URLhaus Database

You are currently viewing the URLhaus database entry for https://ziaintegracion.com/isq/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:2714085
URL: https://ziaintegracion.com/isq/
URL Status:Offline
Host: ziaintegracion.com
Date added:2023-09-26 10:04:11 UTC
Last online:2023-09-27 21:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Blocked
AdGuard :Blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2023-09-26 10:05:28 UTC to abuse{at}bluehost[dot]com)
Takedown time:1 day, 11 hours, 23 minutes Poor (down since 2023-09-27 21:28:44 UTC)
Tags:DarkGate link IcedID link USA xll zip

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2023-09-27Kw.zipzip 5ddc13793709d2e8ea0424d6c8598185d332dc556e3ce3355aea21c07ecca6e3n/a 
2023-09-27Ast.zipzip f474031dceab2d5cfef47113cfd905af644bc880ed14b83a94ab9e85c9b063den/a 
2023-09-27Qj.zipzip 67f15f83ba212d3dbddb8902fe5266c486d08fead13325c70ce7a04cf65ccbacn/a 
2023-09-27Unq.zipzip 2ea6d59ca5fc9d8e54534b73e65de44e53ecaa2fa402ef661086bfa17fdb1403n/a 
2023-09-26D.xlldll cb9b9548f1d057eb4b8eaf992d1d6de661ebf8dc8cd6d9dd67af996c04f22283n/a IcedID
2023-09-26Yy.zipzip 29ba9cfe2ff802c142a655d8bd9f9e038492c06ed4a5e5214907e830cb3ffff1n/a