URLhaus Database

You are currently viewing the URLhaus database entry for https://unlock26ch-access.net/na/?1 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:2635157
URL: https://unlock26ch-access.net/na/?1
URL Status:Offline
Host: unlock26ch-access.net
Date added:2023-05-16 22:01:18 UTC
Last online:2023-05-17 22:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2023-05-16 22:03:30 UTC to abuse{at}cloudflare[dot]com)
Takedown time:2 days, 0 hours, 4 minutes Poor (down since 2023-05-18 22:08:11 UTC)
Tags:BB28 geofenced js Qakbot link qbot link Quakbot link USA

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2023-05-18Tkksi.jsjs 6016f12710a18923ed029eb1dc62882b5f1a032a7424e0169dd8c2228598f59dVirustotal results 27.12% 
2023-05-18Ljrjstm.jsjs d7522ab4f64ae0950e24bb00df9157136bbcb900ace0c77bd1a46f06149bf37aVirustotal results 23.33% 
2023-05-18Jmqx.jsjs d3c6e06204212c1aeeef29809460056535cba3beca8cf163b7c8719671ef0c9fVirustotal results 22.03% 
2023-05-18Yunbyz.jsjs 51ffefa8a10b6da720a80cec4735fe173669e7c974946e46c8dda908e824d8a4Virustotal results 22.03%
2023-05-18Bjxpfywu.jsjs 404e4cb94dff7a273f23a26383115d7eb5f285961170ddd2fc2669896d8595dcn/a 
2023-05-18Qlwmox.jsjs e3086e125c0def5547c4247942eaf8cdeb0e4e581562f9cef5e20b6978761c61Virustotal results 32.76% Quakbot
2023-05-18Gcdj.jsjs 62046b91a066c98a15aeba46b02ff8ae453c2d23d8e39a7e7eb2fb4d322464cfVirustotal results 27.59% Quakbot
2023-05-18Ibcosj.jsjs 831bcd763103748a036135443a32ea80a8d0c311ba22872149bffc13eec6efc9Virustotal results 30.51% Quakbot
2023-05-18Ijefmp.jsjs 13efaa86942839a33c87960d6b95861ace793c07390276ffb3d9329cfeb07034n/a 
2023-05-18Ccqxrl.jsjs c7018ff287088c076eb317d0b9402bc9dda25e832c0b205e91a3aeef7468bcd4Virustotal results 33.90% Quakbot
2023-05-18Xokhizwe.jsjs 176082ec2166a938b76477a4d42d940987b38d787c43628c9e17e75057338dc2Virustotal results 10.17% Quakbot
2023-05-18Nqpy.jsjs 1bff54d9504766a1b23df7d6c83ffbf3db9ac0d0cc9ded739c34a0f1114f5717Virustotal results 27.12% Quakbot
2023-05-18Dwmgyspa.jsjs 43b5fd987f46196b07b603e95e51b7c7676ad0784f913f1b136dcf29bb46e808n/a Quakbot
2023-05-17Tzhajxls.jsjs a0220d487566d1243b11c30ea5d37349418d84e8f6eb6013e0792aa4b11236c6n/a Quakbot
2023-05-17Gafnr.jsjs a93a8bf8a31ec8306c9567bf9a32a827765ff0e798aacba99ea917a481f43f7en/a Quakbot
2023-05-17Hskud.jsjs 456c54257858cdc9347b6b71444659a256ae3a000dc1c82298d0fc65ba890687n/a Quakbot
2023-05-17Fnbwyg.jsjs 4a6c21e15b576501924674558e19d80b23e2d306cbeaca7d496abf5b826fb769n/a 
2023-05-17Acymdk.jsjs b246dc6bd29b7f7bf62fa6cfdb10a17053bed892c03b79d0328d384cf96f799an/a 
2023-05-17Rnne.jsjs cac584e2ff62f01ca51db682d0b6d32ff11123c3bc3b6a5e9794606ad51844fcn/a Quakbot
2023-05-17Ecgbz.jsjs 8506e3c5de62fa6173656a51f4f41a0986ccb9fa55bea9cfcb878c6df2bd88c7n/a Quakbot
2023-05-17Kghc.jsjs e4a7b96a6fbc19a02a55ac0f2808d28fd4114a967f8ee99b9c3f6454fcd97c75n/a Quakbot
2023-05-17Sohqao.jsjs 10cd469a1cfd830d212808a951a1a7f73bdab7b684cf712b517a18500add1435n/a Quakbot
2023-05-17Yxncx.jsjs 0eef1ada6b544e969746c72606de941fdd4c1c757027effa05fa925bf88b5a93n/a Quakbot
2023-05-17Ebnbj.jsjs dd80ec4c8538102a81f93d084c1680f35f4d257f1f60d3a1159de53da7d4ea36n/a 
2023-05-17Lgzhvdlu.jsjs d9939ce99e643a3715948414a0dda7147e227b71e69ae45e099132af1cc94cc1n/a Quakbot
2023-05-17Xlkppk.jsjs c3464ffc8133785fe5b5a87be732e9effc930fa0bfc63d6a27daa98c26684ddan/a Quakbot
2023-05-16Chyqyq.jsjs bb7288e19c9be08235054ae259322ab73a2abd99ea44a24244cea59d4ba9817dn/a Quakbot
2023-05-16Fatlv.jsjs 0ae187da207ac94c82201f79f80e1ac1d01eba5bbfc64b40871333e7112d963fn/a Quakbot