URLhaus Database

You are currently viewing the URLhaus database entry for https://shadowline.com.tr/ut/?1 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:2660491
URL: https://shadowline.com.tr/ut/?1
URL Status:Offline
Host: shadowline.com.tr
Date added:2023-06-14 12:34:29 UTC
Last online:2023-06-15 16:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2023-06-14 12:39:42 UTC to abuse{at}trdns[dot]com)
Takedown time:1 day, 3 hours, 35 minutes Poor (down since 2023-06-15 16:15:22 UTC)
Tags:BB32 geofenced js Qakbot link Quakbot link USA zip

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2023-06-15document_EB201_Jun_15.zipzip 8ff454c9362519e24009b9a3862cd41fcb6dc7e8a5b6b1ee0e300348f3eeede1n/a Quakbot
2023-06-15oLOAbFSt0ymyHf.jsjs 85abbf5a4ba7600c490c5bfaaab00a9050c9185439ee2779d32b41e1ad00c27en/a Quakbot
2023-06-15aVkSr6YZ1qi1P.jsjs 7c2b7fa5ff1c064ed612181d72c86cec6e96848fd1d0cc02619bba76756bb734n/a Quakbot
2023-06-15115bxtIiOOF0.jsjs 5066958686baa5ba14329725e60c0c804fc19b2028107751dc44dd5c26a53c5dn/a 
2023-06-158m3ffiGpnvQGg.jsjs 15d278fcec95174ae520cbe5b6a0f47b29bd3a9023f0c74a58498fb76d1021a9Virustotal results 18.64% 
2023-06-15fs5yNHgdMHJyzS.jsjs df3951d408f334328c9954906ef8c22cddb780c5a86594bbe7e06449e10de354Virustotal results 15.25% Quakbot
2023-06-156TNHgNCZV3elh.jsjs 29cbb07f6372c16f60921a1bb788ca5daad33bf1b0677ee4669ff2ba009523acVirustotal results 0.00% Quakbot
2023-06-14fu1m7TjzWPazXn.jsjs f8cdb7a7f7f61cf71bc382badc180564a5bfbf064663def608d208579024fb4dn/a Quakbot
2023-06-14docu_FB105_Jun_14.zipzip d12981c15d0b8df151b83d645a9f49b037171c9452106a1edbe4c1f32256b1acn/a Quakbot