Report - www.nikopol-mrada.dp.gov.ua/pbinf/proektNMR/8047

Report Overview

Submitted URL
www.nikopol-mrada.dp.gov.ua/pbinf/proektNMR/8047_24115110536.zip
IP
93.190.42.226
ASN
#6849 JSC Ukrtelecom
Submitted
2024-05-07 08:10:23
Access
public
Website Title
about:privatebrowsing
Final URL
about:privatebrowsing
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
1

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
www.nikopol-mrada.dp.gov.ua	unknown	unknown	2016-10-10	2023-06-13	518 B	117 kB	93.190.42.226

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

Files detected

URL
www.nikopol-mrada.dp.gov.ua/pbinf/proektNMR/8047_24115110536.zip
IP
93.190.42.226
ASN
#6849 JSC Ukrtelecom

File type
Zip archive data, at least v2.0 to extract, compression method=deflate
Size
117 kB (116675 bytes)
Hash
894699d22adae2155fd08c1b6c31e7d1
a17f6d40843a6f6720a3b36a01e1e5766a945ce3
b7aeb96bdd3f2c172d3f3f0ecc57aa90105c2d18c30dc2de4de5bfadd981ec82

Archive (6)

Filename

Md5

File type

Д.1-Положення про УСП 2024 остаточний.doc

9fdc1ac7196fa2c108594fee9551016f

Composite Document File V2 Document, Little Endian, Os: Windows, Version 6.2, Code page: 1251, Author: Unknown User, Template: Normal, Last Saved By: POLYAKVINSKAYA, Revision Number: 2, Name of Creating Application: Microsoft Office Word, Total Editing Time: 01:00, Last Printed: Wed Mar 13 11:24:00 2024, Create Time/Date: Thu Mar 14 10:36:00 2024, Last Saved Time/Date: Thu Mar 14 10:36:00 2024, Number of Pages: 10, Number of Words: 3910, Number of Characters: 22290, Security: 0

Д.3-Положення відділ у справах ветеранів 2024 (остаточний).doc

44eee49f1f8233f12beda7ef8712be1e

Composite Document File V2 Document, Little Endian, Os: Windows, Version 6.1, Code page: 1251, Author: KARPETS, Template: Normal.dotm, Last Saved By: 102lawN, Revision Number: 4, Name of Creating Application: Microsoft Office Word, Total Editing Time: 01:33:00, Last Printed: Wed Mar 13 06:58:00 2024, Create Time/Date: Tue Mar 12 13:07:00 2024, Last Saved Time/Date: Wed Mar 13 06:58:00 2024, Number of Pages: 7, Number of Words: 2346, Number of Characters: 13376, Security: 0

ПОЛОЖЕННЯ ВСЗ УСП 2024.doc

655716948465c6faa7cf1b73d08c150e

Composite Document File V2 Document, Little Endian, Os: Windows, Version 6.2, Code page: 1251, Author: KARPETS, Template: Normal, Last Saved By: POLYAKVINSKAYA, Revision Number: 13, Name of Creating Application: Microsoft Office Word, Total Editing Time: 01:14:00, Last Printed: Wed Mar 13 13:12:00 2024, Create Time/Date: Thu Mar 7 07:49:00 2024, Last Saved Time/Date: Wed Mar 13 13:14:00 2024, Number of Pages: 7, Number of Words: 2791, Number of Characters: 15913, Security: 0

Порівняльна таблиця 1.docx

acbcc0eea67c053f136fec12eab01c03

Microsoft Word 2007+

Сесія рішення ПОЛОЖЕННЯ ост.doc

67e1a6b3fbe26f5b5a819b79d97b9ce6

Composite Document File V2 Document, Little Endian, Os: Windows, Version 6.2, Code page: 1251, Author: user, Template: Normal, Last Saved By: POLYAKVINSKAYA, Revision Number: 7, Name of Creating Application: Microsoft Office Word, Total Editing Time: 27:00, Last Printed: Thu Mar 14 06:33:00 2024, Create Time/Date: Tue Mar 12 09:13:00 2024, Last Saved Time/Date: Thu Mar 14 06:33:00 2024, Number of Pages: 3, Number of Words: 510, Number of Characters: 2913, Security: 0

Супроводжувальна.docx

a1c2c02e386eba90e8f074c3f82e6eb5

Microsoft Word 2007+

Detections

Analyzer	Verdict	Alert
Public InfoSec YARA rules	malware	Identifies Office documents created by a cracked Office version, SPecialiST RePack.

