Report Overview
Submitted URL
dl-dr-4.xyz/drv/old/Intel-FORCED-81x64-WIGIG_3.0.33116_old-drp.zip
IP
89.41.180.201
ASN
#25198 Interkvm Host Srl
Submitted
2024-04-19 15:48:57
Access
public
Website Title
about:privatebrowsing
Final URL
about:privatebrowsing
Tags
urlquery detections
No alerts detected
Detections
urlquery
0
Network Intrusion Detection
1
Threat Detection Systems
3
Domain Summary
Domain / FQDN | Rank | Registered | First Seen | Last Seen | Sent | Received | IP |
---|---|---|---|---|---|---|---|
dl-dr-4.xyz | unknown | 2023-06-04 | 2023-06-04 | 2024-04-18 | 520 B | 3.2 MB | 89.41.180.201 |
Related reports
Network Intrusion Detection Systems
Suricata /w Emerging Threats Pro
Timestamp | Severity | Source IP | Destination IP | Alert |
---|---|---|---|---|
2024-04-19 15:48:30 | medium | 89.41.180.201 | Client IP |
Threat Detection Systems
Public InfoSec YARA rules
No alerts detected
OpenPhish
No alerts detected
PhishTank
No alerts detected
mnemonic secure dns
No alerts detected
Quad9 DNS
Scan Date | Severity | Indicator | Alert |
---|---|---|---|
2024-04-19 | medium | dl-dr-4.xyz | Sinkholed |
ThreatFox
No alerts detected
Files detected
URL
dl-dr-4.xyz/drv/old/Intel-FORCED-81x64-WIGIG_3.0.33116_old-drp.zip
IP
89.41.180.201
ASN
#25198 Interkvm Host Srl
File type
Zip archive data, at least v2.0 to extract, compression method=store
Size
3.2 MB (3205065 bytes)
Hash
d921e523ab9d8dde0ce63cb32919533b
611a816fa2fd8bdf4ea02d9bbc2926b5b2d9e51c
Archive (15)
Filename | Md5 | File type | |||
---|---|---|---|---|---|
BPRGInst.exe | e547c8455d13e201f1bbbd4170052774 | PE32+ executable (console) x86-64, for MS Windows, 6 sections | |||
WdfCoinstaller01011.dll | d10864c1730172780c2d4be633b9220a | PE32+ executable (DLL) (console) x86-64, for MS Windows, 6 sections | |||
WiGigClassInstaller.dll | 157811eb297653cd1fbe60d9ac2a2c34 | PE32+ executable (DLL) (GUI) x86-64, for MS Windows, 6 sections | |||
iWiGiG.inf | 0c657e1e2f01c5f9f950cd9881874565 | Windows setup INFormation | |||
iWiGiG.sys | 96e4bde1f365f8eaa25a585baebe7bfb
| PE32+ executable (native) x86-64, for MS Windows, 8 sections | |||
iWiGigUM.dll | 80509a06ea976e4599c73e5344b30369 | PE32+ executable (DLL) (GUI) x86-64, for MS Windows, 7 sections | |||
iWiGigUM.inf | 132f6489f92c56b4abf0106c5d3a77f7 | Windows setup INFormation | |||
imausbhpal.cat | 9b8da1d15ebb13b8cb74de05375fad73 | DER Encoded PKCS#7 Signed Data | |||
imausbhpal.inf | 6014b2c60fa239a059d5e9854d6a8980 | Windows setup INFormation | |||
imausbhpal.sys | 41618c755c1995b8886a5af30abf99e9 | PE32+ executable (native) x86-64, for MS Windows, 8 sections | |||
imausbhub.cat | 8f3d20bb1301141b4fa42acd910cd1f6 | DER Encoded PKCS#7 Signed Data | |||
imausbhub.inf | a01837a1cddb5e6e7f15f9c0a56aae23 | Windows setup INFormation | |||
imausbhub.sys | 8b2d6e2dcedc8bfae9c8d2204357fbea | PE32+ executable (native) x86-64, for MS Windows, 10 sections | |||
iwigig.cat | 8d58b97f95b00bd918d7b0b2322eb240 | DER Encoded PKCS#7 Signed Data | |||
iwigigum.cat | 5df27fb549d15585c18219031b50cb57 | DER Encoded PKCS#7 Signed Data |
Detections
Analyzer | Verdict | Alert |
---|---|---|
YARAhub by abuse.ch | malware | signed_sys_with_vulnerablity |
JavaScript (0)
HTTP Transactions (1)
URL | IP | Response | Size | |||||||
---|---|---|---|---|---|---|---|---|---|---|
dl-dr-4.xyz/drv/old/Intel-FORCED-81x64-WIGIG_3.0.33116_old-drp.zip | 89.41.180.201 | 200 OK | 3.2 MB | |||||||
Detections
HTTP Headers
| ||||||||||