URLhaus Database

You are currently viewing the URLhaus database entry for https://basenaija.com/ts/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry

Add tag Remove tag Perform URL rescan Delete this URL Report a False Positive
ID:2650162
URL: https://basenaija.com/ts/
URL Status:Offline
Host: basenaija.com
Date added:2023-06-02 11:43:32 UTC
Last online:2023-06-05 00:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2023-06-03 20:54:07 UTC to abuse{at}cloudflare[dot]com)
Takedown time:2 days, 12 hours, 22 minutes Poor (down since 2023-06-05 00:06:33 UTC)
Tags:BB30 geofenced js Qakbot link Quakbot link TR USA zip

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2023-06-04document_C903_Jun_2.zipzip 30033b784407dcf9b8547dec59dd73fd8ab9404f94c9329b22ae7a55c96da15eVirustotal results 20.00% 
2023-06-04document_C540_Jun_2.zipzip b76d82e807df6a7d691e94acb69a4862c72fa7dde95a8e8d2440af46195f4795Virustotal results 25.81% 
2023-06-03document_A360_Jun_2.zipzip 1e750b4a436d6d7c27d04f239e2ca575be361627ee60416fbaa9849fe08ccb03Virustotal results 24.19% 
2023-06-02document_E539_Jun_2.zipzip ad3a08cd4292cc1144ca04bef820344cb9f1f01ef82b08e0c02cb160f6d35776n/a 
2023-06-02document_B124_Jun_2.zipzip 2aa4ca7868e041eda2eac4d08543d719c001d358284f0a08c542ad1a5d0763f4n/a Quakbot
2023-06-02document_E179_Jun_2.zipzip 8fc1f78228716655ff89e32efde46dd1efd284b88ddc1a8bd784dc452f8aa4c5n/a Quakbot