Report - jotalea.com.ar/files/OsuManiaLite.zip

Report Overview

Visited public
2024-11-15 02:25:33
Tags
URL
jotalea.com.ar/files/OsuManiaLite.zip
Finishing URL
about:privatebrowsing
IP / ASN
200.58.110.154
#27823 Dattatec.com
Title
about:privatebrowsing

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
jotalea.com.ar	unknown	2023-09-11	2024-10-14	2024-11-15	491 B	21 MB	200.58.110.154

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Mnemonic Secure DNS

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

Files detected

URL
jotalea.com.ar/files/OsuManiaLite.zip
IP
200.58.110.154
ASN
#27823 Dattatec.com

File type
Zip archive data, at least v2.0 to extract, compression method=store
Size
21 MB (20861876 bytes)
Hash
1349b5dd27ddd3e5b0b7540c300ef5f5
401c7557bdaec5aa3262b9be404997a6f3314c94
9bd6bb51288d7a0c4f955defa84a15a826564bd8f2ddbb10fdbdeedcaa917ae7

Archive (9)

Filename

Md5

File type

Classical VIP.mp3

96234eaf40d9f81b7e8bc68ec73988ca

Audio file with ID3 version 2.4.0, contains: MPEG ADTS, layer III, v1, 160 kbps, 48 kHz, Stereo

Beeper Funk.mp3

3b0e8ed40318f64e66ad34b448be4c96

Audio file with ID3 version 2.4.0, contains: MPEG ADTS, layer III, v1, 160 kbps, 48 kHz, Stereo

Shiawase VIP.mp3

7c7254186dd5a926f8b5ebe3d8a7965c

Audio file with ID3 version 2.4.0, contains: MPEG ADTS, layer III, v1, 160 kbps, 48 kHz, Stereo

Shiawase VIP.json

006b9e4c456b9eb2396f58ede52ec7b0

JSON text data

Classical VIP.json

43e523d1820bdc7e04095106ded57ad0

JSON text data

Super Mario World - Overworld.mp3

ad46997d326017d115473e1d700acb5f

Audio file with ID3 version 2.4.0, contains: MPEG ADTS, layer III, v1, 56 kbps, 44.1 kHz, Monaural

Super Mario World - Overworld.json

6fe02631973b05f15cdff309cf8935e0

JSON text data

Beeper Funk.json

4cf79a0ee8d96c56ae6e40ebd5adbd9a

JSON text data

OsuManiaLite_0.0.2.exe

eb63d2b8400c53d6b7acb2295b571639

PE32+ executable (GUI) x86-64 (stripped to external PDB), for MS Windows, 12 sections

Detections

Analyzer	Verdict	Alert
VirusTotal	malicious	VirusTotal - Scan result 25/69

JavaScript (0)

HTTP Transactions (1)

URL IP Response Size

jotalea.com.ar/files/OsuManiaLite.zip

200.58.110.154

200 OK

21 MB

URL User Request GET HTTP/2
jotalea.com.ar/files/OsuManiaLite.zip
IP
200.58.110.154:443
ASN
#27823 Dattatec.com

Certificate
IssuerSectigo Limited
Subjectjotalea.com.ar
Fingerprint11:C2:C0:F7:23:0B:FC:11:33:B1:08:0E:A9:15:08:83:8B:30:63:93
ValidityWed, 25 Sep 2024 00:00:00 GMT - Thu, 25 Sep 2025 23:59:59 GMT

File type
Zip archive data, at least v2.0 to extract, compression method=store
Size
21 MB (20861876 bytes)
Hash
1349b5dd27ddd3e5b0b7540c300ef5f5
401c7557bdaec5aa3262b9be404997a6f3314c94
9bd6bb51288d7a0c4f955defa84a15a826564bd8f2ddbb10fdbdeedcaa917ae7

Detections

Analyzer	Verdict	Alert
VirusTotal	malicious	VirusTotal - Scan result 25/69

HTTP Headers

GET /files/OsuManiaLite.zip HTTP/1.1
Host: jotalea.com.ar
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
last-modified: Fri, 25 Oct 2024 01:31:31 GMT
etag: "13e53b4-62543142b751d"
accept-ranges: bytes
content-length: 20861876
content-type: application/zip
date: Fri, 15 Nov 2024 02:25:06 GMT
server: Apache
X-Firefox-Spdy: h2

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

Mnemonic Secure DNS

Quad9 DNS

ThreatFox

Files detected

URL

IP

ASN

File type

Size

Hash

Archive (9)

Detections

JavaScript (0)

HTTP Transactions (1)

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers