Report - ucarecdn.com/ea04da74-2b89-418f-970d-711f43e7ea9f/YourSSA

Report Overview

Visited public
2025-06-06 03:01:00
Tags
URL
ucarecdn.com/ea04da74-2b89-418f-970d-711f43e7ea9f/YourSSA_Statement.zip
Finishing URL
about:privatebrowsing
IP / ASN
151.101.129.55
#54113 FASTLY
Title
about:privatebrowsing

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
ucarecdn.com	76504	2012-08-01	2018-06-24	2025-06-04	539 B	4.7 MB	151.101.65.55

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

Files detected

URL
ucarecdn.com/ea04da74-2b89-418f-970d-711f43e7ea9f/YourSSA_Statement.zip
IP
151.101.65.55
ASN
#54113 FASTLY

File type
Zip archive data, at least v2.0 to extract, compression method=deflate
Size
4.7 MB (4650925 bytes)
Hash
489d4a9e430a6717e2155090311efa09
75c17579959a8ad56e0f190bce2d737d0a626b0e
7ce275853188b14154da5985b19c07de115d821f59b2978250194509efb89be3

Archive (6)

Filename

Md5

File type

YourSSA_Statement0087234.exe

573c3aa20cab92c93663f0e475323557

PE32+ executable (GUI) x86-64, for MS Windows, 6 sections

msvcp290.dll

bbf1e3070de0de8e666d48c2801607d5

PE32+ executable (DLL) (GUI) x86-64, for MS Windows, 7 sections

nasrallah_x86.dll

849a7db28e55f2d0f435154ee0db5015

data

tier0_s64.dll

de738f87b7a558476d73d590ea20a3b9

PE32+ executable (DLL) (GUI) x86-64, for MS Windows, 6 sections

vcruntime210.dll

df480ec09da890834aeeb8cfbd1a653d

data

vstdlib_s64.dll

6dc931690259b808311d7d8ec05bcedc

PE32+ executable (DLL) (GUI) x86-64, for MS Windows, 6 sections

Detections

Analyzer	Verdict	Alert
YARAhub by abuse.ch	malware	files - file ~tmp01925d3f.exe
YARAhub by abuse.ch	malware	files - file ~tmp01925d3f.exe
VirusTotal	malicious	VirusTotal - Scan result 40/67

JavaScript (0)

HTTP Transactions (1)

URL IP Response Size

ucarecdn.com/ea04da74-2b89-418f-970d-711f43e7ea9f/YourSSA_Statement.zip

151.101.65.55

200 OK

4.7 MB

URL User Request GET
ucarecdn.com/ea04da74-2b89-418f-970d-711f43e7ea9f/YourSSA_Statement.zip
IP
151.101.65.55:443
ASN
#54113 FASTLY

Certificate
IssuerCertainly
Subjectucarecdn.com
FingerprintBC:E3:4A:05:56:78:48:95:28:C8:8D:B1:31:2E:06:EC:29:2C:47:D6
ValidityWed, 04 Jun 2025 04:02:41 GMT - Fri, 04 Jul 2025 04:02:40 GMT

File type
Zip archive data, at least v2.0 to extract, compression method=deflate
Size
4.7 MB (4650925 bytes)
Hash
489d4a9e430a6717e2155090311efa09
75c17579959a8ad56e0f190bce2d737d0a626b0e
7ce275853188b14154da5985b19c07de115d821f59b2978250194509efb89be3

Detections

Analyzer	Verdict	Alert
VirusTotal	malicious	VirusTotal - Scan result 40/67

HTTP Headers

GET /ea04da74-2b89-418f-970d-711f43e7ea9f/YourSSA_Statement.zip HTTP/1.1
Host: ucarecdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: application/zip
cache-control: public, max-age=31556926, immutable
content-disposition: attachment; filename=YourSSA_Statement.zip
etag: "489d4a9e430a6717e2155090311efa09"
last-modified: Thu, 13 Mar 2025 20:28:26 GMT
server: Uploadcare
x-amz-storage-class: INTELLIGENT_TIERING
x-robots-tag: noindex, nofollow, nosnippet, noarchive
access-control-allow-origin: *
access-control-allow-methods: HEAD, GET, OPTIONS
access-control-expose-headers: HEAD, GET, OPTIONS
accept-ranges: bytes
age: 81517
date: Fri, 06 Jun 2025 03:00:35 GMT
x-cache: MISS-CLUSTER
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 4650925
X-Firefox-Spdy: h2

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

Quad9 DNS

ThreatFox

Files detected

URL

IP

ASN

File type

Size

Hash

Archive (6)

Detections

JavaScript (0)

HTTP Transactions (1)

URL User Request GET

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers