| w3llstore.mywire.org/Clean/clean.txt |  51.195.76.65 | 200 OK | 1.9 kB |
URL User Request GET HTTP/1.1w3llstore.mywire.org/Clean/clean.txt IP51.195.76.65:443
CertificateIssuer Subjectlocalhost FingerprintB0:23:8C:54:7A:90:5B:FA:11:9C:4E:8B:AC:CA:EA:CF:36:49:1F:F6 ValidityTue, 10 Nov 2009 23:48:47 GMT - Fri, 08 Nov 2019 23:48:47 GMT
File typeASCII text, with CRLF line terminators Hash9bfb68c063cac4e4262e1782d72375b5 73874e6948e5bc59ebf29a07b3543a48efa5ceb1 613c2295451e82810e71d5f53c326ca61bde821c07f38f8f855cf2b8988c3225
| Analyzer | Verdict | Alert |
|---|
| Public Nextron YARA rules | malware | Detects obfuscated PowerShell hacktools | | Public Nextron YARA rules | malware | Detects PowerShell invocation with suspicious parameters |
GET /Clean/clean.txt HTTP/1.1
Host: w3llstore.mywire.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 23 Apr 2024 11:18:47 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
Last-Modified: Sun, 25 Feb 2024 19:29:09 GMT
ETag: "76e-61239cea497dd"
Accept-Ranges: bytes
Content-Length: 1902
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/plain
|
| w3llstore.mywire.org/favicon.ico | 51.195.76.65 | 404 Not Found | 307 B |
URL GET HTTP/1.1w3llstore.mywire.org/favicon.ico IP51.195.76.65:443
Requested byhttps://w3llstore.mywire.org/Clean/clean.txt CertificateIssuer Subjectlocalhost FingerprintB0:23:8C:54:7A:90:5B:FA:11:9C:4E:8B:AC:CA:EA:CF:36:49:1F:F6 ValidityTue, 10 Nov 2009 23:48:47 GMT - Fri, 08 Nov 2019 23:48:47 GMT
File typeHTML document, ASCII text Hash770e1e170cc080e88eff9e19221f412c d5b1b03197cff70393a25b8e05b9d6de1849af4d ad77aec9a12e20670e73e658b56b5005aabb536063d96cc6f010853999758ae8
GET /favicon.ico HTTP/1.1
Host: w3llstore.mywire.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://w3llstore.mywire.org/Clean/clean.txt
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Date: Tue, 23 Apr 2024 11:18:47 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
Content-Length: 307
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
|