd442bbf7ec0a3f40d26e992b402dn/a Quakbot
2023-05-16Qoke.jsjs dbbe86e26ff0d6b9f97d23f8a3da413c3b5fee1e26d478eb71c59908287cb7d5n/a Quakbot
2023-05-16Ttqtbota.jsjs d994d6d24d1fe9d2c2eb3e6896d0b268b7cf225e7b8bf6233b83ae4a4a347f79n/a Quakbot