Report Overview

  1. Submitted URL

    nerve.untergrund.net/releases/zorke_release/zorke_nfo_file_viewer_v1.00/zke-nfoview.exe

  2. IP

    185.88.60.242

    ASN

    #49603 Nerdherrschaft GmbH

  3. Submitted

    2023-05-13 21:52:54

    Access

    public

  4. Website Title

  5. Final URL

  6. Tags

  7. urlquery detections

    No alerts detected

Detections

  1. urlquery

    0

  2. Network Intrusion Detection

    0

  3. Threat Detection Systems

    3

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
ocsp.usertrust.com8991997-12-052012-05-212023-05-12
nerve.untergrund.netunknown1999-05-272018-12-032023-05-03

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

No alerts detected


PhishTank

No alerts detected


Fortinet's Web Filter
SeverityIndicatorAlert
mediumnerve.untergrund.net/releases/zorke_release/zorke_nfo_file_viewer_v1.00/zke-nfoview.exe

mnemonic secure dns

No alerts detected


Quad9 DNS

No alerts detected


ThreatFox

No alerts detected


Files detected

  1. URL

    nerve.untergrund.net/releases/zorke_release/zorke_nfo_file_viewer_v1.00/zke-nfoview.exe

  2. IP

    185.88.60.242

  3. ASN

    #49603 Nerdherrschaft GmbH

  1. File type

    MS-DOS executable PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows, MZ for MS-DOS\012- data

    Size

    7.7 kB (7680 bytes)

  2. Hash

    7e48ffa0ec001fe5dcf2dcd4cd7f4cb3

    c3d24324a59664016715557a743c53b9e9a39fb1

    Detections

    AnalyzerVerdictAlert
    VirusTotal43/70

JavaScript (0)

HTTP Transactions (2)

URLIPResponseSize
ocsp.usertrust.com/
104.18.32.68 472 B
nerve.untergrund.net/releases/zorke_release/zorke_nfo_file_viewer_v1.00/zke-nfoview.exe
185.88.60.242200 OK7.7 kB