Report - c1.kemono.su/data/c0/fe/c0fe52181a3c808fe8eda00bf66891a2be3a7f3dedb31bbd8a79f8b3531892a7.zip?f=FapWall-legs.apk

Report Overview

Submitted URL
c1.kemono.su/data/c0/fe/c0fe52181a3c808fe8eda00bf66891a2be3a7f3dedb31bbd8a79f8b3531892a7.zip?f=FapWall-legs.apk
IP
91.149.227.1
ASN
#200508 Sorok76 Ltd
Submitted
2024-04-20 08:51:06
Access
public
Website Title
Final URL
about:privatebrowsing
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
1

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
c1.kemono.su	unknown	2022-08-25	2023-10-22	2024-04-18	565 B	18 MB	91.149.227.1

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

Files detected

URL
c1.kemono.su/data/c0/fe/c0fe52181a3c808fe8eda00bf66891a2be3a7f3dedb31bbd8a79f8b3531892a7.zip?f=FapWall-legs.apk
IP
91.149.227.1
ASN
#200508 Sorok76 Ltd

File type
Zip archive data, at least v2.0 to extract, compression method=deflate
Size
18 MB (18472147 bytes)
Hash
97f5cc0761f77a9a5411b948acb88208
060fe5dbc44f41c66983423ba7135bf2f445674c
c0fe52181a3c808fe8eda00bf66891a2be3a7f3dedb31bbd8a79f8b3531892a7

Archive (40)

