Report - unklar.pub/content-warning/Files.zip

Report Overview

Submitted URL
unklar.pub/content-warning/Files.zip
IP
162.213.255.54
ASN
#22612 NAMECHEAP-NET
Submitted
2024-05-09 02:42:48
Access
public
Website Title
about:privatebrowsing
Final URL
about:privatebrowsing
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
3

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
unklar.pub	unknown	2023-08-18	2023-08-18	2024-03-09	490 B	90 kB	162.213.255.54

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

Files detected

URL
unklar.pub/content-warning/Files.zip
IP
162.213.255.54
ASN
#22612 NAMECHEAP-NET

File type
Zip archive data, at least v2.0 to extract, compression method=deflate
Size
90 kB (90134 bytes)
Hash
67ead115584079e38bafdb06acb4b592
2aa0cc4bc49cbfaf5e1787a54021cc98aa99f5b1
24d3a1d146270fe755f29490717964e38b67b764dc0ab720ec637a23a1fafe97

Archive (6)

Filename

Md5

File type

Cheat.dll

39f56463d1d52510b2ecbfb61b686413

PE32+ executable (DLL) (console) x86-64 Mono/.Net assembly, for MS Windows, 2 sections

Fix content warning not found.bat

efb87eeb7c8273334c86dc824fad07fb

DOS batch file, ASCII text, with CRLF line terminators

injector settings.png

4df6e1ee0926d6ffa318ec965d0d6853

RIFF (little-endian) data, Web/P image

SharpMonoInjector.dll

71d51bc16f1c2e9b04270c98985ba324

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

smi.exe

b47619dfc37f1d54f7bf248a0c25cee6

PE32 executable (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

smi_gui.exe

1d89bb27ef47c0b20d7d3738c72b7585

PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

Detections

Analyzer	Verdict	Alert
VirusTotal	malicious	VirusTotal - Scan result 46/69

JavaScript (0)

HTTP Transactions (1)

URL IP Response Size

unklar.pub/content-warning/Files.zip

162.213.255.54

200 OK

90 kB

URL User Request GET HTTP/2
unklar.pub/content-warning/Files.zip
IP
162.213.255.54:443
ASN
#22612 NAMECHEAP-NET

Certificate
IssuerSectigo Limited
Subjectunklar.pub
Fingerprint9B:42:2E:9C:D3:F4:EB:25:62:52:39:FC:EC:06:8D:7C:52:39:D6:C5
ValidityFri, 18 Aug 2023 00:00:00 GMT - Sun, 18 Aug 2024 23:59:59 GMT

File type
Zip archive data, at least v2.0 to extract, compression method=deflate
Size
90 kB (90134 bytes)
Hash
67ead115584079e38bafdb06acb4b592
2aa0cc4bc49cbfaf5e1787a54021cc98aa99f5b1
24d3a1d146270fe755f29490717964e38b67b764dc0ab720ec637a23a1fafe97

Detections

Analyzer	Verdict	Alert
VirusTotal	malicious	VirusTotal - Scan result 46/69

HTTP Headers

GET /content-warning/Files.zip HTTP/1.1
Host: unklar.pub
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: application/zip
last-modified: Fri, 26 Apr 2024 20:47:24 GMT
accept-ranges: bytes
content-length: 90134
date: Thu, 09 May 2024 02:42:23 GMT
server: LiteSpeed
x-turbo-charged-by: LiteSpeed
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

Files detected

URL

IP

ASN

File type

Size

Hash

Archive (6)

Detections

JavaScript (0)

HTTP Transactions (1)

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers