Report Overview
Submitted URL
www.netway.net.cn/upload/20220427121316izeJfZ.zip
IP
211.152.51.235
ASN
#4811 China Telecom Group
Submitted
2024-04-23 09:49:30
Access
public
Website Title
about:privatebrowsing
Final URL
about:privatebrowsing
Tags
urlquery detections
No alerts detected
Detections
urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
1
Domain Summary
Domain / FQDN | Rank | Registered | First Seen | Last Seen | Sent | Received | IP |
---|---|---|---|---|---|---|---|
www.netway.net.cn | unknown | 1998-01-24 | 2017-04-16 | 2023-10-10 | 419 B | 20 MB | 211.152.51.235 |
Related reports
Network Intrusion Detection Systems
Suricata /w Emerging Threats Pro
Threat Detection Systems
Public InfoSec YARA rules
No alerts detected
Files detected
URL
www.netway.net.cn/upload/20220427121316izeJfZ.zip
IP
211.152.51.235
ASN
#4811 China Telecom Group
File type
Zip archive data, at least v2.0 to extract, compression method=deflate
Size
20 MB (20034264 bytes)
Hash
e3363b6247b2a12c80f9e1b038840e80
44f43789813d197751ad7035e92395810967a952
Archive (1)
Filename | Md5 | File type | |||
---|---|---|---|---|---|
政务外网统一入口接入.exe | 2950e2de8d76f110f03c8b5278b6cd7b
| PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive, 5 sections |
Detections
Analyzer | Verdict | Alert |
---|---|---|
YARAhub by abuse.ch | malware | Detect files is `SliverFox` malware |
JavaScript (0)
HTTP Transactions (1)
URL | IP | Response | Size | |
---|---|---|---|---|
www.netway.net.cn/upload/20220427121316izeJfZ.zip | 211.152.51.235 | 20 MB | ||
HTTP Headers
| ||||