URLhaus Database

You are currently viewing the URLhaus database entry for https://homeworkchaps.com/eu/?1 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:2634918
URL: https://homeworkchaps.com/eu/?1
URL Status:Offline
Host: homeworkchaps.com
Date added:2023-05-16 21:56:10 UTC
Last online:2023-05-18 22:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2023-05-16 21:57:37 UTC to abuse{at}namecheaphosting[dot]com)
Takedown time:2 days, 0 hours, 34 minutes Poor (down since 2023-05-18 22:32:17 UTC)
Tags:BB28 geofenced js Qakbot link qbot link Quakbot link USA

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2023-05-18Yijqreth.jsjs 1a2e818afb29521c8658d2a0643158af97370d69c32c0bd85cb900bd3e85b0eeVirustotal results 22.03% 
2023-05-18Qkamt.jsjs d7522ab4f64ae0950e24bb00df9157136bbcb900ace0c77bd1a46f06149bf37aVirustotal results 24.56% 
2023-05-18Dhjqg.jsjs 76443e093ed6d6e3961cb5f9bbd546bab2d05f6bc2536c5744dc86f7a769bea8Virustotal results 30.51% 
2023-05-18Sasqwbp.jsjs 92d3443435ab05a1ee5487d6a54b684fcc78def29cde345ddd8536509104f3ben/a 
2023-05-18Hxhyxc.jsjs a45416e3d9aa47760feeee7375be42c3748b04b0d9c6c573bf4db2cfa07929b5n/a 
2023-05-18Kqrg.jsjs 41a9ac47a4429134ce75e112f1d067da61f8dc65ee77cd9e494c9434cf179f12Virustotal results 30.51% Quakbot
2023-05-18Cwqil.jsjs 15284b1502dbf4c84ff0c772b1ae8788a56987a2e9cda8ba27208e57da59e8a0n/a Quakbot
2023-05-17Yhjdoh.jsjs 482b7c299dee3be25a3be3b76fb1498df5fc3e081d157b3734fa41fd8fbb5cccVirustotal results 27.12% Quakbot
2023-05-17Pdlmnjk.jsjs c3e99de4200fa77aa025ca9c3691f352cd668d0a77b4f467305f66cb4f933618Virustotal results 16.95% Quakbot
2023-05-17Gdnti.jsjs 106ea6e9df2db6267999fa9df4ae5950c1be2de07cbb773cd739bfaa29a806d4n/a Quakbot
2023-05-17Fbte.jsjs 269dec903e55df2babe1cb8bb498ac7fe56d2a079cdf89c2d5c354b7a8fa1250n/a Quakbot
2023-05-17Pmjl.jsjs 3713b4647108207183e481d67dd4e66e86b5a8d9b914b5d8cc2b380f0bb5bae8n/a Quakbot
2023-05-17Lksjxb.jsjs a3e711da7ea6362606a371a059c67e44312fc2a29fba250a7b4d50c4622084b5n/a 
2023-05-17Iywnclo.jsjs 8d912b6f3cc873237ea4045966992d4567d13a761407a9538a05e08518e91944n/a Quakbot
2023-05-17Tsid.jsjs 16ae44c6356d0f22ddd14eb1ef33998b10578b9e902ec5569efaeb17dbda9a3cn/a Quakbot
2023-05-17Gknlv.jsjs 8234f745a1f75405ac1d9595b913cd647fb130e3510f8a2fde78ca924fef5c0an/a Quakbot
2023-05-16Csltwz.jsjs 7a4d61f13a448808bb076975de3089c63076c831d107ce9466390d1df5e0039en/a Quakbot