URLhaus Database

You are currently viewing the URLhaus database entry for https://9null.com/sene/?1 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:2634719
URL: https://9null.com/sene/?1
URL Status:Offline
Host: 9null.com
Date added:2023-05-16 21:51:07 UTC
Last online:2023-05-18 22:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2023-05-16 21:52:12 UTC to abuse{at}namecheaphosting[dot]com)
Takedown time:2 days, 0 hours, 47 minutes Poor (down since 2023-05-18 22:39:59 UTC)
Tags:BB28 geofenced js Qakbot link qbot link Quakbot link USA

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2023-05-18Gzofzlno.jsjs d76b1300fd995ec8def343df0450c11a58a217803fee3749db4afacebc64182eVirustotal results 22.03% 
2023-05-18Wuan.jsjs 1cea0c4b1af9170b9ed2927f3b100d202bebd1b8e69ba1527336aaa6b2c0bffcVirustotal results 13.56%
2023-05-18Xjtnao.jsjs defd35bc8ff7c75d7dee626a9725ea722bfd1b7020283fef7a1658a04f434320n/a 
2023-05-18Mvseab.jsjs cadf3b701a796ab414a9adb1d3c761ea95dd6b2b518dd9d9f1034a9982d8fc30n/a Quakbot
2023-05-18Iifukkd.jsjs 6e98b0ad9b6fe81e7dde4a5e76cddfdc25b19695ca702e4faf95f45dfc5a65e4Virustotal results 11.86% 
2023-05-18Qlaqlyd.jsjs 8f360ef4554f315b708ec9a47229a77553d9764d491faaae0340e0e552551077Virustotal results 27.12% 
2023-05-18Gtxnrkuc.jsjs 89ddd75a9d671f30070d8ed74468e507a72e5ca5699855296beb959dae2b71b3Virustotal results 11.86% Quakbot
2023-05-18Ncoqm.jsjs 9f83e5346339db98db754ee60a6d9de3db2ecaf650f4590c2a11ad9e484c46a2n/a Quakbot
2023-05-18Oyblcv.jsjs 60ac01b6dc615a190d4fd5f4ae9e67d29d9faf9784d997dc375bf3bc5affcbe6Virustotal results 30.19% Quakbot
2023-05-18Lbdxsks.jsjs abc48260d90f80894b8dce196c06da33c2c84c6e28e7f70c81840bf419cf2344n/a Quakbot
2023-05-18Lwcetlu.jsjs f7b76f7e79498990be74945924e01e7f53e3b42e5be51e93dd0c4c7a5ecb47d3Virustotal results 27.12% Quakbot
2023-05-17Soupey.jsjs f74f3f66b468e91f7060adfeff51f084fd09fb44b5d93a66ce1b2cccdd016bdcVirustotal results 25.42% Quakbot
2023-05-17Zmrua.jsjs f80b9a7940830c735c2fbaf225da18389f25dc1ed7ef8e073311c9b3d680a95bn/a Quakbot
2023-05-17Sydu.jsjs 28e8b66452412d01288417d1253f85d6981dd1fe21d53dfb5cbd49822a60cdf0n/a Quakbot
2023-05-17Pnmdkns.jsjs a2f17ffca655028bf5663349090771ded5e0eac6f65e71d0fc151816a2dc7342Virustotal results 23.73% 
2023-05-17Cqwcoawl.jsjs 9fb9192d902b2bec0253263ac7de12696284a3203d04c735faf491c94c94ed32n/a Quakbot
2023-05-17Mytfzogk.jsjs 53d2ace5dfd9b4384bcefcc9b7e2c0b6701053df124573ad3dc1044ca98e8398n/a Quakbot
2023-05-17Bvjcb.jsjs fc087bbfa79c07ccc635f8a6fd0b89dea00fce47f2c8fdd18e9a29c72d8a3bd0n/a Quakbot
2023-05-17Jgimt.jsjs 7799faa5398c3192351079505ba2c4216e0e5b54203f4f24a9836989eab44473n/a Quakbot
2023-05-17Xsda.jsjs 7f3b6373afe348ed053ea62ea9a41fc77259eef46e3d5aaae84e98de0201f7d6n/a Quakbot
2023-05-17Bbuidg.jsjs 6bfc4bb25225238e0d809cb6948cfbd24780bc7c8b7a8584f5d41a893c8e3d8fn/a Quakbot
2023-05-17Anljw.jsjs 515683ce9fee0fd701d5db51300c72a2217469ae974df79292063e56463add88n/a Quakbot
2023-05-17Yrzhkqsc.jsjs d965c4ba4ad110a7b8597100242fb74296aedc15120499dcf9791d1c6bd6ee9bn/a Quakbot
2023-05-17Nyzztf.jsjs 3cc20db97e31aaac8e62d3733a770f467e341115da5bc4ad9468b01c8410a5b7n/a Quakbot
2023-05-17Edncird.jsjs 34b67727d5d2e2fe8ee00438909936a2e2a5048c267c9ad9946b0d6346945867n/a Quakbot
2023-05-16Jmsw.jsjs 480657dfbbda78aa953eb013e4c04f49eb5d792a5c9c37dfcb4e9637119a1058n/a Quakbot
2023-05-16Dfhaxwa.jsjs 445c0eb128437fa14af6be513204aa58f15674024487158a99492bcf673df93bn/a Quakbot