Report - eias.ru/files/distr/libs_for_templates

Report Overview

Submitted URL
eias.ru/files/distr/libs_for_templates_setup.rar
IP
194.226.26.153
ASN
#62422 Federal Antimonopoly Service
Submitted
2024-04-23 14:04:55
Access
public
Website Title
about:privatebrowsing
Final URL
about:privatebrowsing
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
1

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
eias.ru	420034	2006-03-12	2015-04-02	2024-04-08	502 B	983 kB	194.226.26.153

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

Files detected

URL
eias.ru/files/distr/libs_for_templates_setup.rar
IP
194.226.26.153
ASN
#62422 Federal Antimonopoly Service

File type
RAR archive data, v4, os: Win32, flags: Solid
Size
982 kB (982306 bytes)
Hash
366c43b407e05eef1c62a99ced633a0b
3d73f9e11db8062b1ec59d02a324263c503ee643
18575dc4305691c79dc3e6cbd3299d1582cee79c1c7db00c4f49dc7ab21b490d

Detections

Analyzer	Verdict	Alert
VirusTotal	suspicious	VirusTotal - Scan result 1/58

JavaScript (0)

HTTP Transactions (1)

URL IP Response Size

eias.ru/files/distr/libs_for_templates_setup.rar

194.226.26.153

200 OK

982 kB

URL User Request GET HTTP/1.1
eias.ru/files/distr/libs_for_templates_setup.rar
IP
194.226.26.153:443
ASN
#62422 Federal Antimonopoly Service

Certificate
IssuerGlobalSign nv-sa
Subject*.eias.ru
Fingerprint43:B7:F5:09:3D:98:08:4E:4C:C1:8B:A2:CC:BE:04:73:71:AE:39:D1
ValidityThu, 22 Feb 2024 10:45:31 GMT - Tue, 25 Mar 2025 10:45:30 GMT

File type
RAR archive data, v4, os: Win32, flags: Solid
Size
982 kB (982306 bytes)
Hash
366c43b407e05eef1c62a99ced633a0b
3d73f9e11db8062b1ec59d02a324263c503ee643
18575dc4305691c79dc3e6cbd3299d1582cee79c1c7db00c4f49dc7ab21b490d

Detections

Analyzer	Verdict	Alert
VirusTotal	suspicious	VirusTotal - Scan result 1/58

HTTP Headers

GET /files/distr/libs_for_templates_setup.rar HTTP/1.1
Host: eias.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Tue, 23 Apr 2024 14:04:30 GMT
Server: Apache
Last-Modified: Tue, 21 May 2013 10:10:10 GMT
ETag: "10000000040d5-efd22-4dd37a7808480"
Accept-Ranges: bytes
Content-Length: 982306
Content-Type: application/x-rar-compressed
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

Files detected

URL

IP

ASN

File type

Size

Hash

Detections

JavaScript (0)

HTTP Transactions (1)

URL User Request GET HTTP/1.1

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers