Report - eblugh-ir-my.sbs/ir.zip

Report Overview

Submitted URL
eblugh-ir-my.sbs/ir.zip
IP
170.64.190.229
ASN
#14061 DIGITALOCEAN-ASN
Submitted
2024-05-10 01:20:03
Access
public
Website Title
about:privatebrowsing
Final URL
about:privatebrowsing
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
8

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
eblugh-ir-my.sbs	unknown	unknown	No data	No data	477 B	4.8 MB	170.64.190.229

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

Files detected

URL
eblugh-ir-my.sbs/ir.zip
IP
170.64.190.229
ASN
#14061 DIGITALOCEAN-ASN

File type
Zip archive data, at least v2.0 to extract, compression method=deflate
Size
4.8 MB (4770499 bytes)
Hash
5e804a454a0d22b2236ff4baa6cb18e6
2209f7446106093ddf2ea8385b569acfcbc08ef7
19a636dea732525b45b02c0323f2be04a1dbeafc5da0e1493bf7a64b98c95b7e

Archive (109)

Filename

Md5

File type

bootstrap-theme.min.css

2e6739f191d6668b68626677809701e5

ASCII text, with very long lines (65367), with CRLF line terminators

cf.css

667fbc35fdd4fd01035271307ed494b6

ASCII text

font-awesome.min.css

7c95994e698f728255d5a7198eb18e0c

ASCII text, with very long lines (27691), with CRLF line terminators

iranyekanwebbold-27d7251060621a2cbdba20f6ca2ed60a2c49e49d.eot

cf0ddc0aa7c3df003efb222f166aad31

PostScript Type 1 font program data (IRANYekanWebFaNum-Bold 1.30 December 27, 2016)

iranyekanwebbold-6712153304a16c8da0a8e672007ef8d5a61c71cf.ttf

9c0ca51637faf26a90bd8009e980b4e2

TrueType Font data, 15 tables, 1st "FFTM", 30 names, Macintosh

iranyekanwebbold-e587713a2dc5102ec7444ab2d10859e6974e3a82.woff

1cbadc4928a7d322935d962238d8b7c4

Web Open Font Format, TrueType, length 32412, version 1.30

iranyekanwebregular-003317c4704f8a6aa3b0ca9a9cc61d5fb4403223.woff

289f392e40894843f2ae54c33e4e2e68

Web Open Font Format, TrueType, length 32316, version 1.30

iranyekanwebregular-081bff36e4d92f865193f27a03575de5b34ef68b.eot

22ce9e3ade26dc572296fd4bff340a8f

PostScript Type 1 font program data (IRANYekanWebFaNum 1.30 December 27, 2016)

iranyekanwebregular-59fde2dfefe97d8ccce5d9843e95c24078825ede.ttf

381455301d82b1c316d13db076fd21ad

TrueType Font data, 15 tables, 1st "FFTM", 30 names, Macintosh

jquery.min.js

f03e5a3bf534f4a738bc350631fd05bd

JavaScript source, ASCII text, with very long lines (32038)

JudFont-3d329f2f7535fefc690a67a5770e759843d588dc.ttf

f1de5b081ac9bd5213a6c36e593eac50

JudFont-7674c74c4d7d2ad0dc602174ca0c3cc9648f7584.eot

fd7945bf370741e22a40962556e8166e

Embedded OpenType (EOT), IRAN-sans family

JudFont-ff0736fe528c1ed5d66450589488779ee0915ac5.woff

cda149838f11352030296c1919b0bfa3

Web Open Font Format, TrueType, length 61668, version 3.0

style.css

7b5f32527a8e3f107e50a3c1ded006a5

ASCII text, with very long lines (572)

styles.css

21cea70fc91798e718ddc58dec54978d

assembler source, Unicode text, UTF-8 text, with CRLF line terminators

sweetalert.min.js

f3b8ce97ff6ce324da6232da353adf40

JavaScript source, ASCII text, with very long lines (40808), with no line terminators

app.css

db299d8f7fbf2b6a4c319edbb02fdec2

Unicode text, UTF-8 text, with very long lines (787)

ekiticons.css

562d049496f665b87bf03f7d6529cc22

ASCII text, with very long lines (65536), with no line terminators

style.css

a6313502bc1407731da809ca40635ead

ASCII text, with CRLF line terminators

style1.min.css

c7309c2da814bfb505fb9b7870ce4742

Unicode text, UTF-8 text, with very long lines (29677), with CRLF line terminators

