URLhaus Database

You are currently viewing the URLhaus database entry for https://skymedsshop.com/elo/?1 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:2635110
URL: https://skymedsshop.com/elo/?1
URL Status:Offline
Host: skymedsshop.com
Date added:2023-05-16 22:00:20 UTC
Last online:2023-05-18 21:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2023-05-16 22:02:08 UTC to abuse{at}offshoreracks[dot]com)
Takedown time:1 day, 23 hours, 10 minutes Poor (down since 2023-05-18 21:12:52 UTC)
Tags:BB28 geofenced js Qakbot link qbot link Quakbot link USA

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2023-05-18Mmdlrvqn.jsjs 76443e093ed6d6e3961cb5f9bbd546bab2d05f6bc2536c5744dc86f7a769bea8Virustotal results 30.51% 
2023-05-18Hhkp.jsjs d76b1300fd995ec8def343df0450c11a58a217803fee3749db4afacebc64182eVirustotal results 22.03% 
2023-05-18Uzzxzil.jsjs 1a2e818afb29521c8658d2a0643158af97370d69c32c0bd85cb900bd3e85b0eeVirustotal results 22.03% 
2023-05-18Oxejiuoa.jsjs 6016f12710a18923ed029eb1dc62882b5f1a032a7424e0169dd8c2228598f59dVirustotal results 28.81% 
2023-05-18Odhjdvwm.jsjs ba40727ec1ea2a2cd3419947399c997bc6f20a9553fa874ce25d9f94a1fa248dn/a 
2023-05-18Mkbkhzfb.jsjs 831bcd763103748a036135443a32ea80a8d0c311ba22872149bffc13eec6efc9Virustotal results 30.51% Quakbot
2023-05-18Oedrg.jsjs 5385fad188601d9e6dde0c124799956c0f227ef163e10a45533ba701150ef12fVirustotal results 18.64% Quakbot
2023-05-18Vvkftkp.jsjs 6cc345a8ad3df8d8da07821f31095f9c217201e0065038c5bb7e15aae14a9035n/a 
2023-05-18Dsdicdd.jsjs 6debfe0d45ae5dd2dc9622ccd7c9480a487bacf847087e1fc8c10ca87a65e7a2Virustotal results 27.59% Quakbot
2023-05-18Lmsggyq.jsjs d307232640d2944029109ca441be49052d7c8d24590a54096c256c48e4d7da1an/a Quakbot
2023-05-18Lqxufew.jsjs 176082ec2166a938b76477a4d42d940987b38d787c43628c9e17e75057338dc2Virustotal results 10.17% Quakbot
2023-05-18Dfxbc.jsjs 3302a636901e95a2eb9b66a8fdda7e3cf8997cec8749d879da126651b259557cVirustotal results 26.00% Quakbot
2023-05-17Utzvmadt.jsjs 9f16a38888bf7c130dfc15dff72eda59b2621e7c1048f157a4cf51e9bcb2e280Virustotal results 32.20% Quakbot
2023-05-17Bnyqfn.jsjs ecb53b7bd1821908e3358a50f35b5cc1aa92c43f7c190eaa7e0e473ca199dfa6n/a Quakbot
2023-05-17Lplnf.jsjs 89ddd75a9d671f30070d8ed74468e507a72e5ca5699855296beb959dae2b71b3Virustotal results 11.86% Quakbot
2023-05-17Lqzdpq.jsjs f51bc0d7dd86e4e6db698538eca1063e4e4936ee3f57c669e347f143576749d9Virustotal results 30.51% Quakbot
2023-05-17Meaqqav.jsjs f6bf73aa768753f4379e2df6f0094dda46beb48b879c76c983896434f67c0ab0n/a 
2023-05-17Qgqyp.jsjs e0a76560e4dfa1a02a0ed9070737950e644f0b851388f7a580a8c384ba1ae3aan/a 
2023-05-17Nrutlcek.jsjs c2c29ea19d16a1a70e365c2161d223994c0610958fe527bfcb605ed47c4a4d44n/a Quakbot
2023-05-17Ypyft.jsjs d3ca55b533ef1bbd7d3e46e5d7fbffbd4f3614d00148de3f48c5aff555f8890fn/a Quakbot
2023-05-17Gskby.jsjs a00262abb356c72222f23d3dbe991ff02524ba9f30aefa77f78502b7f9b0229bn/a Quakbot
2023-05-17Pmoa.jsjs 1c67aabe5359d479bc15c16bc6d0f095d57805b29e7fe60233bf797e2c0a7cd6n/a Quakbot
2023-05-17Edmfk.jsjs 9036f9cdbd5ebe2ba1945dcf272902b46daa93f199741a5a1ae1727006433adfn/a Quakbot
2023-05-17Bqiw.jsjs edddeed939aa691a50c7ee23b3e47689a37983747b6fdeb50f49e518fa1d8b98n/a Quakbot
2023-05-17Zrdisv.jsjs 27031656b3b8d9926eb7c77ebef878ed4f05dfb3d5cac5a81e64fdcaea1358d1n/a Quakbot
2023-05-17Eaavhpy.jsjs 3d9facd26e5c86ec8f2e22c2497a1bb5e612450b653b03c003deb74b7ec3a112n/a Quakbot
2023-05-16Tdkozh.jsjs d89c6176f00860aeb50231a4b7c9316d9835a4ff72ce6e9bbe333f4df6bb5c4bn/a