Report Overview
Submitted URL
drive.mhzxapp.com/onedrive/%E9%86%89%E5%85%AB%E4%BB%99.exe
IP
142.171.224.213
ASN
#35916 MULTA-ASN1
Submitted
2024-04-26 11:57:20
Access
public
Website Title
about:privatebrowsing
Final URL
about:privatebrowsing
Tags
urlquery detections
No alerts detected
Detections
urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
2
Domain Summary
Domain / FQDN | Rank | Registered | First Seen | Last Seen | Sent | Received | IP |
---|---|---|---|---|---|---|---|
drive.mhzxapp.com | unknown | unknown | No data | No data | 514 B | 787 kB | 142.171.224.213 |
public.bl.files.1drv.com | 212299 | 2013-08-05 | 2018-03-30 | 2024-03-12 | 740 B | 788 kB | 13.107.42.12 |
Related reports
Network Intrusion Detection Systems
Suricata /w Emerging Threats Pro
Threat Detection Systems
Public InfoSec YARA rules
Scan Date | Severity | Indicator | Alert |
---|---|---|---|
2024-04-26 | medium | public.bl.files.1drv.com/y4mftjxsVTjbJ05q0QlzF0hlY5njJ0phCSwzgcCmkDCjWqnZO-8n6SrCv2PfLRlXrnaVjIx3ZG4_P-qrWxQA3EGXdJBf8zuf0QRcCWqEi7Nt5LZczUPoHnL3oAOGCEBslcJjVCuMTPLhaCtuvP7uT2CGu2f6Sz5udLi91gMiBdfGZjYt0DQv3Q4fgoF8LvAkeBj0YsnYGUkXBce9gFxPABn75WltcTThNkvfmh3-VJDjAZJz0fMWP5rxrJUf6EnKeNE | Detects an SFX archive with automatic script execution |
OpenPhish
No alerts detected
PhishTank
No alerts detected
mnemonic secure dns
No alerts detected
Quad9 DNS
No alerts detected
ThreatFox
No alerts detected
Files detected
URL
public.bl.files.1drv.com/y4mftjxsVTjbJ05q0QlzF0hlY5njJ0phCSwzgcCmkDCjWqnZO-8n6SrCv2PfLRlXrnaVjIx3ZG4_P-qrWxQA3EGXdJBf8zuf0QRcCWqEi7Nt5LZczUPoHnL3oAOGCEBslcJjVCuMTPLhaCtuvP7uT2CGu2f6Sz5udLi91gMiBdfGZjYt0DQv3Q4fgoF8LvAkeBj0YsnYGUkXBce9gFxPABn75WltcTThNkvfmh3-VJDjAZJz0fMWP5rxrJUf6EnKeNE
IP
13.107.42.12
ASN
#8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type
PE32 executable (GUI) Intel 80386, for MS Windows, 6 sections
Size
786 kB (786432 bytes)
Hash
d2db575492358f7ede8aab19761c90a8
ad9f528424ce8e19f3ec388c9d10f81eb71df12b
Detections
Analyzer | Verdict | Alert |
---|---|---|
YARAhub by abuse.ch | malware | Detects an SFX archive with automatic script execution |
JavaScript (0)
HTTP Transactions (2)
URL | IP | Response | Size | |||||||
---|---|---|---|---|---|---|---|---|---|---|
public.bl.files.1drv.com/y4mftjxsVTjbJ05q0QlzF0hlY5njJ0phCSwzgcCmkDCjWqnZO-8n6SrCv2PfLRlXrnaVjIx3ZG4_P-qrWxQA3EGXdJBf8zuf0QRcCWqEi7Nt5LZczUPoHnL3oAOGCEBslcJjVCuMTPLhaCtuvP7uT2CGu2f6Sz5udLi91gMiBdfGZjYt0DQv3Q4fgoF8LvAkeBj0YsnYGUkXBce9gFxPABn75WltcTThNkvfmh3-VJDjAZJz0fMWP5rxrJUf6EnKeNE | 13.107.42.12 | 200 OK | 786 kB | |||||||
Detections
HTTP Headers
| ||||||||||
drive.mhzxapp.com/onedrive/%E9%86%89%E5%85%AB%E4%BB%99.exe | 142.171.224.213 | 302 Found | 786 kB | |||||||
HTTP Headers
| ||||||||||