Report - pdds-cdn.quark.cn/27-4/stfile/2204/9ffadf6eb462ed83393236ba439a01ff/weex-arm64-v8a-20220401162006-7z.zip?auth_key=1714463451-0-0-2f3b45bb4312e0e3dc8c82c12970e82f&SESSID=99acfef0da25a4795931afe128617614

Report Overview

Submitted URL
pdds-cdn.quark.cn/27-4/stfile/2204/9ffadf6eb462ed83393236ba439a01ff/weex-arm64-v8a-20220401162006-7z.zip?auth_key=1714463451-0-0-2f3b45bb4312e0e3dc8c82c12970e82f&SESSID=99acfef0da25a4795931afe128617614
IP
101.226.28.240
ASN
#4812 China Telecom Group
Submitted
2024-04-23 07:51:44
Access
public
Website Title
about:privatebrowsing
Final URL
about:privatebrowsing
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
4

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
pdds-cdn.quark.cn	unknown	2012-06-18	2023-03-07	2024-04-17	655 B	2.7 MB	61.170.81.236

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

Files detected

URL
pdds-cdn.quark.cn/27-4/stfile/2204/9ffadf6eb462ed83393236ba439a01ff/weex-arm64-v8a-20220401162006-7z.zip?auth_key=1714463451-0-0-2f3b45bb4312e0e3dc8c82c12970e82f&SESSID=99acfef0da25a4795931afe128617614
IP
61.170.81.236
ASN
#4812 China Telecom Group

File type
7-zip archive data, version 0.4
Size
2.7 MB (2702686 bytes)
Hash
9ffadf6eb462ed83393236ba439a01ff
d3ae9f94e19468f180aa672d5ad3b66d36b027fb
cd590b9450e286837c7c913c4c80f5e9e115df8a2f651b2fb3b250aed2842be6

Archive (9)

Filename

Md5

File type

libJavaScriptCore.so

21a5ddb6ec4d6aee84e38a2a27d844d6

ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV)

libWTF.so

f2d54f165d1e199bfbd6299c27498e21

ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV)

libWeexEagle.so

1a890b288e3f4e00fbf6aa6f8014c926

ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV)

lib_info.json

bdb0591a4de6f4d2748439b831344257

JSON text data

libweexcore.so

051ad098d4c45a9c269a2c5ba4325b47

ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV)

libweexjsb.so

19d4fba0d7b32b7abd4a588a7bc76d4d

ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV)

libweexjss.so

ae0f42eb56b1c53bc57cb58d71edad1c

ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV)

libweexjssr.so

ea9b148223766f5e96e2f85da4de917c

ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV)

libweexjst.so

19d4fba0d7b32b7abd4a588a7bc76d4d

ELF 64-bit LSB shared object, ARM aarch64, version 1 (SYSV)

Detections

Analyzer	Verdict	Alert
YARAhub by abuse.ch	malware	meth_get_eip
YARAhub by abuse.ch	malware	meth_get_eip
YARAhub by abuse.ch	malware	meth_get_eip
YARAhub by abuse.ch	malware	meth_get_eip

JavaScript (0)

HTTP Transactions (1)

URL IP Response Size

pdds-cdn.quark.cn/27-4/stfile/2204/9ffadf6eb462ed83393236ba439a01ff/weex-arm64-v8a-20220401162006-7z.zip?auth_key=1714463451-0-0-2f3b45bb4312e0e3dc8c82c12970e82f&SESSID=99acfef0da25a4795931afe128617614

61.170.81.236

200 OK

2.7 MB

URL User Request GET HTTP/1.1
pdds-cdn.quark.cn/27-4/stfile/2204/9ffadf6eb462ed83393236ba439a01ff/weex-arm64-v8a-20220401162006-7z.zip?auth_key=1714463451-0-0-2f3b45bb4312e0e3dc8c82c12970e82f&SESSID=99acfef0da25a4795931afe128617614
IP
61.170.81.236:443
ASN
#4812 China Telecom Group

Certificate
IssuerGlobalSign nv-sa
Subjectpdds-cdn.quark.cn
Fingerprint35:31:5A:7D:83:7E:0C:93:64:56:AF:B6:98:39:31:20:46:D0:B4:A0
ValidityMon, 25 Mar 2024 07:56:08 GMT - Sat, 26 Apr 2025 07:56:07 GMT

File type
7-zip archive data, version 0.4
Size
2.7 MB (2702686 bytes)
Hash
9ffadf6eb462ed83393236ba439a01ff
d3ae9f94e19468f180aa672d5ad3b66d36b027fb
cd590b9450e286837c7c913c4c80f5e9e115df8a2f651b2fb3b250aed2842be6

HTTP Headers

GET /27-4/stfile/2204/9ffadf6eb462ed83393236ba439a01ff/weex-arm64-v8a-20220401162006-7z.zip?auth_key=1714463451-0-0-2f3b45bb4312e0e3dc8c82c12970e82f&SESSID=99acfef0da25a4795931afe128617614 HTTP/1.1
Host: pdds-cdn.quark.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: Tengine
Content-Type: application/zip
Content-Length: 2702686
Connection: keep-alive
Date: Tue, 23 Apr 2024 07:50:50 GMT
x-oss-request-id: 6627685941DBDB3839C34457
x-oss-cdn-auth: success
Accept-Ranges: bytes
x-oss-object-type: Multipart
x-oss-storage-class: Standard
x-oss-server-time: 42
Ali-Swift-Global-Savetime: 1713858650
Via: cache66.l2cn1827[0,0,304-0,H], cache31.l2cn1827[1,0], vcache7.cn6013[0,0,200-0,H], vcache21.cn6013[1,0]
ETag: "A7637D77E773E8E3BD7754AF46CF1A3A-3"
Last-Modified: Fri, 01 Apr 2022 08:41:50 GMT
x-oss-hash-crc64ecma: 8209755835289255572
Age: 27
X-Cache: HIT TCP_MEM_HIT dirn:-2:-2 mlen:0
X-Swift-SaveTime: Tue, 23 Apr 2024 07:50:50 GMT
X-Swift-CacheTime: 3600
Timing-Allow-Origin: *
EagleId: 3daa512917138586779318951e