URLhaus Database

You are currently viewing the URLhaus database entry for https://djramonbedin.com/eem/?1 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:2634842
URL: https://djramonbedin.com/eem/?1
URL Status:Offline
Host: djramonbedin.com
Date added:2023-05-16 21:54:14 UTC
Last online:2023-05-18 21:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2023-05-16 21:55:33 UTC to abuse{at}bluehost[dot]com)
Takedown time:1 day, 23 hours, 13 minutes Poor (down since 2023-05-18 21:09:32 UTC)
Tags:BB28 geofenced js Qakbot link qbot link Quakbot link USA

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2023-05-18Kasjawr.jsjs 76443e093ed6d6e3961cb5f9bbd546bab2d05f6bc2536c5744dc86f7a769bea8Virustotal results 30.51% 
2023-05-18Bkvajq.jsjs 51ffefa8a10b6da720a80cec4735fe173669e7c974946e46c8dda908e824d8a4Virustotal results 22.03%
2023-05-18Ogjew.jsjs abdda4c6d8c817d793d751807f39dd2cea7ab501b2d145e7bef5bbb6243259efn/a 
2023-05-18Fsqln.jsjs f27926066b5633ef279634f13fac70b4fc198ce37d68ef22e07fa19e4bf0fd44Virustotal results 27.12% Quakbot
2023-05-18Uhfjyo.jsjs d8ee25b9b238ffa9197d9bb3defe47e9a2720909109c315f32b38191a4c534afVirustotal results 25.42% 
2023-05-18Qbfg.jsjs 023250d4f9af49d2f7968647280c712aff55b6146a5a06b7b302bab288a405baVirustotal results 29.31% Quakbot
2023-05-18Fbiby.jsjs 07d1842292aa2619ebfbb551eff5580fb24f945283f3de4298dc06f9493b6b20n/a 
2023-05-18Akgghyc.jsjs 1c527faebea66510912a82a4ece923294f74fa2947ce89b48b9b341ade828e1en/a Quakbot
2023-05-18Fxriu.jsjs dcb4d36d51f163518e7ef97ffd77d55e49a72dc3b351a6e4051187b5361ecf7fn/a Quakbot
2023-05-18Dldtrf.jsjs 91f2349ddffafc85ec07721077d9d38a2ab0376beaf588950fe98bb16d3218efn/a Quakbot
2023-05-18Vmptnj.jsjs f5a9de314dd0e63ac6262d4d17d66999b1a0ef8384756576c26eb7623a678f71Virustotal results 25.86% Quakbot
2023-05-18Dwtc.jsjs b77866fad79584d4eeba2fb19ac488731b788c0c7c1ca30001f91741db44e06en/a Quakbot
2023-05-17Agigzwnq.jsjs e6823880248255f28dad73af6553cfbae133b6df9f78eff124a379d793265ac2Virustotal results 27.12% Quakbot
2023-05-17Towmu.jsjs 83a6906128b93fb8777e46c5a7c736321ce2cabe58ece643b53dd9884a1c6c77n/a Quakbot
2023-05-17Axpscb.jsjs f14437be247480b6af38f3ccdd4ba46e6e55eb7b3d706b8df711f63558b8703fn/a 
2023-05-17Upnnmsm.jsjs b76a46e9b0db483e342c390f25663222fee2e67cb7670205636c7ee748850b86n/a Quakbot
2023-05-17Ajflqeq.jsjs b267e2261f79527d447d6a639751fcabcf68f9640e62a3c3106b4f750cb07b66Virustotal results 32.76% Quakbot
2023-05-17Necbzo.jsjs ca3503a47ca92c4d7ffd385bf6501e373e48cae6b42c99b3a1d08f7478278c12n/a Quakbot
2023-05-17Gfeju.jsjs f3f5b182d275d4c04caa73e7abc7c40748f810123832c294c35b3b4bf997ea3en/a 
2023-05-17Bxjm.jsjs 8b0d1cc29dd777ce315556bf0813ccef61c1ed5a03cd3e2ddaa2d0cbcccebb87n/a Quakbot
2023-05-17Ertocng.jsjs bd196a2a48bdfa8b4c6601e02604c755b38eab95b465350d823b47a4f176eeacn/a Quakbot
2023-05-17Nwyknjmw.jsjs 244634ad76c0c4bda605f9f91f4b4517cddb79e74935b50385aa0c7f69ce95bbn/a Quakbot
2023-05-17Ntfq.jsjs a7b6d26d2a68018a16eb5aed3942f8f91f9b679a345fe5cebfac251ced14e54an/a Quakbot
2023-05-17Inhhnu.jsjs 4c7788577844c13309d1b8b9332c0b26e66581efe1bb275e953a99664037313dn/a Quakbot
2023-05-17Iykkv.jsjs 85bab4228ee86cb20e311b726377ec8e13c6f53b9baee30fdad1a3bb40838ed5n/a Quakbot
2023-05-16Ktczj.jsjs 695e486973fe2a6bae6d9c876df17ea1d632073e22c5240dd154c727165ea03cn/a Quakbot
2023-05-16Rzowgc.jsjs 5fad95a34f5283683bed2d480e66cf236680558ad4df216770383a470bbf0a36n/a Quakbot