Report - na.traxon-ecue.com/wp-content/uploads/sites/8/2022/10/Media-Tube-Go_Accessories-CAD.zip

Report Overview

Submitted URL
na.traxon-ecue.com/wp-content/uploads/sites/8/2022/10/Media-Tube-Go_Accessories-CAD.zip
IP
104.17.54.64
ASN
#13335 CLOUDFLARENET
Submitted
2024-04-23 10:50:58
Access
public
Website Title
about:privatebrowsing
Final URL
about:privatebrowsing
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
7

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
na.traxon-ecue.com	unknown	2022-08-03	2023-02-09	2024-03-24	541 B	1.7 MB	104.17.54.64

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

Files detected

URL
na.traxon-ecue.com/wp-content/uploads/sites/8/2022/10/Media-Tube-Go_Accessories-CAD.zip
IP
104.17.54.64
ASN
#13335 CLOUDFLARENET

File type
Zip archive data, at least v2.0 to extract, compression method=deflate
Size
1.7 MB (1735482 bytes)
Hash
1fde28c0520c15220b941a4b7279d057
aa791a7a0d03d18772665d22e49dd23bce110dfc
76fde9bf8342f1a59f3e727747eb1364fece87223b20c72971f43ace1ca9a71f

Archive (7)

Filename

Md5

File type

AM463760055_MEDIA TUBE GO Starter Cable, 5-wire, 3m.dwg

cf61b99d869e17d7df5b6f45610f5c94

DWG AutoDesk AutoCAD 2013-2017

AM463770055_MEDIA TUBE GO End Cap.dwg

84481664e5828d9bd7f9c6d442f14e57

DWG AutoDesk AutoCAD 2013-2017

AM463780055_MEDIA TUBE GO Inter Cable, 5-wire, 0.14m.dwg

d978667b8aeda3f560b9ce7955faddeb

DWG AutoDesk AutoCAD 2013-2017

AM463790055_MEDIA TUBE GO Inter Cable, 5-wire, 1m.dwg

d8d4d237a60411fadeca7168efba0173

DWG AutoDesk AutoCAD 2013-2017

AM463800055_MEDIA TUBE GO Inter Cable, 5-wire, 3m.dwg

877904eca8cce5e63564e92c1beb56a3

DWG AutoDesk AutoCAD 2013-2017

AM463810055_MEDIA TUBE GO Power Injector Cable.dwg

5c121a02895f7e34d188fc22ab64cf6d

DWG AutoDesk AutoCAD 2013-2017

AM463820055_MEDIA TUBE GO RJ45 Starter Cable.dwg

abb8a158bb9be09e9ea27e9ff8956554

DWG AutoDesk AutoCAD 2013-2017

Detections

Analyzer	Verdict	Alert
Public InfoSec YARA rules	malware	Identifies OLE files embedded in AutoCAD and related Autodesk files, quite uncommon and potentially malicious.
Public InfoSec YARA rules	malware	Identifies OLE files embedded in AutoCAD and related Autodesk files, quite uncommon and potentially malicious.
Public InfoSec YARA rules	malware	Identifies OLE files embedded in AutoCAD and related Autodesk files, quite uncommon and potentially malicious.
Public InfoSec YARA rules	malware	Identifies OLE files embedded in AutoCAD and related Autodesk files, quite uncommon and potentially malicious.
Public InfoSec YARA rules	malware	Identifies OLE files embedded in AutoCAD and related Autodesk files, quite uncommon and potentially malicious.
Public InfoSec YARA rules	malware	Identifies OLE files embedded in AutoCAD and related Autodesk files, quite uncommon and potentially malicious.
Public InfoSec YARA rules	malware	Identifies OLE files embedded in AutoCAD and related Autodesk files, quite uncommon and potentially malicious.

JavaScript (0)

HTTP Transactions (1)

URL IP Response Size

na.traxon-ecue.com/wp-content/uploads/sites/8/2022/10/Media-Tube-Go_Accessories-CAD.zip

104.17.54.64

200 OK

1.7 MB

URL User Request GET HTTP/2
na.traxon-ecue.com/wp-content/uploads/sites/8/2022/10/Media-Tube-Go_Accessories-CAD.zip
IP
104.17.54.64:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerLet's Encrypt
Subjectna.traxon-ecue.com
Fingerprint53:E6:6C:63:2C:59:CC:76:41:70:B7:95:49:A1:E2:B5:E2:69:12:C5
ValidityFri, 01 Mar 2024 21:12:17 GMT - Thu, 30 May 2024 21:12:16 GMT

File type
Zip archive data, at least v2.0 to extract, compression method=deflate
Size
1.7 MB (1735482 bytes)
Hash
1fde28c0520c15220b941a4b7279d057
aa791a7a0d03d18772665d22e49dd23bce110dfc
76fde9bf8342f1a59f3e727747eb1364fece87223b20c72971f43ace1ca9a71f

HTTP Headers

GET /wp-content/uploads/sites/8/2022/10/Media-Tube-Go_Accessories-CAD.zip HTTP/1.1
Host: na.traxon-ecue.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Tue, 23 Apr 2024 10:50:32 GMT
content-type: application/zip
content-length: 1735482
cf-ray: 878d4b125aee5695-OSL
cf-cache-status: HIT
accept-ranges: bytes
access-control-allow-origin: *
cache-control: public, max-age=31536000
etag: "6536de1f-1a7b3a"
expires: Wed, 23 Apr 2025 10:50:32 GMT
last-modified: Mon, 23 Oct 2023 20:57:03 GMT
strict-transport-security: max-age=15552000; includeSubDomains; preload
vary: Accept-Encoding
cf-placement: local-OSL
x-content-type-options: nosniff
set-cookie: __cf_bm=DsBlOSVjyyGNT09cQPl3vvViAVz2nUyfxSoNu7bA9M4-1713869432-1.0.1.1-62c.Kf3KhT37huuLBPfTnQAzgYblWEHmR5WvXjmrMpuWGBr62geS3fDlm7Zi0XR6Vv2piJ4SiVw559Wjbxilcw; path=/; expires=Tue, 23-Apr-24 11:20:32 GMT; domain=.na.traxon-ecue.com; HttpOnly; Secure; SameSite=None
report-to: {"endpoints":[{"url":"https:\/\/csp-reporting.cloudflare.com\/cdn-cgi\/script_monitor\/report?m=aOquZrbglG4v2HjceaY.wuzgEMP0cmZEhN81FYUQSdw-1713869432-1.0.1.1-UnzCaBY4N0yz.J5fwjEX7cuufGMKlwrnhFCESCrhqCkfQLqw8Ps4kU4wFa0vLxGsAJz6GoLZfmvdk7f7Fj6h1TGkVxlvrR81K0BC5XJ3MhETcBAgXrIeabbV5M.sg3pCHMQc43MBqiNddiLkkStlpnY8MDFzsdc83o1eN7yHfwk"}],"group":"cf-csp-endpoint","max_age":86400}
content-security-policy-report-only: script-src 'none'; report-uri https://csp-reporting.cloudflare.com/cdn-cgi/script_monitor/report?m=aOquZrbglG4v2HjceaY.wuzgEMP0cmZEhN81FYUQSdw-1713869432-1.0.1.1-UnzCaBY4N0yz.J5fwjEX7cuufGMKlwrnhFCESCrhqCkfQLqw8Ps4kU4wFa0vLxGsAJz6GoLZfmvdk7f7Fj6h1TGkVxlvrR81K0BC5XJ3MhETcBAgXrIeabbV5M.sg3pCHMQc43MBqiNddiLkkStlpnY8MDFzsdc83o1eN7yHfwk; report-to cf-csp-endpoint
server: cloudflare
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2