Report Overview
Domain Summary
Domain / FQDN | Rank | Registered | First Seen | Last Seen | Sent | Received | IP |
---|---|---|---|---|---|---|---|
www.turbo-play.com | unknown | 2019-12-30 | 2019-12-30 | 2024-04-18 | 487 B | 5.5 MB | 70.32.24.194 |
Related reports
Network Intrusion Detection Systems
Suricata /w Emerging Threats Pro
No alerts detected
Threat Detection Systems
Public InfoSec YARA rules
No alerts detected
Files detected
URL
www.turbo-play.com/redist/flax.7z
IP
70.32.24.194
ASN
#55293 A2HOSTING
File type
7-zip archive data, version 0.4
Size
5.5 MB (5509188 bytes)
Hash
41439184cdc816f5651aa53702a2c7b1
66cf27630394806cee76d542ba4110e147c097f3
Archive (2)
Filename | Md5 | File type | ||||||
---|---|---|---|---|---|---|---|---|
FlaX.exe | b0ea46e1c9119b9f7d0a9e6dec786d85
| PE32 executable (GUI) Intel 80386, for MS Windows, 4 sections | ||||||
swfmill.exe | ac6708948bbb9bbc59f749d5c75c6a33 | PE32 executable (console) Intel 80386, for MS Windows, 17 sections |
Detections
Analyzer | Verdict | Alert |
---|---|---|
Public Nextron YARA rules | malware | Detects an XORed URL in an executable |
VirusTotal | suspicious |
JavaScript (0)
No Javascripts found
No Javascripts found
No Javascripts found
HTTP Transactions (1)
URL | IP | Response | Size | |||||||
---|---|---|---|---|---|---|---|---|---|---|
www.turbo-play.com/redist/flax.7z | 70.32.24.194 | 200 OK | 5.5 MB | |||||||
Detections
HTTP Headers
| ||||||||||