Filename

Md5

File type

application.xml

82c1f1857a4c889656d96ab72b96c8f4

ASCII text, with CRLF, LF line terminators

icon.png

b627720bde39c611e308368d97d33af5

PNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced

icon.png

b627720bde39c611e308368d97d33af5

PNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced

icon.png

b627720bde39c611e308368d97d33af5

PNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced

ouya_icon.png

b627720bde39c611e308368d97d33af5

PNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced

icon.png

b627720bde39c611e308368d97d33af5

PNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced

icon.png

b627720bde39c611e308368d97d33af5

PNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced

icon.png

b627720bde39c611e308368d97d33af5

PNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced

classes.dex

fd764fc523b373857c067a3e845db656

Dalvik dex file version 035

AndroidManifest.xml

8833ae5c912ba96210767dc553bc6dca

Android binary XML

home.png

2894460c9dccccaff3bdfd6d97552054

PNG image data, 57 x 57, 8-bit colormap, non-interlaced

icon.png

2bba2b26acbc4afc50d1f63b3b0b1ae8

PNG image data, 48 x 48, 8-bit colormap, non-interlaced

icon.png

2bba2b26acbc4afc50d1f63b3b0b1ae8

PNG image data, 48 x 48, 8-bit colormap, non-interlaced

icon.png

2bba2b26acbc4afc50d1f63b3b0b1ae8

PNG image data, 48 x 48, 8-bit colormap, non-interlaced

icon.png

82d68b5e45359d4dd96192469d088697

PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced

ouya_icon.png

4f63931e90f6a16e9417f9498aad40a9

PNG image data, 48 x 48, 8-bit colormap, non-interlaced

icon.png

845fca772fd28de57d09e39133c6b0d3

PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced

air_72px_mobile_eula.png

5b83a4078d463c5465cc3619aba9b813

PNG image data, 72 x 72, 8-bit colormap, non-interlaced

icon.png

2bba2b26acbc4afc50d1f63b3b0b1ae8

PNG image data, 48 x 48, 8-bit colormap, non-interlaced

mp_warning_32x32_n.png

3e14bc781fd0e5f6b9232da09c193195

PNG image data, 32 x 32, 8-bit gray+alpha, non-interlaced

activity_static_page.xml

85623cc3777262a656a8355eaa186979

Android binary XML

expandable_chooser_row.xml

9ac25921cee3d05e86257d0f9c0417f5

Android binary XML

expandable_multiple_chooser_row.xml

2ff4533c743eb1ecb9a3e9a39778bfe1

Android binary XML

main.xml

bbf9c3d9f9e91fbabcd8a19d0cdf4167

Android binary XML

multiple_file_selection_panel.xml

93f0ba93d26b8d797c7f3401a57ebbed

Android binary XML

ssl_certificate_warning.xml

87c1706f9e56cfbe6f1710d904dcdc6f

Android binary XML

adobelogo.gif

6a14ccac5a34ad75fb9d5e26aed6b9c3

GIF image data, version 89a, 76 x 126

icon.jpg

40e9e93491476053632b478311415e1b

JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 182x158, components 3

startga.html

839e6b2b46d9b225e5b31d0cf158161e

HTML document, ASCII text, with CRLF line terminators

provider_paths.xml

33a987ae13fd92d8321f6b8ac2aed371

Android binary XML

resources.arsc

8cb8accd23d0ba5c07348cb28f52bef5

Android package resource table (ARSC), 716 string(s), 202 style(s), utf8

rgba8888

d41d8cd98f00b204e9800998ecf8427e

debuginfo

d41d8cd98f00b204e9800998ecf8427e

libCore.so

e7fabc80b152f37394347f48413bd3bd

ELF 32-bit LSB shared object, ARM, EABI5 version 1 (SYSV)

libc++_shared.so

d9553fe08082abe7a495e56b8ab9f6e2

ELF 32-bit LSB shared object, ARM, EABI5 version 1 (SYSV)

libysshared.so

c2431ac1130cdc55de87f26c1d903554

ELF 32-bit LSB shared object, ARM, EABI5 version 1 (SYSV)

FapWall.swf

edea7c06f37cacc3876efac3ab38d209

Macromedia Flash data (compressed), version 42

MANIFEST.MF

76ae9a33e1319b6769413a856298830b

JAR Manifest, ASCII text, with CRLF line terminators

CERT.SF

673cd1f97b9105f4cc36175b465a9ac1

JAR Signature File, ASCII text, with CRLF line terminators

CERT.RSA

c42f42fa88fc5294196c49ea6801f024

DER Encoded PKCS#7 Signed Data

Detections

Analyzer	Verdict	Alert
YARAhub by abuse.ch	malware	meth_get_eip

JavaScript (0)

HTTP Transactions (1)

URL IP Response Size

c1.kemono.su/data/c0/fe/c0fe52181a3c808fe8eda00bf66891a2be3a7f3dedb31bbd8a79f8b3531892a7.zip?f=FapWall-legs.apk

91.149.227.1

18 MB

URL
c1.kemono.su/data/c0/fe/c0fe52181a3c808fe8eda00bf66891a2be3a7f3dedb31bbd8a79f8b3531892a7.zip?f=FapWall-legs.apk
IP
91.149.227.1:0
ASN
#200508 Sorok76 Ltd

File type
Zip archive data, at least v2.0 to extract, compression method=deflate
Size
18 MB (18472147 bytes)
Hash
97f5cc0761f77a9a5411b948acb88208
060fe5dbc44f41c66983423ba7135bf2f445674c
c0fe52181a3c808fe8eda00bf66891a2be3a7f3dedb31bbd8a79f8b3531892a7

HTTP Headers

GET /data/c0/fe/c0fe52181a3c808fe8eda00bf66891a2be3a7f3dedb31bbd8a79f8b3531892a7.zip?f=FapWall-legs.apk HTTP/1.1
Host: c1.kemono.su
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Sat, 20 Apr 2024 08:50:27 GMT
content-type: application/zip
content-length: 18472147
last-modified: Wed, 28 Jul 2021 16:33:19 GMT
etag: "610186cf-119dcd3"
content-disposition: inline; filename=FapWall-legs.apk
access-control-allow-origin: https://kemono.su
access-control-allow-methods: GET, OPTIONS
access-control-allow-headers: *
cache-control: public, max-age=2592000, s-maxage=2592000
accept-ranges: bytes
X-Firefox-Spdy: h2