Report Overview
Visitedpublic
2024-05-28 03:40:08
Tags
Submit Tags
URL
download.kflmgzs.com/upfile/%E9%80%9A%E7%94%A8%E8%AF%BB%E5%8D%A1%E5%99%A8%E7%A8%8B%E5%BA%8F/sfzallreadcard.exe
Finishing URL
about:privatebrowsing
IP / ASN
139.159.140.66
#55990 Huawei Cloud Service data center
Title
about:privatebrowsing

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
0

Host Summary

HostRankRegisteredFirst SeenLast Seen
download.kflmgzs.com
unknownunknownNo dataNo data

Related reports

Threat Detection Systems

Public InfoSec YARA rules
SeverityIndicatorAlert
mediumdownload.kflmgzs.com/upfile/%E9%80%9A%E7%94%A8%E8%AF%BB%E5%8D%A1%E5%99%A8%E7%A8%8B%E5%BA%8F/sfzallreadcard.exefiles - file ~tmp01925d3f.exe

OpenPhish

No alerts detected


PhishTank

No alerts detected


mnemonic secure dns

No alerts detected


Quad9 DNS

No alerts detected


ThreatFox

No alerts detected


File detected

URL
download.kflmgzs.com/upfile/%E9%80%9A%E7%94%A8%E8%AF%BB%E5%8D%A1%E5%99%A8%E7%A8%8B%E5%BA%8F/sfzallreadcard.exe
IP / ASN
139.159.140.66
#55990 Huawei Cloud Service data center
File Overview
File TypePE32 executable (GUI) Intel 80386, for MS Windows, 5 sections
Size521 kB (520560 bytes)
MD578cba7e7726530993ba088ffd1ad3c9b
SHA11b00787c47affb6f6aecc8dacc86b22c309b8cb0

Detections

AnalyzerVerdictAlert
YARAhub by abuse.chmalware
files - file ~tmp01925d3f.exe
VirusTotalmalicious

JavaScript (0)

HTTP Transactions (1)

URLIPResponseSize