URLhaus Database

You are currently viewing the URLhaus database entry for https://wefoundworld.com/sr/?1 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:2646339
URL: https://wefoundworld.com/sr/?1
URL Status:Offline
Host: wefoundworld.com
Date added:2023-05-30 16:50:45 UTC
Last online:2023-05-30 21:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2023-05-30 16:52:22 UTC to abuse{at}cloudflare[dot]com)
Takedown time:2 days, 5 hours, 24 minutes Poor (down since 2023-06-01 22:17:13 UTC)
Tags:BB30 geofenced js Qakbot link Quakbot link USA zip

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2023-06-01document_B465_Jun_1.zipzip a83a492edda8e653c323adf26a0ded029b0539a3e7cfa36bfe8c700eadf0fcefVirustotal results 19.67% Quakbot
2023-06-01document_F403_Jun_1.zipzip 49a92426c4ce37f7c59b08528347fba8ae2f7bd747993775bd92fb195c78d83cVirustotal results 22.03% Quakbot
2023-06-01document_D598_Jun_1.zipzip 20a4b7ef910419535d7391c06791a5bab72e37c5db028533e6df39cb47697c3cVirustotal results 16.67% Quakbot
2023-06-01document_D054_Jun_1.zipzip 74ef19aa5a1fecdde50c8ebd25118b425a46652af95c2656bff55f2f111601ean/a Quakbot
2023-06-01document_E490_Jun_1.zipzip 2dbc2b184379929f1874bdb3af1b6e41ef94df4ce2624d4b28f1071a3c44e089Virustotal results 22.58% Quakbot
2023-06-01document_B196_Jun_1.zipzip 304b8b94d7b3ac52f7b8475357faa11df40842d6c4059b344c2a9587a594e2d6n/a Quakbot
2023-06-01document_F042_Jun_1.zipzip b5068cce0f67b46338440f639583766ed1ead126e4c56038698636b30fa3ff6an/a Quakbot
2023-06-01doc_F032_May_31.zipzip 23c6433a0bbf69dc8ebaa8506ce3ba3449953737d700b220c05845ea4d34c14bVirustotal results 22.03% Quakbot
2023-06-01doc_C487_May_31.zipzip ac58ea07dbd1070249fcc792635eec4492c857dd2a3783f3e4466c34a1cac866Virustotal results 18.03% Quakbot
2023-06-01doc_D726_May_31.zipzip 031a700c60d97d1d64cfded183f7b52246e7c440a305b195607bf4144c8d1809Virustotal results 20.97% Quakbot
2023-06-01doc_D571_May_31.zipzip d980406bf86e1cd1d62a00c03b27af54e23333213afc42bb3b5bbb01678a1e4bVirustotal results 25.00% Quakbot
2023-06-01doc_E197_May_31.zipzip d229aef15eeccd49ee83da3890b001a2f61cc1bb80da86b83db075c4b6bc4f4aVirustotal results 17.74% Quakbot
2023-06-01doc_A416_May_31.zipzip cdd64b8f56bba9128f9745b933d674286d62d5540bed93db5e193767ec16e085Virustotal results 22.95% Quakbot
2023-06-01doc_D310_May_31.zipzip 0d7a6cd36d12221d9e24c99468e7bddf98ec2184540cf70366673eae4c8e9679Virustotal results 20.97% Quakbot
2023-05-31doc_D702_May_31.zipzip 76fa9431d219256cb9c02e93e622953d267e66cd1dd97b23d31f8b2e31c8f028Virustotal results 19.67% Quakbot
2023-05-31doc_F861_May_31.zipzip 70860996e2e8171cf99d1d5f895e376c5a300d397721875503056854781cfcf6Virustotal results 21.67% Quakbot
2023-05-31doc_A140_May_31.zipzip 8f3dcb66d2d904e4d0f59657c0be918ec3afc1a90c7477b0b35be3e0e85c9f72Virustotal results 20.00% Quakbot
2023-05-31doc_A103_May_31.zipzip 0a025fe8de8c85313022525f5c3c79c0f86c158f76475ea2918a9b53048658c9n/a Quakbot
2023-05-31doc_D709_May_31.zipzip e6a259570ef5e1d26c84a32fe4293164210c575d64d6e73484c3bdb35de37d35Virustotal results 24.19% 
2023-05-31doc_C056_May_31.zipzip 46d1caf3c6fe9659bec74a361d5f08d6f09a5cea54be45b0570e679cf1df7931Virustotal results 21.31% Quakbot
2023-05-31doc_A892_May_31.zipzip b5c88ea04cf3e5e708887045e9664b921313b9fb7a6e96747895b45b6a8a50f1n/a Quakbot
2023-05-31doc_A109_May_30.zipzip 4a8667b76adbcc7d1c45b6e24dff50904be7ae165c4e3fd0533daf0b26887b30Virustotal results 20.97% 
2023-05-31doc_F175_May_30.zipzip 0a14035e79e78ad7fcc54ab7fda78f75936ae637c7540638648ed4835576d271Virustotal results 17.74% Quakbot
2023-05-31doc_B296_May_30.zipzip 0a379ae6ea52cf9d3dd0a51b4b409ae547d5da922e7cb03b6c10970385efc50eVirustotal results 19.35% Quakbot
2023-05-31doc_F941_May_30.zipzip 0c27e8dd7b0621f1053d0221e705d6b9d2ecdab05dd92c2669d9ce64773d9421Virustotal results 19.35% Quakbot
2023-05-31doc_F509_May_30.zipzip 44bf5759f8daa041500447519d4044028bdc16ac5ffcce4db91d349adf8db32aVirustotal results 19.67% Quakbot
2023-05-31doc_A724_May_30.zipzip cc9a8c5159391c17bb37b69265f7f45a2baca4f6f0af549b704a08979e627d11Virustotal results 19.35% Quakbot
2023-05-31doc_C219_May_30.zipzip bd529974c21912e38c05ce3dbf5801bce7c1a49068ce6a9cb7d862a4da1036bdVirustotal results 19.35% Quakbot
2023-05-30doc_C197_May_30.zipzip 5af9b5abde0dbdaab0e3e5cd655148ce60cd786c5c728f5cf240d415a2fe6f6aVirustotal results 19.35% 
2023-05-30doc_A410_May_30.zipzip 7c6c1bba81a3c5192eaaa779e0dd1e6ecdbb6b0ae432b39627f051b956813c69Virustotal results 20.00% Quakbot
2023-05-30doc_D879_May_30.zipzip bd59bb7b811420cd53c359ae3cfad5be067bc29492bcd0d1982bf04473c0d79fn/a Quakbot