Report Overview
Visitedpublic
2025-04-17 10:56:50
Tags
Submit Tags
URL
assets.52fish.com.cn/xiazai/Soft/D/DellDisplayManager_XiaZaiBa.zip
Finishing URL
about:privatebrowsing
IP / ASN
172.67.203.215
Title
about:privatebrowsing
Detections
urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
4
Host Summary
| Host | Rank | Registered | First Seen | Last Seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
assets.52fish.com.cn 1 alert(s) on this Domain | unknown | 2019-04-25 | 2025-01-19 | 2025-04-14 | 534 B | 1.7 MB | 172.67.203.215 |
Related reports
Network Intrusion Detection Systems
Suricata /w Emerging Threats Pro
No alerts detected
Threat Detection Systems
Public InfoSec YARA rules
No alerts detected
OpenPhish
No alerts detected
PhishTank
No alerts detected
Quad9 DNS
No alerts detected
ThreatFox
No alerts detected
File detected
URL
assets.52fish.com.cn/xiazai/Soft/D/DellDisplayManager_XiaZaiBa.zip
IP / ASN
172.67.203.215
File Overview
File TypeZip archive data, at least v2.0 to extract, compression method=deflate
Size1.7 MB (1722954 bytes)
MD5e8979ea781502ef8162b6a51270e7742
SHA14ac73e7476a10aec0dfa184d6861d09252cb5513
Archive (2)
| Filename | MD5 | File type |
|---|---|---|
| ddmsetup.exe | 209524b524654472ca197ad8d942c459 | PE32 executable (GUI) Intel 80386, for MS Windows, 8 sections |
| ���ذ�˵��.htm | fcfa44148b8304f58d6ac6d480193b58 | HTML document, Unicode text, UTF-8 text, with CRLF line terminators |
Detections
| Analyzer | Verdict | Alert |
|---|---|---|
| RussianPanda public YARA rules | malware | Detects XRed backdoor |
| YARAhub by abuse.ch | malware | Scans presence of the found strings using the in-house brute force method |
| VirusTotal | malicious |
JavaScript (0)
No JavaScripts
HTTP Transactions (1)
| URL | IP | Response | Size |
|---|