URLhaus Database

You are currently viewing the URLhaus database entry for https://book4noon.com/orop/?1 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:2660800
URL: https://book4noon.com/orop/?1
URL Status:Offline
Host: book4noon.com
Date added:2023-06-14 16:56:20 UTC
Last online:2023-06-15 16:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2023-06-14 20:08:04 UTC to abuse{at}bluehost[dot]com)
Takedown time:20 hours, 51 minutes Good (down since 2023-06-15 16:59:09 UTC)
Tags:BB32 geofenced js Qakbot link Quakbot link USA

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2023-06-15document_DE108_Jun_15.zipzip a739645788a95ede796f883defd315ab0d3a931a9fafb31a265437abdb0e2030Virustotal results 6.45%Quakbot
2023-06-15document_DB978_Jun_15.zipzip 05e68a060b48171a06745c731173b6de5a1e343c8bf0bbccfba61d31ed256f06n/a Quakbot
2023-06-15document_EF876_Jun_15.zipzip 28c13f3c8bb964729c670947f87979bbefb1737bec46e85e00e43bd1dd2c19fdn/a Quakbot
2023-06-15N8k0VuiuCIQCu.jsjs 7667afdee2b01e242e868328bfa28debd5f8d40fc330640591bb8f3206f6d0e1Virustotal results 15.25% Quakbot
2023-06-1527xuvmmcizYUrj.jsjs 560d9cd30185780fbdea590ad1905bb1fa4c3dab06a33d4fa2f4d2f778f0ca0fn/a Quakbot
2023-06-15MGDB7RMexaIPe.jsjs e258c99d36d15569d5440bd18fbe71099c6e8e8d1ffb0d630c2501dff38e1caaVirustotal results 15.25% Quakbot
2023-06-15DJb6uWYDKgHD.jsjs 453a9941bc55f03cab2d4e620a2003e1a392d8eeab3dbe75b5cd9d3222332e29Virustotal results 18.64% Quakbot
2023-06-15AziocZ5oxQb2j.jsjs c93b7ade8c1a4e36cd58171085ed581a5d601b39b5e65740a0ab8f5260cb99b7Virustotal results 18.64% Quakbot
2023-06-14WfFbDCnZg0prJf.jsjs b523fed6c7061c12d1f558337cc09afca8e812c633f034b528a9f7970b203800n/a Quakbot