Report - lainnet.superglobalmegacorp.com/repo/vgbpc98.zip

Report Overview

Submitted URL
lainnet.superglobalmegacorp.com/repo/vgbpc98.zip
IP
188.114.97.1
ASN
#13335 CLOUDFLARENET
Submitted
2024-04-26 01:09:02
Access
public
Website Title
about:privatebrowsing
Final URL
about:privatebrowsing
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
2

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
lainnet.superglobalmegacorp.com	unknown	2006-05-24	2023-12-02	2023-12-02	502 B	141 kB	188.114.96.1

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

Files detected

URL
lainnet.superglobalmegacorp.com/repo/vgbpc98.zip
IP
188.114.96.1
ASN
#13335 CLOUDFLARENET

File type
Zip archive data, at least v2.0 to extract, compression method=deflate
Size
140 kB (140263 bytes)
Hash
c66f6b0a039a1c53fbbe0854389f3e30
89f05f27a4dcb7d6f4dbae90199f4aeddd3fc75b
3362957ab95ec62fe692eed153cbcaf79e26dec1dc0333b219c436ce576e33da

Archive (14)

Filename

Md5

File type

VGB98.DOC

1cec501251f3b4162dced2c3f57da367

Non-ISO extended-ASCII text, with CRLF, NEL line terminators

VGB.DOC

04f63cd14e1b03557d93d7831df3c1fa

ASCII text

VGB98.EXE

d0b2cc2cb964b9cb320953d6a6a44c82

MS-DOS executable, MZ for MS-DOS, COFF

EDEBUG32

a8dc5248b1c9a9a92dd56fa94ae727ca

Intel 80386 COFF executable, no relocation info, no line number info, stripped, 3 sections, optional header size 28

GO32.EXE

ad393630fcbce01b30d3574f93d929fd

MS-DOS executable, MZ for MS-DOS

ED32-DPM.COM

fe6777614106bf9d45828e778ee78311

data

MAKEDPMI.BAT

844ec81b2bbc5b10ad375ad0a93abad9

Non-ISO extended-ASCII text, with CRLF line terminators

README.112

52740c7a6ba15b7a399b336afd24ae97

data

README.TAN

d79e1948f16d3e0baf85b58707dfe707

Non-ISO extended-ASCII text, with CRLF, NEL line terminators

HOTKEY

78e55ef67ec7c698472de80d1c008c63

Intel 80386 COFF executable, no relocation info, no line number info, stripped, 3 sections, optional header size 28

HOTKEYS.H

1b0978f4981dd92bcd3014ba00a6871c

ASCII text, with CRLF line terminators

HOTKEY.C

32fbb971ad04cdcb8393939f9279245d

C source, Non-ISO extended-ASCII text, with CRLF line terminators

COPYING.DJ

ead084c557c7d429bb510d631cec97db

ASCII text, with CRLF line terminators

COPYING.JP

c5d909ebdf6b7961a2e20168eb62b55d

Non-ISO extended-ASCII text, with CRLF, NEL line terminators

Detections

Analyzer	Verdict	Alert
YARAhub by abuse.ch	malware	meth_get_eip
YARAhub by abuse.ch	malware	meth_get_eip

JavaScript (0)

HTTP Transactions (1)

URL IP Response Size

	URL	IP	Response	Size
	lainnet.superglobalmegacorp.com/repo/vgbpc98.zip	188.114.96.1	200 OK	140 kB
URL User Request GET HTTP/2 lainnet.superglobalmegacorp.com/repo/vgbpc98.zip IP 188.114.96.1:443 ASN #13335 CLOUDFLARENET Certificate IssuerGoogle Trust Services LLC Subjectsuperglobalmegacorp.com FingerprintAC:86:83:3F:A8:C1:A1:F0:77:04:AE:D9:2A:8B:FC:AE:95:D6:31:D3 ValidityFri, 15 Mar 2024 06:30:40 GMT - Thu, 13 Jun 2024 06:30:39 GMT File type Zip archive data, at least v2.0 to extract, compression method=deflate Size 140 kB (140263 bytes) Hash c66f6b0a039a1c53fbbe0854389f3e30 89f05f27a4dcb7d6f4dbae90199f4aeddd3fc75b 3362957ab95ec62fe692eed153cbcaf79e26dec1dc0333b219c436ce576e33da HTTP Headers `GET /repo/vgbpc98.zip HTTP/1.1 Host: lainnet.superglobalmegacorp.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/2 200 OK date: Fri, 26 Apr 2024 01:08:33 GMT content-type: application/zip content-length: 140263 last-modified: Wed, 28 Dec 2022 18:12:08 GMT etag: "223e7-5f0e74e75ae00" cache-control: max-age=14400 cf-cache-status: HIT accept-ranges: bytes report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2Fg%2BuKuO6aplAcWdLBZklpRClmYcWP%2Fd4ofhIv5qg5UmVQC8zQ3UTFFnGXlh2YcGSTidGDWqgj4DyfG%2FPk3ZCEO5UJ5w5FEhT2cTylIKdJy%2FYEArheHYQ4UgGk1mkDLPTqg%2FWx2hL%2Br3a5nPdneFWXUoi"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} vary: Accept-Encoding server: cloudflare cf-ray: 87a2aeadeee7b51b-OSL alt-svc: h3=":443"; ma=86400 X-Firefox-Spdy: h2

lainnet.superglobalmegacorp.com/repo/vgbpc98.zip

188.114.96.1

200 OK

140 kB

URL User Request GET HTTP/2
lainnet.superglobalmegacorp.com/repo/vgbpc98.zip
IP
188.114.96.1:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services LLC
Subjectsuperglobalmegacorp.com
FingerprintAC:86:83:3F:A8:C1:A1:F0:77:04:AE:D9:2A:8B:FC:AE:95:D6:31:D3
ValidityFri, 15 Mar 2024 06:30:40 GMT - Thu, 13 Jun 2024 06:30:39 GMT

File type
Zip archive data, at least v2.0 to extract, compression method=deflate
Size
140 kB (140263 bytes)
Hash
c66f6b0a039a1c53fbbe0854389f3e30
89f05f27a4dcb7d6f4dbae90199f4aeddd3fc75b
3362957ab95ec62fe692eed153cbcaf79e26dec1dc0333b219c436ce576e33da

HTTP Headers

GET /repo/vgbpc98.zip HTTP/1.1
Host: lainnet.superglobalmegacorp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Fri, 26 Apr 2024 01:08:33 GMT
content-type: application/zip
content-length: 140263
last-modified: Wed, 28 Dec 2022 18:12:08 GMT
etag: "223e7-5f0e74e75ae00"
cache-control: max-age=14400
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2Fg%2BuKuO6aplAcWdLBZklpRClmYcWP%2Fd4ofhIv5qg5UmVQC8zQ3UTFFnGXlh2YcGSTidGDWqgj4DyfG%2FPk3ZCEO5UJ5w5FEhT2cTylIKdJy%2FYEArheHYQ4UgGk1mkDLPTqg%2FWx2hL%2Br3a5nPdneFWXUoi"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 87a2aeadeee7b51b-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

Files detected

URL

IP

ASN

File type

Size

Hash

Archive (14)

Detections

JavaScript (0)

HTTP Transactions (1)

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers