| 158.69.41.120/favicon.ico | 158.69.41.120 | | 31 kB |
URL 158.69.41.120/favicon.ico IP158.69.41.120:0
File typeMS Windows icon resource - 3 icons, 64x64, 32 bits/pixel, 48x48, 32 bits/pixel Hash6eb4a43cb64c97f76562af703893c8fd c50c4273b9d2433c6069454f971ed6653e07c126 1d7c95c5eea00a8083a95810f902682f9e26e7fbb7876b022a403642d776d0c9
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /favicon.ico HTTP/1.1
Host: 158.69.41.120
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://158.69.41.120/api/arquivo.txt
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 18 Apr 2024 19:36:40 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.0.30
Last-Modified: Thu, 16 Jul 2015 15:32:32 GMT
ETag: "78ae-51affc7a4c400"
Accept-Ranges: bytes
Content-Length: 30894
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: image/x-icon
|
| 158.69.41.120/api/arquivo.txt | 158.69.41.120 | | 3.8 MB |
URL 158.69.41.120/api/arquivo.txt IP158.69.41.120:0
File typeASCII text, with very long lines (65536), with no line terminators Size3.8 MB (3841368 bytes) Hash68de7fdd359891404b83bf4b5636805d a4458bc56c5c89f4cb298d5dfb54735e181fb5de 2843c5a7be67d771271ebc9963034ec812ac9959131e67e835151a2c18b8b6df
Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
NIDS | Severity | Alert | suricata | medium | ETPRO HUNTING Base64 Encoded EXE Content-Type Mismatch (text/plain) | suricata | low | ET HUNTING EXE Base64 Encoded potential malware |
GET /api/arquivo.txt HTTP/1.1
Host: 158.69.41.120
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 18 Apr 2024 19:36:39 GMT
Server: Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.0.30
Last-Modified: Tue, 02 Apr 2024 22:50:19 GMT
ETag: "3a9d58-61524ee2ceab5"
Accept-Ranges: bytes
Content-Length: 3841368
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/plain
|