Report - wiki.vrpirates.club/downloads/rookie/rookie_2.33

Report Overview

Visited public
2025-02-24 14:18:25
Tags
URL
wiki.vrpirates.club/downloads/rookie/rookie_2.33_portable.zip
Finishing URL
about:privatebrowsing
IP / ASN
185.247.224.87
#200651 FlokiNET ehf
Title
about:privatebrowsing

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
wiki.vrpirates.club	unknown	2020-07-22	2021-10-26	2025-02-22	527 B	1.2 MB	185.247.224.87

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

Files detected

URL
wiki.vrpirates.club/downloads/rookie/rookie_2.33_portable.zip
IP
185.247.224.87
ASN
#200651 FlokiNET ehf

File type
Zip archive data, at least v2.0 to extract, compression method=deflate
Size
1.2 MB (1216857 bytes)
Hash
c153fc7ad08eff3bc5b297db02a890bd
f0c80a5a3a730970d3c576bb39eb6fb8140c8a95
1e75581c56c751562a457c7f8f9ec5c88eace4c43fd337dad6ec3cbd6a800594

Archive (4)

Filename

Md5

File type

Rookie Offline.cmd

83b85f3a19c77666117db1dfbbfd782b

ASCII text, with CRLF line terminators

AddDefenderExceptions.ps1

598164f06f8abd143a91d20c0562eb93

ASCII text, with CRLF line terminators

AndroidSideloader.exe

fa7d8b0b24e8a61a974b3d409af34c25

PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

CleanupInstall.cmd

9ae44cebbde4f44c27801bbf93494c1d

DOS batch file, ASCII text, with CRLF line terminators

Detections

Analyzer	Verdict	Alert
YARAhub by abuse.ch	malware	Detect files disabling or modifying Windows Defender, Windows Firewall, or Microsoft Smartscreen
VirusTotal	malicious	VirusTotal - Scan result 14/71

JavaScript (0)

HTTP Transactions (1)

URL IP Response Size

wiki.vrpirates.club/downloads/rookie/rookie_2.33_portable.zip

185.247.224.87

200 OK

1.2 MB

URL User Request GET HTTP/2
wiki.vrpirates.club/downloads/rookie/rookie_2.33_portable.zip
IP
185.247.224.87:443
ASN
#200651 FlokiNET ehf

Certificate
IssuerZeroSSL
Subjectwiki.vrpirates.club
Fingerprint0B:73:99:E0:B0:4C:12:68:6D:7B:5A:9F:ED:53:73:C3:99:C1:72:2C
ValidityTue, 31 Dec 2024 00:00:00 GMT - Mon, 31 Mar 2025 23:59:59 GMT

File type
Zip archive data, at least v2.0 to extract, compression method=deflate
Size
1.2 MB (1216857 bytes)
Hash
c153fc7ad08eff3bc5b297db02a890bd
f0c80a5a3a730970d3c576bb39eb6fb8140c8a95
1e75581c56c751562a457c7f8f9ec5c88eace4c43fd337dad6ec3cbd6a800594

Detections

Analyzer	Verdict	Alert
VirusTotal	malicious	VirusTotal - Scan result 14/71

HTTP Headers

GET /downloads/rookie/rookie_2.33_portable.zip HTTP/1.1
Host: wiki.vrpirates.club
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-ua-compatible: IE=edge
content-language: en
content-disposition: attachment; filename=rookie_2.33_portable.zip
content-type: application/zip
accept-ranges: bytes
cache-control: public, max-age=0
last-modified: Sat, 22 Feb 2025 14:34:47 GMT
etag: W/"129159-1952e150f77"
content-length: 1216857
date: Mon, 24 Feb 2025 14:17:54 GMT
X-Firefox-Spdy: h2

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

Quad9 DNS

ThreatFox

Files detected

URL

IP

ASN

File type

Size

Hash

Archive (4)

Detections

JavaScript (0)

HTTP Transactions (1)

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers