Report Overview
Domain Summary
Domain / FQDN | Rank | Registered | First Seen | Last Seen | Sent | Received | IP |
---|---|---|---|---|---|---|---|
123.240.7.168:45591 | unknown | unknown | No data | No data | 396 B | 120 kB | 123.240.7.168 |
Related reports
Network Intrusion Detection Systems
Suricata /w Emerging Threats Pro
No alerts detected
Threat Detection Systems
Public InfoSec YARA rules
Scan Date | Severity | Indicator | Alert |
---|---|---|---|
2024-04-23 | medium | 123.240.7.168:45591/mozi.a | Detects a suspicious ELF binary with UPX compression |
2024-04-23 | medium | 123.240.7.168:45591/mozi.a | Linux.Packer.Patched_UPX |
Files detected
URL
123.240.7.168:45591/mozi.a
IP
123.240.7.168
ASN
#131596 TBC
File type
ELF 32-bit LSB executable, ARM, version 1 (ARM)
Size
120 kB (119920 bytes)
Hash
b9e122860983d035a21f6984a92bfb22
5ab29bf2b71fe11114bb8f37bc515dfc78deee3b
Detections
Analyzer | Verdict | Alert |
---|---|---|
Public Nextron YARA rules | malware | Detects a suspicious ELF binary with UPX compression |
Elastic Security YARA Rules | malware | Linux.Packer.Patched_UPX |
VirusTotal | malicious |
JavaScript (0)
No Javascripts found
No Javascripts found
No Javascripts found
HTTP Transactions (1)
URL | IP | Response | Size | |||||||||||||
---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
123.240.7.168:45591/mozi.a | 123.240.7.168 | 200 OK | 120 kB | |||||||||||||
Detections
HTTP Headers
| ||||||||||||||||