URLhaus Database

You are currently viewing the URLhaus database entry for https://nercnigeria.com/re/?1 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:2634998
URL: https://nercnigeria.com/re/?1
URL Status:Offline
Host: nercnigeria.com
Date added:2023-05-16 21:58:11 UTC
Last online:2023-05-18 22:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2023-05-16 21:59:46 UTC to abuse{at}hostgator[dot]com)
Takedown time:2 days, 0 hours, 48 minutes Poor (down since 2023-05-18 22:48:28 UTC)
Tags:BB28 geofenced js Qakbot link qbot link Quakbot link USA

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2023-05-18Czyj.jsjs 1a2e818afb29521c8658d2a0643158af97370d69c32c0bd85cb900bd3e85b0eeVirustotal results 22.03% 
2023-05-18Wxydeuep.jsjs 6016f12710a18923ed029eb1dc62882b5f1a032a7424e0169dd8c2228598f59dVirustotal results 28.81% 
2023-05-18Pjlia.jsjs d3c6e06204212c1aeeef29809460056535cba3beca8cf163b7c8719671ef0c9fVirustotal results 22.03% 
2023-05-18Wgoggb.jsjs e89930db83fae4a1408f9b98caca20026d9709ec7ad5143a927699979b595a44n/a 
2023-05-18Nntepj.jsjs cf3f8bcfc47120345a6bf7e2b44265e2cb07dfc6d6aae1290d5552e5f6d2e1f7n/a Quakbot
2023-05-18Bwph.jsjs cd8a39cd43a8cbb2e0c04b201b7df230226fe2dd696ab5c20c9ecbb16cc723f3Virustotal results 25.42% Quakbot
2023-05-18Jchfhef.jsjs 3769ece7cf8318e31632260f0a962a6c155adc7adcb91cb53a6d50100a8f3281n/a Quakbot
2023-05-18Bzeo.jsjs b5992b77eea93b7005e9637b010d0dd51ae9310c87bea9dc6eb4610e2826d1ebVirustotal results 24.14% Quakbot
2023-05-18Zdgm.jsjs 3fddbe5cee0b2b8ebbfc9637b8f112873fa786d04365ec85c4ff1f3ef1962ce2Virustotal results 23.73% Quakbot
2023-05-18Qvoqcqvo.jsjs d50736e0dc6f86a7295550e45d34bcb51be1915a810402b50f05881002c45135Virustotal results 22.81% 
2023-05-18Yivnqihk.jsjs e193e117a9fdecfac181547ca4dadf85602bca2aad6bd2c6edeb2a25d45e9f91n/a 
2023-05-18Uquwlyog.jsjs f865f1501145c736f9f72ffa6b3431effc20f094261818dfc60ace530d2aacebn/a Quakbot
2023-05-18Pqqap.jsjs 266bfb248bbfb5fafc879d0a26c731499ccb3de4c57b64ce4b3a3fc6f836b93bVirustotal results 25.42% Quakbot
2023-05-17Abantix.jsjs 399c7eece18438ba4f325cfc3863d0603d1237732a310fa2124a136ff2a335afn/a Quakbot
2023-05-17Cvduvsdq.jsjs b5e43b4ccd0107bcf4e8ce081135f2adb345ba3df9a4df5637d3cd9e08b43ba8Virustotal results 21.15% Quakbot
2023-05-17Fdqsgnp.jsjs 53182e2434b52d11490f911c908c6c23755d667fca1a03ac5d4be2cc9b0cd61dVirustotal results 23.73% Quakbot
2023-05-17Ymxtsu.jsjs 9fc5c95367df0d42df001590faddb4edf2e71a19e7159cb210d5525553462459Virustotal results 15.25% Quakbot
2023-05-17Ydthv.jsjs c426bcba8c0bf1790fa05cb78d763ad67bedd1b1bc3eec6b4902700e097a1a0fVirustotal results 24.14% Quakbot
2023-05-17Awok.jsjs c73f356c704556ac74d752c91963fe6a1c7273b77027b218016b83f03ca878eaVirustotal results 25.42% 
2023-05-17Wozk.jsjs 09f9e4d8ef85ba407416a7d168207db81c2000eabea300624e17d81f58bd0b18n/a Quakbot
2023-05-17Lqzvcum.jsjs b75370c95398ce5f3d66a1dd213656c63a7282a8b5bf15d1c1b39caaf9c81926n/a Quakbot
2023-05-17Ivjvhxr.jsjs e4fd45ed92a85ad670cfd553b87878b1001a06147f88d908dd27fb19fba828c9n/a Quakbot
2023-05-17Lxvmtnz.jsjs 2250a402833f9964c1ee9a200ae222ef7f359111a4a6bec41cee83b2ee978a29n/a Quakbot
2023-05-17Mgoimbp.jsjs 493a1d20297569f0190c9437ac6560861a01caf6168898dafa47ed92f74d1c48n/a Quakbot
2023-05-17Qabiw.jsjs bc03708db04e2e8e37ffe28ff441ac423119c41b4a3d7aad7b68da9feb98ecean/a Quakbot
2023-05-17Ucockg.jsjs 7a25aa0435e063afca53eb53e39e230efd273ce2ef78eef7c5523b6d2ae0b111n/a 
2023-05-17Dthv.jsjs 2b39601766f8d08c38cc60a0b76448a5027b571f922fcc6d4693ef340cbe6796n/a Quakbot
2023-05-16Qmzyld.jsjs c63cd53db7a204150f99a5aa6a99a67c9a834a14835015771eefbfd216b048c9n/a Quakbot