IP 45.32.146.65:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET / HTTP/1.1
Host: accept-file.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Date: Tue, 06 Jun 2023 06:42:53 GMT
Server: Apache/2.4.56 (Win64) OpenSSL/1.1.1t PHP/8.1.17
X-Powered-By: PHP/8.1.17
Location: http://accept-file.com/dashboard/
Content-Length: 0
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
accept-file.com/dashboard/
45.32.146.65 5.2 kB URL accept-file.com/dashboard/
IP 45.32.146.65:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (350)
Hash 234fd48c2d29384f2d0b80b8faad5192
6c000d7bc2dde900ae359312bd283987261be247
6f3c2668fc8aa58d7b97ffa48b61672a7211ecec1861f3b1aeb2aa9c274a8280
Analyzer Verdict Alert quad9 Sinkholed
GET /dashboard/ HTTP/1.1
Host: accept-file.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 06 Jun 2023 06:42:53 GMT
Server: Apache/2.4.56 (Win64) OpenSSL/1.1.1t PHP/8.1.17
Last-Modified: Thu, 06 Apr 2023 09:24:30 GMT
ETag: "1443-5f8a779c90f80"
Accept-Ranges: bytes
Content-Length: 5187
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/html
accept-file.com/226lastbuild.exe
45.32.146.65200 OK 2.5 MB URL User Request GET HTTP/1.1 accept-file.com/226lastbuild.exe
IP 45.32.146.65:80
File type PE32+ executable (GUI) x86-64 Mono/.Net assembly, for MS Windows\012- data
Size 2.5 MB (2524160 bytes)
Hash fab78fd4c6fcacd19665ff392f1803d2
fea582eac4da3c5a10fa5262927fa03327e3cadd
d1af33d1afaf7d454b8f917abe23ee037b818b03ea3c51c948ed2d0f3b9f884b
Analyzer Verdict Alert quad9 Sinkholed
VirusTotal 28/70
NIDS Severity Alert suricata high ET POLICY PE EXE or DLL Windows file download HTTP
GET /226lastbuild.exe HTTP/1.1
Host: accept-file.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 06 Jun 2023 06:42:53 GMT
Server: Apache/2.4.56 (Win64) OpenSSL/1.1.1t PHP/8.1.17
Last-Modified: Sat, 03 Jun 2023 17:52:18 GMT
ETag: "268400-5fd3d549d9880"
Accept-Ranges: bytes
Content-Length: 2524160
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: application/x-msdownload