Shabnam-FD.ttf

7a43025a9e698087ba086fb63704b554

Shabnam-FD.woff2

610195651407f14a6fa9964c6d2bcb05

Web Open Font Format (Version 2), TrueType, length 34816, version 1.0

Vazir-FD-WOL.woff

dcfcf40faa00612dc1b5f8e05b2b9153

Web Open Font Format, TrueType, length 26188, version 0.0

index.php

a471af09a8cd84363685bcf9e7efd6f1

HTML document, Unicode text, UTF-8 text, with very long lines (378), with CRLF line terminators

c14.jpg

e3839d44530099095da23daab1e5ce73

JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 105x40, components 3

c28.jpg

83883e7ebf93499768c6b4cdc1d2a666

JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 105x40, components 3

c22.jpg

87ec23a0d82f2107446a9f970288e252

JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 105x40, components 3

c10.jpg

a80a70bdee8311c9b5f94ef20d5f3c62

JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 105x40, components 3

c25.jpg

e196b816704befcb114cb2c618c71079

JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 105x40, components 3

c16.jpg

65011c2393110ff4c8b9cde396742330

JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 105x40, components 3

c26.jpg

497c6c4062c7c37b2ed20dbf87f3e7dc

JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 105x40, components 3

c21.jpg

bd10d3332cdcd1de5010adaead2a4f01

JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 105x40, components 3

ipg_sms.svg

3b73fb7ac62e1f4110a5ccf708fe6933

SVG Scalable Vector Graphics image

ipg-capcha-refresh.svg

1dcc76e65bc27653b691b67b923a75a4

SVG Scalable Vector Graphics image

ipg-favicon.ico

59cbbdb40f25fe92bc064f8c6617257f

MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel

ipg-sucsess-ico.svg

656f71db0d5bda00a050711bc96cdd58

SVG Scalable Vector Graphics image

c27.jpg

98920c04ecb3479c1efde02ab2893371

JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 105x40, components 3

c18.jpg

dc8b3b08e5b274f2fde85ca652f0ac92

JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 105x40, components 3

ipg-card_list.svg

99f0263891a6f34ba48019ddbe6509f8

SVG Scalable Vector Graphics image

mellat_arc_footer.svg

88c463cfd41ec2f833ab67c83d9dd843

SVG Scalable Vector Graphics image

c17.jpg

ea647a8589ddded4f050686c78044825

JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 105x40, components 3

c6.jpg

cd8c31ea1357736c3c174bac9a6dd0d1

JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 105x40, components 3

c29.jpg

5ddaaf122c17a61f8dd4513027b86167

JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 105x40, components 3

behpardakht_logo.svg

0a71a2248e9706d352b0059391601840

SVG Scalable Vector Graphics image

shaparak_logo.svg

db1e1080c6cb2a026a2707df69e1a5d4

SVG Scalable Vector Graphics image

c24.jpg

67b2b4a04c509ec5f2104641ec658982

JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 105x40, components 3

c5.jpg

59d7bd2c380457c054fcbac65dfecd11

JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 105x40, components 3

c13.jpg

3a19c7ae9e610dcc1e166c18d04081ed

JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 105x40, components 3

ipg-defaltlogo.png

766e42063df44f8567efe9cfde76a5bc

PNG image data, 128 x 109, 8-bit/color RGBA, non-interlaced

c9.jpg

cbb8b199301d75751059a17643d96fa2

JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 105x40, components 3

mellat_arc.svg

a3865771fd7ca90824a4237a28fee7ce

SVG Scalable Vector Graphics image

c12.jpg

014800111373a7e69f8e04d1c6391826

JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 105x40, components 3

c8.jpg

05f55f66d8ae893e5b3ad9b70027c18e

JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 105x40, components 3

c11.jpg

0b78d3f16559a17ed8d08481dca9cac3

JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 105x40, components 3

c19.jpg

dc8b3b08e5b274f2fde85ca652f0ac92

JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 105x40, components 3

c30.jpg

bce5ea9768a837809f5de27cdab0b46b

JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 105x40, components 3

c2.jpg

9fb32d16313e95ce2a9b43fddeaeb471

JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 105x40, components 3

ipg-decline.svg

f03271b21383e7b5e46a330edeb2c4c8

SVG Scalable Vector Graphics image

c3.jpg

0f1ed232f9879431f6ef9bc772115da2

JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 105x40, components 3

ipg-failed-ico.svg

a14511f1234742b0d97370a4acfe8ce2

SVG Scalable Vector Graphics image

c23.jpg

