Report Overview
Domain Summary
Domain / FQDN | Rank | Registered | First Seen | Last Seen | Sent | Received | IP |
---|---|---|---|---|---|---|---|
krenv.lyzhite.cn | unknown | unknown | No data | No data | 1.1 kB | 18 MB | 24.233.31.47 |
Related reports
Network Intrusion Detection Systems
Suricata /w Emerging Threats Pro
Threat Detection Systems
Public InfoSec YARA rules
No alerts detected
OpenPhish
No alerts detected
PhishTank
No alerts detected
mnemonic secure dns
No alerts detected
Quad9 DNS
No alerts detected
ThreatFox
No alerts detected
Files detected
URL
krenv.lyzhite.cn/tuhw-ten.zip
IP
24.233.31.47
ASN
#55933 Cloudie Limited
File type
Zip archive data, at least v2.0 to extract, compression method=deflate
Size
18 MB (17879195 bytes)
Hash
42c929144b51bbcf806c7b11f8f829b5
54b3f8ad627ec720dd443417bcb93e10947b2f55
Archive (1)
Filename | Md5 | File type | |||
---|---|---|---|---|---|
tuhw-ten.msi | 740af991aab8f47cb3382e7905f19de6
| Composite Document File V2 Document, Little Endian, Os: Windows, Version 6.1, MSI Installer, Code page: 936, Title: Installation Database, Subject: My Product Installer, Author: My Company, Keywords: Installer, Comments: Package Comments, Template: Intel;0, Revision Number: {ABE172C3-42E5-424D-81B1-D2B2BBC4759A}, Create Time/Date: Mon Apr 22 19:00:52 2024, Last Saved Time/Date: Mon Apr 22 19:00:52 2024, Number of Pages: 500, Number of Words: 10, Name of Creating Application: Windows Installer XML Toolset (3.9.1208.0), Security: 2 |
Detections
Analyzer | Verdict | Alert |
---|---|---|
YARAhub by abuse.ch | malware | Detect files disabling or modifying Windows Defender, Windows Firewall, or Microsoft Smartscreen |
JavaScript (1)
Size | First Seen | Last Seen | ||
---|---|---|---|---|
#1 Eval - d41d8cd98f00b204e9800998ecf8427e | 0 B | 2023-03-07 | 2024-05-20 | |
Pretty
Loading... | ||||
HTTP Transactions (3)
URL | IP | Response | Size | |
---|---|---|---|---|
krenv.lyzhite.cn/ | 24.233.31.47 | 162 B | ||
HTTP Headers
| ||||
krenv.lyzhite.cn/ | 24.233.31.47 | 5.9 kB | ||
HTTP Headers
| ||||
krenv.lyzhite.cn/tuhw-ten.zip | 24.233.31.47 | 200 OK | 18 MB | |
HTTP Headers
| ||||