Report Overview
Submitted URL
freshmindworkz.hu/demoscene/download/frs!syr2_final.zip
IP
193.201.186.175ASN
#62214 Rackforest Zrt.
Submitted
2024-04-23 06:32:15
Access
public
Website Title
about:privatebrowsing
Final URL
about:privatebrowsing
Tags
urlquery detections
No alerts detected
Detections
urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
5
Domain Summary
| Domain / FQDN | Rank | Registered | First Seen | Last Seen | Sent | Received | IP |
|---|---|---|---|---|---|---|---|
| freshmindworkz.hu | unknown | 2003-03-19 | 2013-08-07 | 2024-03-21 | 425 B | 734 kB | 193.201.186.175 |
Related reports
Network Intrusion Detection Systems
Suricata /w Emerging Threats Pro
Threat Detection Systems
Public InfoSec YARA rules
No alerts detected
Files detected
URL
freshmindworkz.hu/demoscene/download/frs!syr2_final.zip
IP
193.201.186.175ASN
#62214 Rackforest Zrt.
File type
Zip archive data, at least v1.0 to extract, compression method=store
Size
734 kB (733620 bytes)
Hash
d13a462ac2857f28a7a3568c78374722
5507a17718e1923d703f289083ffdc7f220df524
Archive (8)
| Filename | Md5 | File type | ||||||
|---|---|---|---|---|---|---|---|---|
| FILE_ID.DIZ | 7ca6b22a880375443e946e661a65faa7 | ASCII text, with CRLF line terminators | ||||||
| Info.plist | 2e8a38612ab91b828232d8d08cde85e2 | XML 1.0 document, ASCII text | ||||||
| Syrnix2 | d6944fe689ceadcce5096f30854192ab | Mach-O ppc executable, flags:<NOUNDEFS> | ||||||
| PkgInfo | 3eb019b2efc51cbae3c012fc5c512c95 | ASCII text | ||||||
| Icon.icns | af4b748cf767481c9c99a2bcc486202f | Mac OS X icon, 13060 bytes, "ics#" type | ||||||
| syrnix2.exe | 0936379e89d769858b03c281e1b6557d
| PE32 executable (console) Intel 80386 (stripped to external PDB) Mono/.Net assembly, for MS Windows | ||||||
| syrnix2.lnx | 7819cf8e7efe74835ef2c92631577155
| ELF 32-bit LSB executable, Intel 80386, version 1 (GNU/Linux) | ||||||
| syrnix2.nfo | cdff6dcb10c617a794782814e6c0bae2 | ASCII text, with CRLF, LF line terminators |
Detections
| Analyzer | Verdict | Alert |
|---|---|---|
| Public Nextron YARA rules | malware | Detects imphash often found in malware samples (Maximum 0,25% hits with search for 'imphash:x p:0' on Virustotal) = 99,75% hits |
| Public Nextron YARA rules | malware | Detects a suspicious ELF binary with UPX compression |
| VirusTotal | malicious |
JavaScript (0)
HTTP Transactions (1)
| URL | IP | Response | Size | |||||||
|---|---|---|---|---|---|---|---|---|---|---|
freshmindworkz.hu/demoscene/download/frs!syr2_final.zip | 193.201.186.175 | 200 OK | 734 kB | |||||||
Detections
HTTP Headers
| ||||||||||