Overview

URL www.bvs.sa.cr/Sex.exe
IP196.40.24.244
ASNAS3790 COSTARRICENSE
Location Costa Rica
Report completed2019-03-07 15:45:43 CET
StatusLoading report..
urlquery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Pool
Access Level


Intrusion Detection Systems

Suricata /w Emerging Threats Pro  No alerts detected


Blacklists

MDL  No alerts detected
OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter
Added / Verified Severity Host Comment
2019-03-07 2 www.bvs.sa.cr/Sex.exe Malware
DNS-BH  No alerts detected
mnemonic secure dns  No alerts detected


Recent reports on same IP/ASN/Domain

No other reports on IP: 196.40.24.244


Last 10 reports on ASN: AS3790 COSTARRICENSE

Date UQ / IDS / BL URL IP
2019-06-10 19:17:58 +0200
0 - 0 - 0 https://www.vidaplena.fi.cr 190.241.119.106
2019-06-10 16:23:22 +0200
0 - 0 - 1 terapiafacil.com/gouv/Ja/8aa3243cadb1aa6ffd88 (...) 196.40.59.65
2019-05-19 13:14:34 +0200
0 - 0 - 1 https://editor.eco-firma.com/ 190.10.11.41
2019-04-26 04:50:59 +0200
0 - 0 - 0 ver.cr/73Rt 190.10.14.231
2019-04-15 04:25:00 +0200
0 - 0 - 0 196.40.11.133 196.40.11.133
2019-04-14 20:23:26 +0200
0 - 0 - 0 goldpharma.com 190.10.8.58
2019-03-26 02:12:59 +0100
0 - 3 - 9 web.eco.eca.or.cr/modules/block/tests/themes/ (...) 190.10.11.41
2019-03-26 02:12:19 +0100
0 - 1 - 9 web.eco.eca.or.cr/modules/block/tests/themes/ (...) 190.10.11.41
2019-03-26 02:12:07 +0100
0 - 0 - 9 web.eco.eca.or.cr/modules/block/tests/themes/ (...) 190.10.11.41
2019-02-10 02:36:31 +0100
0 - 0 - 1 fod-rmat-web01.interamerica.net/gouv/Ja/c62a6 (...) 196.40.59.65

No other reports on domain: bvs.sa.cr



JavaScript

Executed Scripts (0)


Executed Evals (0)


Executed Writes (0)



HTTP Transactions (1)


Request Response
                                        
                                            GET /Sex.exe HTTP/1.1 
Host: www.bvs.sa.cr
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         196.40.24.244
HTTP/1.1 200 OK
Content-Type: application/x-msdownload
                                        
Date: Thu, 07 Mar 2019 14:45:07 GMT
Server: Apache/2.4.10 (Win32) OpenSSL/1.0.1i PHP/5.6.3
Last-Modified: Thu, 07 Mar 2019 09:29:20 GMT
Etag: "6600-5837dbdbbf1da"
Accept-Ranges: bytes
Content-Length: 26112
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  PE32 executable for MS Windows (GUI) Intel 80386 32-bit Mono/.Net assembly
Size:   26112
Md5:    28dfcadee47ccc08756d51675c727ff9
Sha1:   95ee46a62da6ed7e8785a09f4ca9ebe9bc2c4efd
Sha256: d5046292ec893582f8e1dcdc77cda8af013d0a805e43570e661a3f7ea87974a0

Alerts:
  Blacklists:
    - fortinet: Malware