Report - www.ma.dk/rts/rockettoolsketcher.zip

Report Overview

Submitted URL
www.ma.dk/rts/rockettoolsketcher.zip
IP
94.231.103.54
ASN
#48854 team.blue Denmark A/S
Submitted
2024-05-08 11:36:31
Access
public
Website Title
about:privatebrowsing
Final URL
about:privatebrowsing
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
2

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
www.ma.dk	unknown	1997-01-31	2015-07-27	2017-12-24	406 B	3.9 MB	94.231.103.54

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

Files detected

URL
www.ma.dk/rts/rockettoolsketcher.zip
IP
94.231.103.54
ASN
#48854 team.blue Denmark A/S

File type
Zip archive data, at least v2.0 to extract, compression method=deflate
Size
3.9 MB (3924187 bytes)
Hash
c8b8acdbc0d8a8e78c1566bc46620a40
24358fe0f5e45c2837935915857d24b5df947298
c97be8e9a9cbdd3f12a0d59ee1b9c5ef7a4c25036ae8c7c0f547480656af306b

Archive (2)

Filename

Md5

File type

help.txt

7b3707e246ce6f9220fcfa9cfcfbddc3

ISO-8859 text, with very long lines (538), with CRLF line terminators

rockettoolsketcher.exe

c5c6ee42f204f9583de918b7617c826a

PE32 executable (GUI) Intel 80386, for MS Windows, 7 sections

Detections

Analyzer	Verdict	Alert
YARAhub by abuse.ch	malware	meth_get_eip
YARAhub by abuse.ch	malware	meth_stackstrings

JavaScript (0)

HTTP Transactions (1)

URL IP Response Size

	URL	IP	Size
	www.ma.dk/rts/rockettoolsketcher.zip	94.231.103.54	3.9 MB
URL User Request GET www.ma.dk/rts/rockettoolsketcher.zip IP 94.231.103.54:0 ASN #48854 team.blue Denmark A/S File type Zip archive data, at least v2.0 to extract, compression method=deflate Size 3.9 MB (3924187 bytes) Hash c8b8acdbc0d8a8e78c1566bc46620a40 24358fe0f5e45c2837935915857d24b5df947298 c97be8e9a9cbdd3f12a0d59ee1b9c5ef7a4c25036ae8c7c0f547480656af306b HTTP Headers `GET /rts/rockettoolsketcher.zip HTTP/1.1 Host: www.ma.dk User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Date: Wed, 08 May 2024 11:36:05 GMT Content-Type: application/zip Content-Length: 3924187 Connection: keep-alive Server: Apache Last-Modified: Thu, 03 Nov 2016 14:13:38 GMT ETag: "3be0db-5406629f02880" Accept-Ranges: bytes X-Content-Type-Options: nosniff SimplyCom-Server: Apache, nginx`

www.ma.dk/rts/rockettoolsketcher.zip

94.231.103.54

3.9 MB

URL User Request GET
www.ma.dk/rts/rockettoolsketcher.zip
IP
94.231.103.54:0
ASN
#48854 team.blue Denmark A/S

File type
Zip archive data, at least v2.0 to extract, compression method=deflate
Size
3.9 MB (3924187 bytes)
Hash
c8b8acdbc0d8a8e78c1566bc46620a40
24358fe0f5e45c2837935915857d24b5df947298
c97be8e9a9cbdd3f12a0d59ee1b9c5ef7a4c25036ae8c7c0f547480656af306b

HTTP Headers

GET /rts/rockettoolsketcher.zip HTTP/1.1
Host: www.ma.dk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Wed, 08 May 2024 11:36:05 GMT
Content-Type: application/zip
Content-Length: 3924187
Connection: keep-alive
Server: Apache
Last-Modified: Thu, 03 Nov 2016 14:13:38 GMT
ETag: "3be0db-5406629f02880"
Accept-Ranges: bytes
X-Content-Type-Options: nosniff
SimplyCom-Server: Apache, nginx

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

Files detected

URL

IP

ASN

File type

Size

Hash

Archive (2)

Detections

JavaScript (0)

HTTP Transactions (1)

URL User Request GET

IP

ASN

File type

Size

Hash

HTTP Headers