Report Overview

  1. Submitted URL

    pkg.dl.mail.ru/packages/skyforge_alphadistrib97/Bin32/Skyforge.exe

  2. IP

    178.22.88.105

    ASN

    #47764 LLC VK

  3. Submitted

    2024-05-10 01:04:51

    Access

    public

  4. Website Title

    about:privatebrowsing

  5. Final URL

    about:privatebrowsing

  6. Tags

  7. urlquery detections

    No alerts detected

Detections

  1. urlquery

    0

  2. Network Intrusion Detection

    2

  3. Threat Detection Systems

    0

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
pkg.dl.mail.ruunknown1997-09-272014-10-072022-09-02
source.gc.my.gamesunknown2019-02-152022-06-022023-07-02

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

SeveritySource IPDestination IPAlert
high 178.22.88.61Client IP
high 178.22.88.61Client IP

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected


OpenPhish

No alerts detected


PhishTank

No alerts detected


mnemonic secure dns

No alerts detected


Quad9 DNS

No alerts detected


ThreatFox

No alerts detected


Files detected

  1. URL

    source.gc.my.games/from=front-2.pkg.ru.dl.srv/packages/skyforge_alphadistrib97/Bin32/Skyforge.exe

  2. IP

    178.22.88.61

  3. ASN

    #47764 LLC VK

  1. File type

    PE32 executable (GUI) Intel 80386, for MS Windows, 13 sections

    Size

    1.5 MB (1450576 bytes)

  2. Hash

    7cacb5191772e885e1fac12e0e1e7609

    2a2d6a682f145faa8023fde8577417d7d38717d7

JavaScript (0)

HTTP Transactions (2)

URLIPResponseSize
pkg.dl.mail.ru/packages/skyforge_alphadistrib97/Bin32/Skyforge.exe
178.22.88.105301 Moved Permanently169 B
source.gc.my.games/from=front-2.pkg.ru.dl.srv/packages/skyforge_alphadistrib97/Bin32/Skyforge.exe
178.22.88.61200 OK1.5 MB