Report Overview
Submitted URL
www.ayniyat.org/Download/AA_v3.4.exe
IP
94.101.86.251ASN
#42926 Radore Veri Merkezi Hizmetleri A.S.
Submitted
2024-04-25 00:26:09
Access
public
Website Title
about:privatebrowsing
Final URL
about:privatebrowsing
Tags
urlquery detections
No alerts detected
Detections
urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
7
Domain Summary
| Domain / FQDN | Rank | Registered | First Seen | Last Seen | Sent | Received | IP |
|---|---|---|---|---|---|---|---|
| www.ayniyat.org | unknown | 2006-03-07 | 2012-08-07 | 2024-03-03 | 406 B | 744 kB | 94.101.86.251 |
Related reports
Network Intrusion Detection Systems
Suricata /w Emerging Threats Pro
Threat Detection Systems
Public InfoSec YARA rules
| Scan Date | Severity | Indicator | Alert |
|---|---|---|---|
| 2024-04-25 | medium | www.ayniyat.org/Download/AA_v3.4.exe | Detects Ammyy remote access tool |
| 2024-04-25 | medium | www.ayniyat.org/Download/AA_v3.4.exe | Detects Ammyy Admin Downloader |
| 2024-04-25 | medium | www.ayniyat.org/Download/AA_v3.4.exe | Remote Admin Tool used by APT group Anunak (ru) - file AA_v3.4.exe and AA_v3.5.exe |
OpenPhish
No alerts detected
PhishTank
No alerts detected
mnemonic secure dns
No alerts detected
Quad9 DNS
No alerts detected
ThreatFox
No alerts detected
Files detected
URL
www.ayniyat.org/Download/AA_v3.4.exe
IP
94.101.86.251ASN
#42926 Radore Veri Merkezi Hizmetleri A.S.
File type
PE32 executable (GUI) Intel 80386, for MS Windows, 4 sections
Size
744 kB (743704 bytes)
Hash
190785b2bb664324334c1b5231b5c4b0
07539abb2623fe24b9a05e240f675fa2d15268cb
Detections
| Analyzer | Verdict | Alert |
|---|---|---|
| Public Nextron YARA rules | malware | Detects Ammyy remote access tool |
| Public Nextron YARA rules | malware | Detects Ammyy Admin Downloader |
| Public Nextron YARA rules | malware | Remote Admin Tool used by APT group Anunak (ru) - file AA_v3.4.exe and AA_v3.5.exe |
| VirusTotal | malicious |
JavaScript (0)
HTTP Transactions (1)
| URL | IP | Response | Size | ||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
www.ayniyat.org/Download/AA_v3.4.exe | 94.101.86.251 | 200 OK | 744 kB | ||||||||||||||||
Detections
HTTP Headers
| |||||||||||||||||||