Report Overview
Submitted URL
194.44.11.130/cgi-bin/irbis_nbuv/cgiirbis_64.exe?C21COM=2&I21DBN=ARD&P21DBN=ARD&Z21ID=&Image_file_name=DOC/2007/07jyyphp.zip&IMAGE_FILE_DOWNLOAD=1
IP
194.44.11.130ASN
#3255 State Enterprise Scientific and Telecommunication Centre Ukrainian Academic and Research Netw
Submitted
2024-05-06 07:11:05
Access
public
Website Title
about:privatebrowsing
Final URL
about:privatebrowsing
Tags
urlquery detections
No alerts detected
Detections
urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
3
Domain Summary
| Domain / FQDN | Rank | Registered | First Seen | Last Seen | Sent | Received | IP |
|---|---|---|---|---|---|---|---|
| 194.44.11.130 | unknown | unknown | 2013-08-23 | 2024-01-11 | 516 B | 35 kB | 194.44.11.130 |
Related reports
Network Intrusion Detection Systems
Suricata /w Emerging Threats Pro
Threat Detection Systems
Public InfoSec YARA rules
No alerts detected
OpenPhish
No alerts detected
PhishTank
No alerts detected
mnemonic secure dns
No alerts detected
Quad9 DNS
| Scan Date | Severity | Indicator | Alert |
|---|---|---|---|
| 2024-05-06 | medium | 194.44.11.130 | Sinkholed |
ThreatFox
No alerts detected
Files detected
URL
194.44.11.130/cgi-bin/irbis_nbuv/cgiirbis_64.exe?C21COM=2&I21DBN=ARD&P21DBN=ARD&Z21ID=&Image_file_name=DOC/2007/07jyyphp.zip&IMAGE_FILE_DOWNLOAD=1
IP
194.44.11.130ASN
#3255 State Enterprise Scientific and Telecommunication Centre Ukrainian Academic and Research Netw
File type
Zip archive data, at least v2.0 to extract, compression method=deflate
Size
35 kB (35048 bytes)
Hash
6bd4b16371addef4b4b1584e29d8aca7
b58c8aa7ad73cb0a9a0f10c4272cebcf853473c9
Archive (1)
| Filename | Md5 | File type | |||
|---|---|---|---|---|---|
| 07jyyphp.rtf | 35d4e39105450f83efda450fe6617e9a
| Rich Text Format data, version 1, ANSI, code page 1251, default language ID 1033 |
Detections
| Analyzer | Verdict | Alert |
|---|---|---|
| Public Nextron YARA rules | malware | Detects suspicious Microsoft Equation OLE contents as used in CVE-2017-11882 |
JavaScript (0)
HTTP Transactions (1)
| URL | IP | Response | Size | |||||||
|---|---|---|---|---|---|---|---|---|---|---|
194.44.11.130/cgi-bin/irbis_nbuv/cgiirbis_64.exe?C21COM=2&I21DBN=ARD&P21DBN=ARD&Z21ID=&Image_file_name=DOC/2007/07jyyphp.zip&IMAGE_FILE_DOWNLOAD=1 | 194.44.11.130 | 200 OK | 35 kB | |||||||
Detections
HTTP Headers
| ||||||||||