Report Overview

  1. Submitted URL

    91.213.50.74/CRYPS/Q7/QWER/dllf3.txt

  2. IP

    91.213.50.74

    ASN

    #49943 IT Resheniya LLC

  3. Submitted

    2024-04-20 13:11:23

    Access

    public

  4. Website Title

    91.213.50.74/CRYPS/Q7/QWER/dllf3.txt

  5. Final URL

    91.213.50.74/CRYPS/Q7/QWER/dllf3.txt

  6. Tags

  7. urlquery detections

    Suspicious - Base64 encoded file

Detections

  1. urlquery

    2

  2. Network Intrusion Detection

    4

  3. Threat Detection Systems

    4

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
91.213.50.74unknownunknownNo dataNo data

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

SeveritySource IPDestination IPAlert
highClient IP 91.213.50.74
medium 91.213.50.74Client IP
medium 91.213.50.74Client IP
low 91.213.50.74Client IP

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected


OpenPhish

No alerts detected


PhishTank

No alerts detected


mnemonic secure dns

No alerts detected


Quad9 DNS
SeverityIndicatorAlert
medium91.213.50.74Sinkholed
medium91.213.50.74Sinkholed

ThreatFox

No alerts detected


Files detected

  1. URL

    91.213.50.74/CRYPS/Q7/QWER/dllf3.txt

  2. IP

    91.213.50.74

  3. ASN

    #49943 IT Resheniya LLC

  1. File type

    PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

    Size

    13 kB (12800 bytes)

  2. Hash

    900f7184a3494fdbf9ad188992cd7e65

    7c8bf4b4170cffc925e665e1783fefd14086eecd

    Detections

    AnalyzerVerdictAlert
    VirusTotalmalicious

JavaScript (0)

HTTP Transactions (2)

URLIPResponseSize
91.213.50.74/CRYPS/Q7/QWER/dllf3.txt
91.213.50.74200 OK7.6 kB
91.213.50.74/favicon.ico
91.213.50.74404 Not Found233 B