Report Overview
Submitted URL
zerocdn.com/647407649/Volumeid64.exe
IP
176.58.48.48
ASN
#48158 DigitalOne AG
Submitted
2024-05-04 17:17:54
Access
public
Website Title
about:privatebrowsing
Final URL
about:privatebrowsing
Tags
urlquery detections
No alerts detected
Detections
urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
4
Domain Summary
Domain / FQDN | Rank | Registered | First Seen | Last Seen | Sent | Received | IP |
---|---|---|---|---|---|---|---|
zerocdn.com | 363776 | 2013-05-20 | 2017-03-03 | 2021-01-29 | 490 B | 289 B | 176.58.48.48 |
broadway.zerocdn.com | unknown | 2013-05-20 | 2023-02-17 | 2024-04-26 | 499 B | 308 kB | 185.190.188.207 |
Related reports
Network Intrusion Detection Systems
Suricata /w Emerging Threats Pro
Threat Detection Systems
Public InfoSec YARA rules
Scan Date | Severity | Indicator | Alert |
---|---|---|---|
2024-05-04 | medium | broadway.zerocdn.com/647407649/Volumeid64.exe | Detects imphash often found in malware samples (Zero hits with with search for 'imphash:x p:0' on Virustotal) |
2024-05-04 | medium | broadway.zerocdn.com/647407649/Volumeid64.exe | Detects win.mofksys. |
OpenPhish
No alerts detected
PhishTank
No alerts detected
mnemonic secure dns
No alerts detected
Quad9 DNS
No alerts detected
ThreatFox
No alerts detected
Files detected
URL
broadway.zerocdn.com/647407649/Volumeid64.exe
IP
185.190.188.207
ASN
#47328 DigitalOne AG
File type
PE32 executable (GUI) Intel 80386, for MS Windows, 3 sections
Size
308 kB (308002 bytes)
Hash
0a5067a87ec2c205ee913fdc553c5d41
7c1b228dcca8516eec7e330f3bf0217e534a3f1c
Detections
Analyzer | Verdict | Alert |
---|---|---|
Public Nextron YARA rules | malware | Detects imphash often found in malware samples (Zero hits with with search for 'imphash:x p:0' on Virustotal) |
Malpedia's yara-signator rules | malware | Detects win.mofksys. |
JavaScript (0)
HTTP Transactions (2)
URL | IP | Response | Size | ||||||||||
---|---|---|---|---|---|---|---|---|---|---|---|---|---|
zerocdn.com/647407649/Volumeid64.exe | 176.58.48.48 | 302 Found | 0 B | ||||||||||
HTTP Headers
| |||||||||||||
broadway.zerocdn.com/647407649/Volumeid64.exe | 185.190.188.207 | 200 OK | 308 kB | ||||||||||
Detections
HTTP Headers
| |||||||||||||