| bitbucket.org/dsadsdavasdvasdc/olesyalkve/downloads/MAS.exe |  185.166.143.50 | 302 Found | 0 B |
URL User Request GET HTTP/2bitbucket.org/dsadsdavasdvasdc/olesyalkve/downloads/MAS.exe IP185.166.143.50:443
CertificateIssuerDigiCert Inc Subjectbitbucket.org Fingerprint2A:B7:65:D0:F2:15:5D:A9:32:63:6F:1B:9D:6A:14:0B:B8:63:A1:17 ValidityTue, 30 Jul 2024 00:00:00 GMT - Sat, 30 Aug 2025 23:59:59 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /dsadsdavasdvasdc/olesyalkve/downloads/MAS.exe HTTP/1.1
Host: bitbucket.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Thu, 31 Oct 2024 16:20:32 GMT
content-type: text/html; charset=utf-8
content-length: 0
server: AtlassianEdge
location: https://bbuseruploads.s3.amazonaws.com/49c8e35e-6861-470d-ba3f-757af788a3eb/downloads/5a89ec05-c407-4fc8-af80-dda91b312ca0/MAS.exe?response-content-disposition=attachment%3B%20filename%3D%22MAS.exe%22&AWSAccessKeyId=ASIA6KOSE3BNHAJTC6IU&Signature=FNZRgJMKQfD%2BS37H19RJ7fdxXVE%3D&x-amz-security-token=IQoJb3JpZ2luX2VjEBkaCXVzLWVhc3QtMSJIMEYCIQCIjV9sDnF4HC3gUMSO9JPyK2lFOE1GDJ%2FZImkqqv5G1QIhAMTEbBo7CMmFO8BLpLWwBNQtRbY8XuDQj6bOiF%2BfxRgxKrACCJH%2F%2F%2F%2F%2F%2F%2F%2F%2F%2FwEQABoMOTg0NTI1MTAxMTQ2Igwj1kQldVuqQxeSefoqhALhQsXnG0ohe60V6DSEUeIVsJhs6EbiQqHFzVbdsxfKyweF1cp5IOHIKWzK3BGR5SSN4lgJd42STAm2RW%2FzkK7LUR1%2BWyq8iSnUr3mgeOxBAMrRbPahfUyZkUr9d1FrUk3ODgLqbPmPhH30iUNXnq5iLJmfeuZDQtiQEQwHvNUhtawhvmacu7Npn%2B18nhrJQqNJjjA5uObTJidbvQLV3hJMJyRdoUHJrthD74%2Brao%2FWZgNSUkt3XUmr%2FXfjRawCZXBLQVOpwlafzsy%2F3jI%2Frf4b206bfnRircgb5dlCac4kH%2FPPZLBylfTvSLfwgxY1m3xtpObiHXTrkD5IUhBNJT5RuqDlszDX2465BjqcAdnUDZMu6OzJyE%2FksgeeakcAUzYsDKRhteNS7HGoKf1Rndn35fef6uT9Y7yZOA%2BxufQi8xTK8T81r880s91khZZm02aYObW3wRV2S5wTuIxkL9OSwkXOwMO45Hi6MQimD68aZYAG56kFZ8Ao3ADmw%2BuIIxNhSadHvIDOC92H7vEdCNO6aO4%2FFmbCV7XRSSGquUkwdOOzFEb%2BscLGqA%3D%3D&Expires=1730393311
expires: Thu, 31 Oct 2024 16:20:32 GMT
cache-control: max-age=0, no-cache, no-store, must-revalidate, private
x-used-mesh: False
vary: Accept-Language, Origin
content-language: en
x-view-name: bitbucket.apps.downloads.views.download_file
x-dc-location: Micros-3
x-served-by: 00fedccb991e
x-version: 6cbe3b68176f
x-static-version: 6cbe3b68176f
x-request-count: 228
x-render-time: 0.10054898262023926
x-b3-traceid: c128f376ddbb48fcad4d39a4a002e8e5
x-b3-spanid: dd787e4dde6e2fa0
x-frame-options: SAMEORIGIN
content-security-policy: style-src 'self' 'unsafe-inline' https://aui-cdn.atlassian.com/ https://cdn.cookielaw.org/ https://bbc-frontbucket-static.stg-east.frontend.public.atl-paas.net https://bbc-object-storage--frontbucket.us-east-1.prod.public.atl-paas.net/ https://bbc-object-storage--frontbucket.us-east-1.staging.public.atl-paas.net/; object-src 'none'; connect-src bitbucket.org *.bitbucket.org bb-inf.net *.bb-inf.net id.atlassian.com api.atlassian.com api.stg.atlassian.com wss://bitbucketci-ws-service.services.atlassian.com/ wss://bitbucketci-ws-service.stg.services.atlassian.com/ wss://bitbucketci-ws-service.dev.services.atlassian.com/ analytics.atlassian.com atlassian-cookies--categories.us-east-1.prod.public.atl-paas.net as.atlassian.com api-private.stg.atlassian.com api-private.atlassian.com xp.atlassian.com atl-global.atlassian.com cofs.staging.public.atl-paas.net cofs.prod.public.atl-paas.net fd-assets.prod.atl-paas.net flight-deck-assets-bifrost.prod-east.frontend.public.atl-paas.net intake.opbeat.com api.media.atlassian.com api.segment.io xid.statuspage.io xid.atlassian.com xid.sourcetreeapp.com bam.nr-data.net bam-cell.nr-data.net www.google-analytics.com sentry.io *.ingest.sentry.io events.launchdarkly.com app.launchdarkly.com statsigapi.net fd-config.us-east-1.prod.public.atl-paas.net fd-config-bifrost.prod-east.frontend.public.atl-paas.net micros--prod-west--bitbucketci-file-service--files.s3.us-west-1.amazonaws.com micros--prod-east--bitbucketci-file-service--files.s3.amazonaws.com micros--stg-west--bitbucketci-file-service--files.s3.us-west-1.amazonaws.com micros--stg-east--bitbucketci-file-service--files.s3.amazonaws.com micros--ddev-west--bitbucketci-file-service--files.s3.ap-southeast-2.amazonaws.com bqlf8qjztdtr.statuspage.io https://bbc-object-storage--frontbucket.us-east-1.prod.public.atl-paas.net/ https://bbc-object-storage--frontbucket.us-east-1.staging.public.atl-paas.net/; base-uri 'self'; default-src 'self' 'unsafe-inline' 'unsafe-eval' data: blob: *; script-src 'unsafe-eval' 'strict-dynamic' 'unsafe-inline' 'self' http: https: https://remote-app-switcher.stg-east.frontend.public.atl-paas.net https://remote-app-switcher.prod-east.frontend.public.atl-paas.net https://bbc-frontbucket-static.stg-east.frontend.public.atl-paas.net https://bbc-object-storage--frontbucket.us-east-1.prod.public.atl-paas.net/ https://bbc-object-storage--frontbucket.us-east-1.staging.public.atl-paas.net/; frame-ancestors 'self' start.atlassian.com start.stg.atlassian.com atlaskit.atlassian.com bitbucket.org; report-uri https://web-security-reports.services.atlassian.com/csp-report/bb-website
x-usage-quota-remaining: 931944.233
x-usage-request-cost: 949.47
x-usage-user-time: 0.027767
x-usage-system-time: 0.000717
x-usage-input-ops: 0
x-usage-output-ops: 0
age: 0
x-cache: MISS
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
atl-traceid: c128f376ddbb48fcad4d39a4a002e8e5
atl-request-id: c128f376-ddbb-48fc-ad4d-39a4a002e8e5
report-to: {"endpoints": [{"url": "https://dz8aopenkvv6s.cloudfront.net"}], "group": "endpoint-1", "include_subdomains": true, "max_age": 600}
nel: {"failure_fraction": 0.001, "include_subdomains": true, "max_age": 600, "report_to": "endpoint-1"}
strict-transport-security: max-age=63072000; includeSubDomains; preload
server-timing: atl-edge;dur=211,atl-edge-internal;dur=2,atl-edge-upstream;dur=209,atl-edge-pop;desc="aws-eu-central-1"
X-Firefox-Spdy: h2
|
| bbuseruploads.s3.amazonaws.com/49c8e35e-6861-470d-ba3f-757af788a3eb/downloads/5a89ec05-c407-4fc8-af80-dda91b312ca0/MAS.exe?response-content-disposition=attachment%3B%20filename%3D%22MAS.exe%22&AWSAccessKeyId=ASIA6KOSE3BNHAJTC6IU&Signature=FNZRgJMKQfD%2BS37H19RJ7fdxXVE%3D&x-amz-security-token=IQoJb3JpZ2luX2VjEBkaCXVzLWVhc3QtMSJIMEYCIQCIjV9sDnF4HC3gUMSO9JPyK2lFOE1GDJ%2FZImkqqv5G1QIhAMTEbBo7CMmFO8BLpLWwBNQtRbY8XuDQj6bOiF%2BfxRgxKrACCJH%2F%2F%2F%2F%2F%2F%2F%2F%2F%2FwEQABoMOTg0NTI1MTAxMTQ2Igwj1kQldVuqQxeSefoqhALhQsXnG0ohe60V6DSEUeIVsJhs6EbiQqHFzVbdsxfKyweF1cp5IOHIKWzK3BGR5SSN4lgJd42STAm2RW%2FzkK7LUR1%2BWyq8iSnUr3mgeOxBAMrRbPahfUyZkUr9d1FrUk3ODgLqbPmPhH30iUNXnq5iLJmfeuZDQtiQEQwHvNUhtawhvmacu7Npn%2B18nhrJQqNJjjA5uObTJidbvQLV3hJMJyRdoUHJrthD74%2Brao%2FWZgNSUkt3XUmr%2FXfjRawCZXBLQVOpwlafzsy%2F3jI%2Frf4b206bfnRircgb5dlCac4kH%2FPPZLBylfTvSLfwgxY1m3xtpObiHXTrkD5IUhBNJT5RuqDlszDX2465BjqcAdnUDZMu6OzJyE%2FksgeeakcAUzYsDKRhteNS7HGoKf1Rndn35fef6uT9Y7yZOA%2BxufQi8xTK8T81r880s91khZZm02aYObW3wRV2S5wTuIxkL9OSwkXOwMO45Hi6MQimD68aZYAG56kFZ8Ao3ADmw%2BuIIxNhSadHvIDOC92H7vEdCNO6aO4%2FFmbCV7XRSSGquUkwdOOzFEb%2BscLGqA%3D%3D&Expires=1730393311 |  3.5.1.135 | 200 OK | 534 kB |
URL User Request GET HTTP/1.1bbuseruploads.s3.amazonaws.com/49c8e35e-6861-470d-ba3f-757af788a3eb/downloads/5a89ec05-c407-4fc8-af80-dda91b312ca0/MAS.exe?response-content-disposition=attachment%3B%20filename%3D%22MAS.exe%22&AWSAccessKeyId=ASIA6KOSE3BNHAJTC6IU&Signature=FNZRgJMKQfD%2BS37H19RJ7fdxXVE%3D&x-amz-security-token=IQoJb3JpZ2luX2VjEBkaCXVzLWVhc3QtMSJIMEYCIQCIjV9sDnF4HC3gUMSO9JPyK2lFOE1GDJ%2FZImkqqv5G1QIhAMTEbBo7CMmFO8BLpLWwBNQtRbY8XuDQj6bOiF%2BfxRgxKrACCJH%2F%2F%2F%2F%2F%2F%2F%2F%2F%2FwEQABoMOTg0NTI1MTAxMTQ2Igwj1kQldVuqQxeSefoqhALhQsXnG0ohe60V6DSEUeIVsJhs6EbiQqHFzVbdsxfKyweF1cp5IOHIKWzK3BGR5SSN4lgJd42STAm2RW%2FzkK7LUR1%2BWyq8iSnUr3mgeOxBAMrRbPahfUyZkUr9d1FrUk3ODgLqbPmPhH30iUNXnq5iLJmfeuZDQtiQEQwHvNUhtawhvmacu7Npn%2B18nhrJQqNJjjA5uObTJidbvQLV3hJMJyRdoUHJrthD74%2Brao%2FWZgNSUkt3XUmr%2FXfjRawCZXBLQVOpwlafzsy%2F3jI%2Frf4b206bfnRircgb5dlCac4kH%2FPPZLBylfTvSLfwgxY1m3xtpObiHXTrkD5IUhBNJT5RuqDlszDX2465BjqcAdnUDZMu6OzJyE%2FksgeeakcAUzYsDKRhteNS7HGoKf1Rndn35fef6uT9Y7yZOA%2BxufQi8xTK8T81r880s91khZZm02aYObW3wRV2S5wTuIxkL9OSwkXOwMO45Hi6MQimD68aZYAG56kFZ8Ao3ADmw%2BuIIxNhSadHvIDOC92H7vEdCNO6aO4%2FFmbCV7XRSSGquUkwdOOzFEb%2BscLGqA%3D%3D&Expires=1730393311 IP3.5.1.135:443
CertificateIssuerAmazon Subjects3.amazonaws.com FingerprintB6:65:9D:8F:FA:E0:4A:16:9B:4B:55:8D:20:40:C8:93:43:AA:D1:85 ValidityWed, 18 Sep 2024 00:00:00 GMT - Tue, 16 Sep 2025 23:59:59 GMT
File typePE32+ executable (GUI) x86-64 Mono/.Net assembly, for MS Windows, 2 sections Size534 kB (534528 bytes) Hashaeca0d3ada04c7170d63220c5c3cf3ce 273e3ae41c9df9533b3ee45d663389be3d197435 bdae372469d707ed990404299c261ddb30fac2449699b26b8eda0b53e8176a28
| Analyzer | Verdict | Alert |
|---|
| YARAhub by abuse.ch | malware | Detect pe file that no import table | | VirusTotal | malicious | |
GET /49c8e35e-6861-470d-ba3f-757af788a3eb/downloads/5a89ec05-c407-4fc8-af80-dda91b312ca0/MAS.exe?response-content-disposition=attachment%3B%20filename%3D%22MAS.exe%22&AWSAccessKeyId=ASIA6KOSE3BNHAJTC6IU&Signature=FNZRgJMKQfD%2BS37H19RJ7fdxXVE%3D&x-amz-security-token=IQoJb3JpZ2luX2VjEBkaCXVzLWVhc3QtMSJIMEYCIQCIjV9sDnF4HC3gUMSO9JPyK2lFOE1GDJ%2FZImkqqv5G1QIhAMTEbBo7CMmFO8BLpLWwBNQtRbY8XuDQj6bOiF%2BfxRgxKrACCJH%2F%2F%2F%2F%2F%2F%2F%2F%2F%2FwEQABoMOTg0NTI1MTAxMTQ2Igwj1kQldVuqQxeSefoqhALhQsXnG0ohe60V6DSEUeIVsJhs6EbiQqHFzVbdsxfKyweF1cp5IOHIKWzK3BGR5SSN4lgJd42STAm2RW%2FzkK7LUR1%2BWyq8iSnUr3mgeOxBAMrRbPahfUyZkUr9d1FrUk3ODgLqbPmPhH30iUNXnq5iLJmfeuZDQtiQEQwHvNUhtawhvmacu7Npn%2B18nhrJQqNJjjA5uObTJidbvQLV3hJMJyRdoUHJrthD74%2Brao%2FWZgNSUkt3XUmr%2FXfjRawCZXBLQVOpwlafzsy%2F3jI%2Frf4b206bfnRircgb5dlCac4kH%2FPPZLBylfTvSLfwgxY1m3xtpObiHXTrkD5IUhBNJT5RuqDlszDX2465BjqcAdnUDZMu6OzJyE%2FksgeeakcAUzYsDKRhteNS7HGoKf1Rndn35fef6uT9Y7yZOA%2BxufQi8xTK8T81r880s91khZZm02aYObW3wRV2S5wTuIxkL9OSwkXOwMO45Hi6MQimD68aZYAG56kFZ8Ao3ADmw%2BuIIxNhSadHvIDOC92H7vEdCNO6aO4%2FFmbCV7XRSSGquUkwdOOzFEb%2BscLGqA%3D%3D&Expires=1730393311 HTTP/1.1
Host: bbuseruploads.s3.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
x-amz-id-2: ABv6UJ7i432Wo0Mz/fatvtk5mGo0f2PVCswoGqayEM4y1zclwfPbppWMCzCC6Sn4ClMifflugVAC6nrR+iA5zA==
x-amz-request-id: ZXM3V8HPFWHY2ZF4
Date: Thu, 31 Oct 2024 16:20:34 GMT
Last-Modified: Wed, 18 Sep 2024 18:02:22 GMT
ETag: "aeca0d3ada04c7170d63220c5c3cf3ce"
x-amz-server-side-encryption: AES256
x-amz-version-id: at3fYwQpckXFHbauPs6vFCz2Cj57nIq6
Content-Disposition: attachment; filename="MAS.exe"
Accept-Ranges: bytes
Content-Type: application/x-msdownload
Content-Length: 534528
Server: AmazonS3
|