JavaScript (0)

HTTP Transactions (1)

URL IP Response Size

	URL	IP	Response	Size
	www.nikopol-mrada.dp.gov.ua/pbinf/proektNMR/8047_24115110536.zip	93.190.42.226	200 OK	117 kB
URL User Request GET HTTP/2 www.nikopol-mrada.dp.gov.ua/pbinf/proektNMR/8047_24115110536.zip IP 93.190.42.226:443 ASN #6849 JSC Ukrtelecom Certificate IssuerLet's Encrypt Subjectnikopol-mrada.dp.gov.ua FingerprintAF:BF:B3:DE:82:9A:B2:15:BB:D8:8B:5B:8F:AE:35:66:FE:F7:0F:DC ValiditySun, 10 Mar 2024 22:01:52 GMT - Sat, 08 Jun 2024 22:01:51 GMT File type Zip archive data, at least v2.0 to extract, compression method=deflate Size 117 kB (116675 bytes) Hash 894699d22adae2155fd08c1b6c31e7d1 a17f6d40843a6f6720a3b36a01e1e5766a945ce3 b7aeb96bdd3f2c172d3f3f0ecc57aa90105c2d18c30dc2de4de5bfadd981ec82 HTTP Headers GET /pbinf/proektNMR/8047_24115110536.zip HTTP/1.1 Host: www.nikopol-mrada.dp.gov.ua User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache `HTTP/2 200 OK server: nginx date: Tue, 07 May 2024 08:10:08 GMT content-type: application/zip content-length: 116675 last-modified: Fri, 15 Mar 2024 09:10:08 GMT etag: "1c7c3-613af5fdbfed8" accept-ranges: bytes strict-transport-security: max-age=15768000 X-Firefox-Spdy: h2`

www.nikopol-mrada.dp.gov.ua/pbinf/proektNMR/8047_24115110536.zip

93.190.42.226

200 OK

117 kB

URL User Request GET HTTP/2
www.nikopol-mrada.dp.gov.ua/pbinf/proektNMR/8047_24115110536.zip
IP
93.190.42.226:443
ASN
#6849 JSC Ukrtelecom

Certificate
IssuerLet's Encrypt
Subjectnikopol-mrada.dp.gov.ua
FingerprintAF:BF:B3:DE:82:9A:B2:15:BB:D8:8B:5B:8F:AE:35:66:FE:F7:0F:DC
ValiditySun, 10 Mar 2024 22:01:52 GMT - Sat, 08 Jun 2024 22:01:51 GMT

File type
Zip archive data, at least v2.0 to extract, compression method=deflate
Size
117 kB (116675 bytes)
Hash
894699d22adae2155fd08c1b6c31e7d1
a17f6d40843a6f6720a3b36a01e1e5766a945ce3
b7aeb96bdd3f2c172d3f3f0ecc57aa90105c2d18c30dc2de4de5bfadd981ec82

HTTP Headers

GET /pbinf/proektNMR/8047_24115110536.zip HTTP/1.1
Host: www.nikopol-mrada.dp.gov.ua
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Tue, 07 May 2024 08:10:08 GMT
content-type: application/zip
content-length: 116675
last-modified: Fri, 15 Mar 2024 09:10:08 GMT
etag: "1c7c3-613af5fdbfed8"
accept-ranges: bytes
strict-transport-security: max-age=15768000
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

Files detected

URL

IP

ASN

File type

Size

Hash

Archive (6)

Detections

JavaScript (0)

HTTP Transactions (1)

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers