| downloads.mybuks.de/setup_mybuks.exe | 82.165.100.91 | 200 OK | 282 B |
URL User Request GET HTTP/1.1downloads.mybuks.de/setup_mybuks.exe IP82.165.100.91:80
File typeHTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text Hash7636986b2b5e5c6c0b52d9b2bb2a879b 56f0bc8cb7712baa9926b69835d426c2053a2ace 157eb462212401365e105e92580d2fcce33be217dee0e020e8c6d0e40a031a92
NIDS | Severity | Alert | suricata | high | ET POLICY PE EXE or DLL Windows file download HTTP |
GET /setup_mybuks.exe HTTP/1.1
Host: downloads.mybuks.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Sun, 04 Jun 2023 12:20:42 GMT
Server: Apache/2.4.10 (Debian)
Content-Length: 282
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
|
| downloads.mybuks.de/setup_mybuks.exe | 82.165.100.91 | 200 OK | 19 MB |
URL User Request GET HTTP/1.1downloads.mybuks.de/setup_mybuks.exe IP82.165.100.91:80
File typePE32 executable (GUI) Intel 80386, for MS Windows\012- data Size19 MB (18553039 bytes) Hash8f261179b7eedeef40fa06b9966a79a2 192e214322ae0e80d07f4bb013d64f0fd5fad798 7949f6d8fba25396186bb658fa791e11ae4d622b29e1d329849aae42d6946e5c
Analyzer | Verdict | Alert | VirusTotal | 0/68 | |
NIDS | Severity | Alert | suricata | high | ET POLICY PE EXE or DLL Windows file download HTTP |
GET /setup_mybuks.exe HTTP/1.1
Host: downloads.mybuks.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 04 Jun 2023 12:20:42 GMT
Server: Apache/2.4.10 (Debian)
Last-Modified: Sat, 02 Feb 2019 11:27:40 GMT
ETag: "11b18cf-580e78c1c0300"
Accept-Ranges: bytes
Content-Length: 18553039
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: application/x-msdos-program
|