URLhaus Database

You are currently viewing the URLhaus database entry for https://peasx.com/so/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry

Add tag Remove tag Perform URL rescan Delete this URL Report a False Positive
ID:2650363
URL: https://peasx.com/so/
URL Status:Offline
Host: peasx.com
Date added:2023-06-02 15:37:23 UTC
Last online:2023-06-05 03:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2023-06-02 15:39:33 UTC to abuse{at}cloudflare[dot]com)
Takedown time:2 days, 12 hours, 15 minutes Poor (down since 2023-06-05 03:55:07 UTC)
Tags:BB30 geofenced js Qakbot link TR USA zip

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2023-06-04document_E256_Jun_2.zipzip 419dbb9eb45621fac26553d40b18156a1375229a8d67369777da44a3501d82a3Virustotal results 22.95% 
2023-06-04document_B248_Jun_2.zipzip 35d386b2a225b44f527ad662bb94e03acdb0539800168a9fe307b010fa8fcf52Virustotal results 30.65% 
2023-06-03document_A570_Jun_2.zipzip 6db2c027927ba1a6c987af37f5ec5e6f90aa43f1bd5bcd1f2281a951ffb7e7e1Virustotal results 21.67% 
2023-06-03document_B894_Jun_2.zipzip c719eeb14100af286f4486aa6f5837298215ed893b8a2b9b9371417303201f91Virustotal results 17.74% 
2023-06-02document_F675_Jun_2.zipzip d82f85bea9380f8f24a95580ab06ac43d8197e70720f21a4c69ee2a4f59d5009n/a 
2023-06-02document_F510_Jun_2.zipzip f2696c530f0f51661607361d6fff141371e9593e852f27d5fd15678ffe1d928an/a