Report - apk21-auth.bazhang.com/202409160007/bbc4c8e256f2883478fdf4c603aad556/bigfiles/apk/70/20190929/1603e7a663cc675f577efdee3227a58a1569746349.apk

Report Overview

Visited public
2024-09-14 19:59:47
Tags
URL
apk21-auth.bazhang.com/202409160007/bbc4c8e256f2883478fdf4c603aad556/bigfiles/apk/70/20190929/1603e7a663cc675f577efdee3227a58a1569746349.apk
Finishing URL
about:privatebrowsing
IP / ASN
113.142.207.41
#134768 CHINANET SHAANXI province Cloud Base network
Title
about:privatebrowsing

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
apk21-auth.bazhang.com	unknown	2005-06-22	2023-08-24 14:44:30	2024-04-18 09:49:21	594 B	42 MB	113.219.161.41
r10.o.lencr.org	unknown	2020-06-29	2024-06-06 21:45:11	2024-09-14 18:12:51	1.3 kB	3.6 kB	23.33.119.57
r11.o.lencr.org	unknown	2020-06-29	2024-06-07 07:43:57	2024-09-13 18:12:22	654 B	1.8 kB	23.33.119.57

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

Files detected

URL
apk21-auth.bazhang.com/202409160007/bbc4c8e256f2883478fdf4c603aad556/bigfiles/apk/70/20190929/1603e7a663cc675f577efdee3227a58a1569746349.apk
IP
113.219.161.41
ASN
#63838 Hengyang

File type
Java archive data (JAR)
Size
42 MB (42140242 bytes)
Hash
7aa604689f7536a791383b3dc03951a4
5a85a3d91b8ad3511b818fe801a741e6fa717c64
1e5cc322f477242051e20a102fc264f589ea73ede9b13543a1c27b2782f5b4a8

Detections

Analyzer	Verdict	Alert
VirusTotal	suspicious	VirusTotal - Scan result 2/58

JavaScript (0)

HTTP Transactions (7)

URL IP Response Size

r10.o.lencr.org/

23.33.119.57

504 B

URL
r10.o.lencr.org/
IP
23.33.119.57:0
ASN
#20940 Akamai International B.V.

File type
data
Size
504 B (504 bytes)
Hash
8ddc0c958da73dfad4d42a6ae9a6dff6
6ed3ed6b818e91ac249cbfbb1fb14c96f19117c3
4320d78c549884fe858d0985285c94e70ac95e66ac557e8043514247c23feb0c

HTTP Headers

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "4320D78C549884FE858D0985285C94E70AC95E66AC557E8043514247C23FEB0C"
Last-Modified: Fri, 13 Sep 2024 09:19:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3141
Expires: Sat, 14 Sep 2024 20:51:43 GMT
Date: Sat, 14 Sep 2024 19:59:22 GMT
Connection: keep-alive

r10.o.lencr.org/

23.33.119.57

504 B

URL
r10.o.lencr.org/
IP
23.33.119.57:0
ASN
#20940 Akamai International B.V.

File type
data
Size
504 B (504 bytes)
Hash
6f417a1a5ebcee1534c03d401bc1e686
8044ec315b73dfc62fbba88aa848b26e6b9d0572
797b7242665c53d103116e758891ec7b61c10602e290a9f1bb0f190148860c7b

HTTP Headers

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "797B7242665C53D103116E758891EC7B61C10602E290A9F1BB0F190148860C7B"
Last-Modified: Thu, 12 Sep 2024 12:20:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15605
Expires: Sun, 15 Sep 2024 00:19:27 GMT
Date: Sat, 14 Sep 2024 19:59:22 GMT
Connection: keep-alive

r10.o.lencr.org/

23.33.119.57

504 B

URL
r10.o.lencr.org/
IP
23.33.119.57:0
ASN
#20940 Akamai International B.V.

File type
data
Size
504 B (504 bytes)
Hash
df2d88b80b39ed651ca6b7ee3465b1c4
1bd6e2288cd500728b6ea8a9ebe97c25aeedc550
604a907a35f947c7cf17c8f09efd5fbd8836864aedc55fbc49b66b8cc95bd089

HTTP Headers

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "604A907A35F947C7CF17C8F09EFD5FBD8836864AEDC55FBC49B66B8CC95BD089"
Last-Modified: Thu, 12 Sep 2024 14:37:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11542
Expires: Sat, 14 Sep 2024 23:11:44 GMT
Date: Sat, 14 Sep 2024 19:59:22 GMT
Connection: keep-alive

r10.o.lencr.org/

23.33.119.57

504 B

URL
r10.o.lencr.org/
IP
23.33.119.57:0
ASN
#20940 Akamai International B.V.

