Report Overview
Submitted URL
www.gymsystem.net/download/Icon.zip
IP
31.11.35.118ASN
#31034 Aruba S.p.A.
Submitted
2024-05-04 11:23:26
Access
public
Website Title
about:privatebrowsing
Final URL
about:privatebrowsing
Tags
urlquery detections
No alerts detected
Detections
urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
4
Domain Summary
| Domain / FQDN | Rank | Registered | First Seen | Last Seen | Sent | Received | IP |
|---|---|---|---|---|---|---|---|
| www.gymsystem.net | unknown | unknown | No data | No data | 489 B | 1.7 kB | 31.11.35.118 |
Related reports
Network Intrusion Detection Systems
Suricata /w Emerging Threats Pro
Threat Detection Systems
Public InfoSec YARA rules
| Scan Date | Severity | Indicator | Alert |
|---|---|---|---|
| 2024-05-04 | medium | www.gymsystem.net/download/Icon.zip | Detects suspicious tiny ZIP files with phishing attachment characteristics |
| 2024-05-04 | medium | www.gymsystem.net/download/Icon.zip | Detects suspicius tiny ZIP files with malicious lnk files |
OpenPhish
No alerts detected
PhishTank
No alerts detected
mnemonic secure dns
No alerts detected
Quad9 DNS
No alerts detected
ThreatFox
No alerts detected
Files detected
URL
www.gymsystem.net/download/Icon.zip
IP
31.11.35.118ASN
#31034 Aruba S.p.A.
File type
Zip archive data, at least v2.0 to extract, compression method=deflate
Size
1.4 kB (1386 bytes)
Hash
448b5a228ca79c72bc811eb7c9b5bc49
24372d6410515be0f5ee9aca24496d3d01a45946
Archive (2)
| Filename | Md5 | File type |
|---|---|---|
| Gym.lnk | 47c94bb6a9354bb48635381d1f0f7ed4 | MS Windows shortcut, Item id list present, Points to a file or directory, Has Working directory, Icon number=0, Archive, ctime=Wed Jul 16 09:04:59 2014, mtime=Wed Jul 16 09:04:59 2014, atime=Wed Jul 16 09:02:46 2014, length=14911488, window=hide |
| ControlPanel.lnk | 6ca26a189d85c499cf41b5c3a7357b69 | MS Windows shortcut, Item id list present, Points to a file or directory, Has Working directory, Icon number=0, Archive, ctime=Wed Jul 16 09:04:59 2014, mtime=Wed Jul 16 09:04:59 2014, atime=Wed Jul 16 09:17:55 2014, length=4401152, window=hide |
Detections
| Analyzer | Verdict | Alert |
|---|---|---|
| Public Nextron YARA rules | malware | Detects suspicious tiny ZIP files with phishing attachment characteristics |
| YARAhub by abuse.ch | malware | Detects suspicius tiny ZIP files with malicious lnk files |
JavaScript (0)
HTTP Transactions (1)
| URL | IP | Response | Size | ||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
www.gymsystem.net/download/Icon.zip | 31.11.35.118 | 200 OK | 1.4 kB | ||||||||||
Detections
HTTP Headers
| |||||||||||||