Report Overview

  1. Submitted URL

    nasafts.com/downloads/NASA.zip

  2. IP

    104.26.9.96

    ASN

    #13335 CLOUDFLARENET

  3. Submitted

    2024-05-08 19:58:53

    Access

    public

  4. Website Title

    Just a moment...

  5. Final URL

    nasafts.com/downloads/NASA.zip?__cf_chl_tk=NDhEM_XQDKFptnTzX7hjAKpYQ7JeAgUnenmdHR7Wu0c-1715198306-0.0.1.1-1514

  6. Tags

  7. urlquery detections

    No alerts detected

Detections

  1. urlquery

    0

  2. Network Intrusion Detection

    0

  3. Threat Detection Systems

    1

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
nasafts.comunknownunknownNo dataNo data
challenges.cloudflare.comunknown2009-02-172021-10-202024-05-08

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected


OpenPhish

No alerts detected


PhishTank

No alerts detected


mnemonic secure dns

No alerts detected


Quad9 DNS

No alerts detected


ThreatFox

No alerts detected


Files detected

  1. URL

    nasafts.com/downloads/NASA.zip

  2. IP

    104.26.9.96

  3. ASN

    #13335 CLOUDFLARENET

  1. File type

    Zip archive data, at least v2.0 to extract, compression method=deflate

    Size

    4.8 MB (4779216 bytes)

  2. Hash

    3b3063ca3d5973313e14546e1018a7a3

    e27906f9976829ab57012a2c8d4ef0c1c4dc3071

  1. Archive (3)

  2. FilenameMd5File type
    NASA.exe
    fa4a4937d49651e02dc6d13761c02757
    PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections
    NASA.exe.config
    ba4eebd0079aa26f11cc201ccab63072
    XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
    BouncyCastle.Crypto.dll
    afb010d6aa754fe0522afc22cd561053
    PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

    Detections

    AnalyzerVerdictAlert
    Public Nextron YARA rulesmalware
    Detects ConfuserEx packed file

JavaScript (61)

HTTP Transactions (11)

URLIPResponseSize
nasafts.com/downloads/NASA.zip
104.26.8.96403 Forbidden167 B
challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1/GLhOioXg0bs57t4qPrORXFsL1%2BWig2mIKbgpVPMu7ZQ%3D
104.17.3.184 61 B
nasafts.com/cdn-cgi/challenge-platform/h/b/orchestrate/chl_page/v1?ray=880c06469febb51d
104.26.9.96200 OK163 kB
nasafts.com/favicon.ico
104.26.9.96404 Not Found11 kB
challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/i/880c064c3bce569b/1715198307693/adx55e2vp3Q44ym
104.17.3.184 61 B
challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/pat/880c064c3bce569b/1715198307698/82fd643cce11f555d62bf655a5f5059cbd52aec3a7e3eea3a5431d6837a215cf/pNQcYkRLcu_KN3y
104.17.3.184 1 B
nasafts.com/downloads/NASA.zip
104.26.9.96403 Forbidden4.8 MB
challenges.cloudflare.com/turnstile/v0/b/ce7818f50e39/api.js?onload=Ialy2&render=explicit
104.17.3.184200 OK43 kB
nasafts.com/cdn-cgi/challenge-platform/h/b/flow/ov1/2127769362:1715196525:TLTZSORtYzzqeGFEa6R9O2WXIjEswg8Z4hY-1ny-7l4/880c06469febb51d/07dd52d544a791d
104.26.9.96200 OK16 kB
nasafts.com/cdn-cgi/challenge-platform/h/b/flow/ov1/2127769362:1715196525:TLTZSORtYzzqeGFEa6R9O2WXIjEswg8Z4hY-1ny-7l4/880c06469febb51d/07dd52d544a791d
104.26.9.96200 OK3.5 kB
challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv0/0/c4qd1/0x4AAAAAAADnPIDROrmt1Wwj/light/normal
104.17.3.184200 OK80 kB