File type
data
Size
504 B (504 bytes)
Hash
412d9004c8151860eda05974aee9639c
3e566016927f2bc8db38f5c3ad492183f62b14dd
6d656552984346a0504288ce7a94c63ee549f1d712ed11469f60da8ec3ad7ce9

HTTP Headers

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "6D656552984346A0504288CE7A94C63EE549F1D712ED11469F60DA8EC3AD7CE9"
Last-Modified: Thu, 12 Sep 2024 14:38:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14271
Expires: Sat, 14 Sep 2024 23:57:13 GMT
Date: Sat, 14 Sep 2024 19:59:22 GMT
Connection: keep-alive

r11.o.lencr.org/

23.33.119.57

504 B

URL
r11.o.lencr.org/
IP
23.33.119.57:0
ASN
#20940 Akamai International B.V.

File type
data
Size
504 B (504 bytes)
Hash
6002601a8837228e424ce5aef3bb9855
8e2999033c471078ec1f31cadd163d67b9d7f6db
c26dd37b475e226bf37672bba7f5d90fbc9f578e1c862c3d44cc1f530c8c4d3c

HTTP Headers

POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "C26DD37B475E226BF37672BBA7F5D90FBC9F578E1C862C3D44CC1F530C8C4D3C"
Last-Modified: Thu, 12 Sep 2024 14:38:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16374
Expires: Sun, 15 Sep 2024 00:32:18 GMT
Date: Sat, 14 Sep 2024 19:59:24 GMT
Connection: keep-alive

r11.o.lencr.org/

23.33.119.57

504 B

URL
r11.o.lencr.org/
IP
23.33.119.57:0
ASN
#20940 Akamai International B.V.

File type
data
Size
504 B (504 bytes)
Hash
6002601a8837228e424ce5aef3bb9855
8e2999033c471078ec1f31cadd163d67b9d7f6db
c26dd37b475e226bf37672bba7f5d90fbc9f578e1c862c3d44cc1f530c8c4d3c

HTTP Headers

POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "C26DD37B475E226BF37672BBA7F5D90FBC9F578E1C862C3D44CC1F530C8C4D3C"
Last-Modified: Thu, 12 Sep 2024 14:38:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16374
Expires: Sun, 15 Sep 2024 00:32:18 GMT
Date: Sat, 14 Sep 2024 19:59:24 GMT
Connection: keep-alive

apk21-auth.bazhang.com/202409160007/bbc4c8e256f2883478fdf4c603aad556/bigfiles/apk/70/20190929/1603e7a663cc675f577efdee3227a58a1569746349.apk

113.219.161.41

42 MB

URL
apk21-auth.bazhang.com/202409160007/bbc4c8e256f2883478fdf4c603aad556/bigfiles/apk/70/20190929/1603e7a663cc675f577efdee3227a58a1569746349.apk
IP
113.219.161.41:0
ASN
#63838 Hengyang

File type
Java archive data (JAR)
Size
42 MB (42140242 bytes)
Hash
7aa604689f7536a791383b3dc03951a4
5a85a3d91b8ad3511b818fe801a741e6fa717c64
1e5cc322f477242051e20a102fc264f589ea73ede9b13543a1c27b2782f5b4a8

Detections

Analyzer	Verdict	Alert
VirusTotal	suspicious	VirusTotal - Scan result 2/58

HTTP Headers

GET /202409160007/bbc4c8e256f2883478fdf4c603aad556/bigfiles/apk/70/20190929/1603e7a663cc675f577efdee3227a58a1569746349.apk HTTP/1.1
Host: apk21-auth.bazhang.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: JSP3/2.0.14
Date: Sat, 14 Sep 2024 19:59:24 GMT
Content-Type: application/vnd.android.package-archive
Content-Length: 42140242
Connection: keep-alive
Last-Modified: Sun, 29 Sep 2019 08:39:45 GMT
ETag: "7aa604689f7536a791383b3dc03951a4"
Cache-Control: max-age=31536000
Accept-Ranges: bytes
x-amz-request-id: 191780c2-2409-0112-5358-a0369e25917d
x-amz-s2-requester: GRPS000000ANONYMOUSE
x-amz-meta-s2-size: 42140242
x-amz-meta-sha1: 5a85a3d91b8ad3511b818fe801a741e6fa717c64
x-amz-meta-md5: 7aa604689f7536a791383b3dc03951a4
X-Ser: BC111_dx-lt-yd-hunan-loudi-17-cache-9, BC71_yd-liaoning-benxi-18-cache-1
Ohc-Global-Saved-Time: Sun, 01 Sep 2024 04:53:59 GMT
Ohc-Cache-HIT: chenz2ct59 [1], bdix79 [2]
Ohc-File-Size: 42140242
X-Cache-Status: MISS

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

Files detected

URL

IP

ASN

File type

Size

Hash

Detections

JavaScript (0)

HTTP Transactions (7)

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

Detections

HTTP Headers