Report Overview

  1. URL

    getapp.bonefreeze.com/up/dl/1495373619430762/pupdate.exe?e=bfebfbff000306c3++++++++++++s1dk19kvf8bc12961563&a=1495373619430762&bn=bonefreeze&s=terser_tude_ltd_signature

  2. IP

    159.223.171.32

    ASN

    #14061 DIGITALOCEAN-ASN

  3. Submitted

    2023-03-20T15:53:48Z

    Access

    public

  4. Tags

    None

  5. urlquery detections

    No alerts detected

Detections

  1. urlquery

    0

  2. Network Intrusion Detection

    1

  3. Threat Detection Systems

    0

Domain Summary

Domain Rank First Seen Last Seen
firefox.settings.services.mozilla.com (2) 867 2020-06-04T22:08:41Z 2023-03-25T18:14:26Z
content-signature-2.cdn.mozilla.net (1) 1152 2020-11-03T13:26:46Z 2023-03-26T05:11:12Z
contile.services.mozilla.com (1) 1114 2021-05-27T20:32:35Z 2023-03-26T05:11:59Z
getapp.bonefreeze.com (1) unknown 2018-05-14T11:16:35Z 2023-03-25T00:47:36Z
push.services.mozilla.com (1) 2140 2014-10-24T10:27:06Z 2023-03-26T05:10:29Z
img-getpocket.cdn.mozilla.net (7) 1631 2018-06-22T01:36:00Z 2023-03-26T05:09:08Z
r3.o.lencr.org (9) 344 2020-12-02T09:52:13Z 2023-03-25T18:12:03Z

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Severity Source IP Destination IP Alert
high  159.223.171.32 Client IP

Threat Detection Systems

OpenPhish

No alerts detected


PhishTank

No alerts detected


Fortinet's Web Filter

No alerts detected


mnemonic secure dns

No alerts detected


Quad9 DNS

No alerts detected


ThreatFox

No alerts detected


Files detected

  1. URL

    getapp.bonefreeze.com/up/dl/1495373619430762/pupdate.exe?e=bfebfbff000306c3++++++++++++s1dk19kvf8bc12961563&a=1495373619430762&bn=bonefreeze&s=terser_tude_ltd_signature

  2. IP

    159.223.171.32

  3. ASN

    #14061 DIGITALOCEAN-ASN

  1. File type

    PE32 executable (GUI) Intel 80386, for MS Windows\012- data

    Size

    338992

  2. Hash

    5e3b592b8e093f92ae9f6cfc93b22c58

    a0fae7a58f711af72a9a6f62aedc1735c863a76f

    144e4b5a6e99d9e89dae2ac2907c313d253878e13db86c6f5c50dae6e17a015a

    Detections

    Analyzer Verdict Alert
    VirusTotal 52/71

JavaScript (0)

HTTP Transactions (22)

URL IP Response Size
r3.o.lencr.org/
23.36.77.32 200 OK 503
r3.o.lencr.org/
23.36.77.32 200 OK 503
r3.o.lencr.org/
23.36.77.32 200 OK 503
firefox.settings.services.mozilla.com/v1/
35.241.9.150 200 OK 939
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain
34.160.144.191 200 OK 5348
contile.services.mozilla.com/v1/tiles
34.117.237.239 200 OK 12
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
35.241.9.150 200 OK 329
r3.o.lencr.org/
23.36.77.32 200 OK 503
getapp.bonefreeze.com/up/dl/1495373619430762/pupdate.exe?e=bfebfbff000306c3++++++++++++s1dk19kvf8bc12961563&a=1495373619430762&bn=bonefreeze&s=terser_tude_ltd_signature
159.223.171.32 200 338992
push.services.mozilla.com/
35.162.98.11 101 Switching Protocols 0
r3.o.lencr.org/
23.36.77.32 200 OK 503
r3.o.lencr.org/
23.36.77.32 200 OK 503
r3.o.lencr.org/
23.36.77.32 200 OK 503
r3.o.lencr.org/
23.36.77.32 200 OK 503
r3.o.lencr.org/
23.36.77.32 200 OK 503
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7963a1ee-914e-454a-a5e7-9466ab707e33.jpeg
34.120.237.76 200 OK 7695
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fffb155f3-4b60-4d8c-879f-3b7bd1c5c129.jpeg
34.120.237.76 200 OK 5311
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8afa2cdb-a5f3-4c78-a2ab-132c8b752b4b.png
34.120.237.76 200 OK 10338
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff1c8c491-aa6d-4268-a72a-1f4233962425.jpeg
34.120.237.76 200 OK 7249
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3db1704b-1ecd-4198-a98e-0353d4671a5c.jpeg
34.120.237.76 200 OK 8195
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F67bd8451-f062-4a29-9566-2fa60e012de2.jpeg
34.120.237.76 200 OK 12424
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7cd6847f-4682-4476-ab1c-3a96a63feea0.jpeg
34.120.237.76 200 OK 6839