Report - www.xjrccb.com.cn/corbank/ocx/serverfile/WD_USBKey.exe

Report Overview

Visited public
2025-05-23 11:40:55
Tags
URL
www.xjrccb.com.cn/corbank/ocx/serverfile/WD_USBKey.exe
Finishing URL
www.xjrccb.com.cn/corbank/ocx/serverfile/WD_USBKey.exe
IP / ASN
117.190.226.166
#9808 China Mobile Communications Group Co., Ltd.
Title
新疆农信社

Detections

urlquery

0

Network Intrusion Detection

1

Threat Detection Systems

0

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
www.xjrccb.com.cn	unknown	2011-12-22	2014-12-08	2025-05-20	1.8 kB	3.1 kB	117.190.226.166

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2025-05-23 11:40:27	medium	117.190.226.166	Client IP	ET INFO TLS Handshake Failure

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (4)

	URL	IP	Response	Size
	www.xjrccb.com.cn/corbank/ocx/serverfile/WD_USBKey.exe	117.190.226.166	200 OK	693 B
URL User Request GET www.xjrccb.com.cn/corbank/ocx/serverfile/WD_USBKey.exe IP 117.190.226.166:80 ASN #9808 China Mobile Communications Group Co., Ltd. File type HTML document, Unicode text, UTF-8 text, with CRLF line terminators Size 693 B (693 bytes) Hash 23367ca0170590bfc1f5441fae687b60 08490f0d962072b126d4a80a2c007904e7161832 c8d5876d80c698955ea46be3f6b4c77da148d7dd7ef9952a9b3f7f0a0d5e9388 HTTP Headers `GET /corbank/ocx/serverfile/WD_USBKey.exe HTTP/1.1 Host: www.xjrccb.com.cn User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Transfer-Encoding: chunked Content-Encoding: gzip Set-Cookie: AlteonP=AKrpYhgGHKynEg5vc0tWSQ$$ Server: nginx Date: Fri, 23 May 2025 11:40:28 GMT Content-Type: text/html Last-Modified: Fri, 01 Sep 2023 15:59:36 GMT Vary: Accept-Encoding ETag: "64f20a68-2b5" Accept-Ranges: bytes Connection: Keep-alive Via: 1.1 ID-5301755366160454 uproxy-4`

	www.xjrccb.com.cn/corbank/ocx/serverfile/css/main.css	117.190.226.166	200 OK	693 B
URL GET www.xjrccb.com.cn/corbank/ocx/serverfile/css/main.css IP 117.190.226.166:80 ASN #9808 China Mobile Communications Group Co., Ltd. Requested by http://www.xjrccb.com.cn/corbank/ocx/serverfile/WD_USBKey.exe File type HTML document, Unicode text, UTF-8 text, with CRLF line terminators Size 693 B (693 bytes) Hash 23367ca0170590bfc1f5441fae687b60 08490f0d962072b126d4a80a2c007904e7161832 c8d5876d80c698955ea46be3f6b4c77da148d7dd7ef9952a9b3f7f0a0d5e9388 HTTP Headers `GET /corbank/ocx/serverfile/css/main.css HTTP/1.1 Host: www.xjrccb.com.cn User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Referer: http://www.xjrccb.com.cn/corbank/ocx/serverfile/WD_USBKey.exe Cookie: AlteonP=AKrpYhgGHKynEg5vc0tWSQ$$ Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Transfer-Encoding: chunked Content-Encoding: gzip Server: nginx Date: Fri, 23 May 2025 11:40:28 GMT Content-Type: text/html Last-Modified: Fri, 01 Sep 2023 15:59:36 GMT Vary: Accept-Encoding ETag: "64f20a68-2b5" Accept-Ranges: bytes Connection: Keep-alive Via: 1.1 ID-5301755366160454 uproxy-4`

	www.xjrccb.com.cn/favicon.ico	117.190.226.166	200 OK	693 B
URL GET www.xjrccb.com.cn/favicon.ico IP 117.190.226.166:80 ASN #9808 China Mobile Communications Group Co., Ltd. Requested by http://www.xjrccb.com.cn/corbank/ocx/serverfile/WD_USBKey.exe File type HTML document, Unicode text, UTF-8 text, with CRLF line terminators Size 693 B (693 bytes) Hash 23367ca0170590bfc1f5441fae687b60 08490f0d962072b126d4a80a2c007904e7161832 c8d5876d80c698955ea46be3f6b4c77da148d7dd7ef9952a9b3f7f0a0d5e9388 HTTP Headers `GET /favicon.ico HTTP/1.1 Host: www.xjrccb.com.cn User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Referer: http://www.xjrccb.com.cn/corbank/ocx/serverfile/WD_USBKey.exe Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Transfer-Encoding: chunked Content-Encoding: gzip Set-Cookie: AlteonP=AKrpQhgGHKwSfu4dRR0Kbg$$ Server: nginx Date: Fri, 23 May 2025 11:40:28 GMT Content-Type: text/html Last-Modified: Fri, 01 Sep 2023 15:59:36 GMT Vary: Accept-Encoding ETag: "64f20a68-2b5" Accept-Ranges: bytes Connection: Keep-alive Via: 1.1 ID-5301755366160454 uproxy-4`

	www.xjrccb.com.cn/corbank/ocx/serverfile/WD_USBKey.exe	0.0.0.0		0 B
URL User Request GET www.xjrccb.com.cn/corbank/ocx/serverfile/WD_USBKey.exe IP 0.0.0.0:0 ASN #0 File type Size 0 B (0 bytes) Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP Headers GET /corbank/ocx/serverfile/WD_USBKey.exe HTTP/1.1 Host: www.xjrccb.com.cn User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache