Overview

URL up.qo12.cn/hbjx.exe
IP42.51.208.64
ASNAS56005 Henan Telcom Union Technology Co., LTD
Location China
Report completed2018-11-29 01:01:18 CET
StatusLoading report..
urlquery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Pool
Access Level


Intrusion Detection Systems

Suricata /w Emerging Threats Pro  No alerts detected


Blacklists

MDL  No alerts detected
OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter
Added / Verified Severity Host Comment
2018-11-29 2 up.qo12.cn/hbjx.exe Malware
DNS-BH  No alerts detected
mnemonic secure dns  No alerts detected


Recent reports on same IP/ASN/Domain

Last 1 reports on IP: 42.51.208.64

Date UQ / IDS / BL URL IP
2018-12-09 00:16:37 +0100
0 - 1 - 1 up.qo12.cn/hbjx.exe 42.51.208.64

Last 10 reports on ASN: AS56005 Henan Telcom Union Technology Co., LTD

Date UQ / IDS / BL URL IP
2018-12-09 00:16:37 +0100
0 - 1 - 1 up.qo12.cn/hbjx.exe 42.51.208.64
2018-12-08 11:07:47 +0100
0 - 1 - 1 81in.cn/dxc/123.exe 42.51.16.109
2018-12-07 19:10:48 +0100
0 - 0 - 1 ccdn.cn/jzsoft/excel/sgzz/sgzz2/yjg2006071816 (...) 42.51.203.88
2018-12-06 16:35:33 +0100
0 - 0 - 0 42.51.34.60 42.51.34.60
2018-12-05 21:02:27 +0100
0 - 0 - 12 www.livemo.cn/archives/tag/geweidong 42.51.10.164
2018-12-05 15:17:15 +0100
0 - 0 - 1 h123.tv/k.exe 42.51.42.170
2018-12-04 10:23:14 +0100
0 - 0 - 0 42.51.196.45 42.51.196.45
2018-12-03 03:50:12 +0100
0 - 0 - 2 livemo.cn/archives/1290/feed 42.51.10.164
2018-11-27 22:57:17 +0100
0 - 0 - 1 4345.cc/wangbao.zip 42.51.206.169
2018-11-27 22:27:01 +0100
0 - 0 - 1 4345.cc/wangbao.zip 42.51.206.169

No other reports on domain: qo12.cn



JavaScript

Executed Scripts (0)


Executed Evals (0)


Executed Writes (0)



HTTP Transactions (1)


Request Response
                                        
                                            GET /hbjx.exe HTTP/1.1 
Host: up.qo12.cn
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         42.51.208.64
HTTP/1.1 200 OK
Content-Type: application/x-msdownload
                                        
Date: Wed, 28 Nov 2018 23:59:44 GMT
Server: Apache/2.4.10 (Win32) OpenSSL/0.9.8zb PHP/5.2.17
Last-Modified: Thu, 15 Mar 2018 07:29:02 GMT
Etag: "828000-5676e72244e5e"
Accept-Ranges: bytes
Content-Length: 8552448
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  PE32 executable for MS Windows (GUI) Intel 80386 32-bit
Size:   8552448
Md5:    d560588a2bb1c0232c8e753a6cf007ed
Sha1:   a50d5e4a94efa17cb1935eeb5d6d1c6208f633f4
Sha256: c9faa5dfbd806bc2ad00eb6f340cbab16439ba4c6753ddcdca8eb37c84bb41b3

Alerts:
  Blacklists:
    - fortinet: Malware