URLhaus Database

You are currently viewing the URLhaus database entry for https://nbdn.org.ng/ds/?1 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:2634983
URL: https://nbdn.org.ng/ds/?1
URL Status:Offline
Host: nbdn.org.ng
Date added:2023-05-16 21:58:07 UTC
Last online:2023-05-18 21:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2023-05-16 21:59:37 UTC to abuse{at}colocrossing[dot]com)
Takedown time:1 day, 23 hours, 29 minutes Poor (down since 2023-05-18 21:29:17 UTC)
Tags:BB28 geofenced js Qakbot link qbot link Quakbot link USA

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2023-05-18Tulvofq.jsjs 1a2e818afb29521c8658d2a0643158af97370d69c32c0bd85cb900bd3e85b0eeVirustotal results 22.03% 
2023-05-18Gkyl.jsjs d76b1300fd995ec8def343df0450c11a58a217803fee3749db4afacebc64182eVirustotal results 22.03% 
2023-05-18Pgxulay.jsjs 40983253f82b33b5ad13de58afecbf24e451f68625255f6395d076c4fb3b4aden/a 
2023-05-18Mtccgzy.jsjs abae955795961dc369ba3d41196f2f4238001efcff8a2dc429ababf4821ca7f5Virustotal results 23.73%
2023-05-18Dknosp.jsjs 41004cb0d270673cab3af5cab1a87b9c6c88fd3a43f9a28494997c13652781c0Virustotal results 35.59% Quakbot
2023-05-18Wbgj.jsjs c977474e11ea0066144f719c48b4f2d5ae32da3a13eab7d64cb3433546b8d738n/a Quakbot
2023-05-18Rfiob.jsjs 76b1f9267eb932c85c8717778e7399af2196f31c3f1ee4b76d83a2cc5f2e486cVirustotal results 25.42% Quakbot
2023-05-18Ddkic.jsjs cc3f6d63f84cc1a94c7b2a3942b9e0df2af0f247cf2a81b2ba18f33ce401310dVirustotal results 27.12% Quakbot
2023-05-18Erdpoenr.jsjs ce5efda576bdfd577cb85bba27c1785787f37d30869878530f7249504d45cf69n/a Quakbot
2023-05-18Ihwodj.jsjs 1c527faebea66510912a82a4ece923294f74fa2947ce89b48b9b341ade828e1en/a Quakbot
2023-05-18Fgbjq.jsjs 5eecbea9208745932f291b3156e7036997e4b1e93f7bb53a270cae7c125aa079n/a Quakbot
2023-05-18Qqmtj.jsjs eecafdba553631375cb34761f4cf33cae100547238141bd641f76c3cb87700f7Virustotal results 28.81% 
2023-05-17Zgzqcxp.jsjs 1d6e41a96832fff256d4c07d7cdb318a251230e1445351f5ad36b87ce958bf1dVirustotal results 25.42% Quakbot
2023-05-17Wrwwbvz.jsjs bfbec36fede661575f19295dcf1df9ba2fa3f0ca817dd9cc5efbd152f86a999dVirustotal results 23.73% Quakbot
2023-05-17Ysrnw.jsjs d1a4226b93ce7e197a1d0a500323d097493998ae6d92816b4793bac2150218f2Virustotal results 27.12% Quakbot
2023-05-17Wnvcn.jsjs 0c7c96dd589f0bc1676f7af1371bc70cbf50d310293d070ff8e1fef3df4533f9Virustotal results 24.14% 
2023-05-17Ylln.jsjs 2a38d5dd759f5e13e433429b8fbed42e9b1fa7de9f671bf87d0739862847c16an/aQuakbot
2023-05-17Spekvmx.jsjs bdc565778f51721f51d31d3a2fabe61b47bd3d921ace6ff98d7637b3cee485bcn/a Quakbot
2023-05-17Onxbwbs.jsjs 1100389dbb6d0714ad946e606291be634b62cfabbefae929bb45da3cdb93616cn/a Quakbot
2023-05-17Duagfzqm.jsjs c86afc67c03b6cd11446209a7842329f7b5aa1d14a7efbb77d46b121d360a4bbn/a Quakbot
2023-05-17Abmk.jsjs bfe25bca967e5dff255188da9acff8be35927e8927d6f97a31d0ffc75f4225a2n/a Quakbot
2023-05-17Jjiuehj.jsjs 928d9599faff25ed62993903a218f9210717d3ca52458e7747d1eb1ee0d8215bn/a Quakbot
2023-05-17Nvlaes.jsjs fa7c812205ec2b5af097b555710e1fa4b0831d750cd2302fbb341678ec471ccen/a Quakbot
2023-05-17Lwvrow.jsjs c2219178e6f91f67d9a2efb95a3bf790ddf6f602978519501f6e45a2e2d48b3fn/a Quakbot
2023-05-17Aroetyfx.jsjs 34583eeb042de46351cb9e565f28a15985cdb5e8b47171f323d9236a25941126n/a Quakbot
2023-05-17Kajc.jsjs b87a37afbf724bd6eba9bcf7d540b5b68fe10a3416a9c59869e8d9e31d2f2b4en/a Quakbot
2023-05-16Zbksumie.jsjs 76be3077d02cd27b788462d1fd0e1d53ad4c75d28bc3af4e884086c323cdbef0n/a Quakbot