Overview

URL dl02.s3.amazonaws.com/installers/801349/Moozy.exe
IP52.216.129.11
ASN
Location United States
Report completed2018-02-13 14:08:54 CET
StatusLoading report..
urlquery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Pool
Access Level


Intrusion Detection Systems

Suricata /w Emerging Threats Pro  No alerts detected


Blacklists

MDL  No alerts detected
OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter
Added / Verified Severity Host Comment
2018-02-13 2 dl02.s3.amazonaws.com/installers/801349/Moozy.exe Malware
DNS-BH  No alerts detected
mnemonic secure dns  No alerts detected


Recent reports on same IP/ASN/Domain

Last 2 reports on IP: 52.216.129.11

Date UQ / IDS / BL URL IP
2018-05-28 17:49:06 +0200
 0 - 0 - 0 files.bannersnack.com/iframe/embed.js 52.216.129.11
2017-10-27 14:39:44 +0200
 0 - 0 - 1 dl02.s3.amazonaws.com/installers/597801/PlayP (...) 52.216.129.11

Last 10 reports on ASN:

Date UQ / IDS / BL URL IP
2019-02-16 09:16:05 +0100
 0 - 1 - 0 www.eztoosoft.com/download/EZToo-3GP-Converter.exe 162.241.226.130
2019-02-16 09:11:27 +0100
 1 - 0 - 1 dispute-webapps9238.serveirc.com/ 0.0.0.0
2019-02-16 09:11:24 +0100
 0 - 0 - 3 www.wahix.com/.!@/.!@!! 108.167.172.159
2019-02-16 09:11:19 +0100
 0 - 1 - 0 supservcies-online.ga/@.022@.1234@/@.045@.176 (...) 142.93.14.57
2019-02-16 09:11:05 +0100
 0 - 0 - 1 cubantechnologycave.co.za/images/23/update/in (...) 156.38.138.186
2019-02-16 09:11:01 +0100
 0 - 0 - 2 2018carscomingout.com/ar/bd1ccf66f3e2fc09927f (...) 144.217.72.101
2019-02-16 09:10:59 +0100
 1 - 0 - 1 verify-webscrid2342.serveirc.com/signin 0.0.0.0
2019-02-16 09:10:55 +0100
 0 - 0 - 2 smilecourier.com/sitemapxml 185.197.130.172
2019-02-16 09:10:55 +0100
 0 - 0 - 3 client.ewc.com.ng/rYMib-pEPr_KS-OlR/Invoice/4 (...) 50.116.92.26
2019-02-16 09:10:33 +0100
 0 - 0 - 1 24x7review.com/ftps/mfile/index.php 162.241.194.27

Last 10 reports on domain: dl02.s3.amazonaws.com

Date UQ / IDS / BL URL IP
2019-02-14 18:46:32 +0100
 0 - 0 - 1 dl02.s3.amazonaws.com/installers/224507/YouTu (...) 54.231.82.146
2019-02-14 11:32:45 +0100
 0 - 0 - 1 dl02.s3.amazonaws.com/installers/689393/oi_Op (...) 52.216.32.184
2019-02-14 04:15:12 +0100
 0 - 0 - 1 dl02.s3.amazonaws.com/installers/624861/oi_CD (...) 52.216.234.51
2019-02-14 04:15:03 +0100
 0 - 0 - 1 dl02.s3.amazonaws.com/installers/618135/oi_RS (...) 52.216.234.51
2019-02-14 04:14:43 +0100
 0 - 0 - 1 dl02.s3.amazonaws.com/installers/634587/oi_ap (...) 52.216.234.51
2019-02-13 16:47:45 +0100
 0 - 0 - 1 dl02.s3.amazonaws.com/installers/626731/oi_Ph (...) 52.216.64.112
2019-02-12 15:19:15 +0100
 0 - 0 - 1 dl02.s3.amazonaws.com/installers/625897/oi_in (...) 54.231.114.27
2019-02-12 15:17:46 +0100
 0 - 0 - 1 dl02.s3.amazonaws.com/installers/622203/oi_ra (...) 54.231.114.27
2019-02-12 15:17:43 +0100
 0 - 0 - 1 dl02.s3.amazonaws.com/installers/623071/oi_UN (...) 54.231.114.27
2019-02-12 09:39:47 +0100
 0 - 0 - 1 dl02.s3.amazonaws.com/installers/640909/oi_se (...) 52.216.110.59


JavaScript

Executed Scripts (0)


Executed Evals (0)


Executed Writes (0)



HTTP Transactions (1)


Request Response
 
                                        
                                            GET /installers/801349/Moozy.exe HTTP/1.1 

                                        
                                            
Host: dl02.s3.amazonaws.com 

                                        
                                    
                                        

                                        
                                            
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13 

                                        
                                            
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 

                                        
                                            
Accept-Language: en-us,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip,deflate 

                                        
                                            
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7 

                                        
                                            
Keep-Alive: 115 

                                        
                                            
Connection: keep-alive 

                                        
                                            
 

                                        
                                    
                                         
                                         52.216.66.56

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/x-msdos-program 

                                        
                                    
                                        

                                        
                                            
x-amz-id-2: +Z3Szh0JYfuu6pw0itnbY1B2kQRMmyrB++xjTe/OY5aN6k0nJnuDnVXmuOZgu3Au34SnelI0wSQ= 

                                        
                                            
x-amz-request-id: F971EC0FCC85FB5C 

                                        
                                            
Date: Tue, 13 Feb 2018 13:14:52 GMT 

                                        
                                            
Last-Modified: Wed, 25 Jan 2012 09:21:51 GMT 

                                        
                                            
Etag: "087d9d968b2b770609b9ca6089d7397d" 

                                        
                                            
Accept-Ranges: bytes 

                                        
                                            
Content-Length: 318024 

                                        
                                            
Server: AmazonS3 

                                        
                                            
 

                                        
                                        

                                            

                                            --- Additional Info ---

                                            
                                                Magic:  PE32 executable for MS Windows (GUI) Intel 80386 32-bit

                                                Size:   318024

                                                Md5:    087d9d968b2b770609b9ca6089d7397d

                                                Sha1:   86ce0614ea337cebf176eba6a55888e654189b33

                                                Sha256: 055787407b0b1425a658f579629f77078a0c433868ef295ff8e3771ac4454d7b

                                            

                                            
                                                
Alerts:

                                                

                                                
                                                      Blacklists:

                                                    
                                                            - fortinet: Malware