52cde048dd9d5aa78c40d0ed12e280f4

JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 105x40, components 3

ipg-unknown-ico.svg

a6e2a6ced6248433b393f99b9e6406f3

SVG Scalable Vector Graphics image

c7.jpg

6526e64b37134dcb3af84ccb996aa091

JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 105x40, components 3

c20.jpg

24fb4283a69b264531ed818747c38f12

JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 105x40, components 3

c15.jpg

65011c2393110ff4c8b9cde396742330

JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 105x40, components 3

ipg-keypad.svg

711f792d873982873c4aca24427cdebc

SVG Scalable Vector Graphics image

ipg-favicon.png

7b91bdaabb81eca1af38b0e185ea2885

PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced

c1.jpg

73dbd306cb27cd18cd7c4b0ef1087fcd

JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 105x40, components 3

c4.jpg

bdc3abdd6520bcd438c174d4cf4d9b38

JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 105x40, components 3

index.php

11db5fb7849eec7eebb25153509b804b

PHP script, ASCII text

esprit_fa.minabc.css

daf3427017aacc69df4677bb2b4a9448

ASCII text, with very long lines (36420), with CRLF line terminators

IRANSansWeb_Medium.html

bb6a9fe5edb6791184821d992bffdcf4

Web Open Font Format (Version 2), TrueType, length 28916, version 4.13107

IRANSansWeb_Light.html

414e7148a634bfc82a601e3dacf84e96

Web Open Font Format (Version 2), TrueType, length 32420, version 4.13107

IRANSansWeb_Bold.html

6ec03a37e370c0d7f4f6bbdba0feac23

Web Open Font Format (Version 2), TrueType, length 29688, version 4.13107

IRANSansWeb.html

c6f46673e2449eb071e2c098c5190c2a

Web Open Font Format (Version 2), TrueType, length 31320, version 4.13107

IRANSansWeb_UltraLight.html

5010d0152420ca7bd3acb1a9d668a57e

Web Open Font Format (Version 2), TrueType, length 29840, version 4.13107

IRANSansWeb_Medium.html

7a75459b25fca9937df9110d7e049133

IRANSansWeb_Light.html

53a90b39dae08e4e4539ca2ce0cb3a68

IRANSansWeb_Bold.html

4ff441e3b8c51acd2261585feca1d8c8

IRANSansWeb.html

ac22d187130d6c3433a49a1e98bfa968

IRANSansWeb_UltraLight.html

eeb1edcad9b20c19bd1eecd1c371e4f8

IRANSansWeb_Medium.html

74e2ab212452657f2fc66bd08873884b

Web Open Font Format, TrueType, length 36141, version 4.13107

IRANSansWeb_Light.html

469a8f6aa5b4631045b7d922102392ac

Web Open Font Format, TrueType, length 39693, version 4.13107

IRANSansWeb_Bold.html

a762a767a3459fec2195da1373ebf0b1

Web Open Font Format, TrueType, length 36629, version 4.13107

IRANSansWeb.html

df14582918ca379a280e453bb3cc6ba5

Web Open Font Format, TrueType, length 38473, version 4.13107

IRANSansWeb_UltraLight.html

153b7b5a1579526611373210b6fd8754

Web Open Font Format, TrueType, length 36945, version 4.13107

IRANSansWeb_Medium.html

1121c0520a30a7295ffe21dd3fe77a60

Embedded OpenType (EOT), IRANSansWeb Medium family

IRANSansWeb_Light.html

60f95f28d8469e5df0398ba1d3e9708e

Embedded OpenType (EOT), IRANSansWeb Light family

IRANSansWeb_Mediumd41d.html

1121c0520a30a7295ffe21dd3fe77a60

Embedded OpenType (EOT), IRANSansWeb Medium family

IRANSansWeb_Bold.html

7626d015e15844db7d1f54c8e415461a

Embedded OpenType (EOT), IRANSansWeb family

IRANSansWeb_Boldd41d.html

7626d015e15844db7d1f54c8e415461a

Embedded OpenType (EOT), IRANSansWeb family

IRANSansWeb.html

e43cfbc1a67d90e910398ded8345cd32

Embedded OpenType (EOT), IRANSansWeb family

IRANSansWeb_UltraLightd41d.html

b8efb89efe7dc02c439a362d17c9dc5e

Embedded OpenType (EOT), IRANSansWeb UltraLight family

IRANSansWebd41d.html

e43cfbc1a67d90e910398ded8345cd32

Embedded OpenType (EOT), IRANSansWeb family

IRANSansWeb_Lightd41d.html

60f95f28d8469e5df0398ba1d3e9708e

Embedded OpenType (EOT), IRANSansWeb Light family

IRANSansWeb_UltraLight.html

b8efb89efe7dc02c439a362d17c9dc5e

Embedded OpenType (EOT), IRANSansWeb UltraLight family

tel-otp.php

55fc5ee72b3c849fa8d25d344e903e39

PHP script, Unicode text, UTF-8 text

messages_fa.minabc.js

11fb159095db9a1342d875aade5803f4

Unicode text, UTF-8 text, with CRLF line terminators

send.php

05d9bb0253f210773609fce1755e72a2

PHP script, ASCII text

jquery.minabc.js

2f772fed444d5489079f275bd01e26cc

JavaScript source, ASCII text, with very long lines (65450), with CRLF line terminators

payment.minabc.js

80659899bd69c03120cb7f1c1b7387b3

JavaScript source, ASCII text, with very long lines (547)

otpcode.php

c499489a69cbd5b3cd36dbce0f357aab

PHP script, ASCII text

tel.php

01dd2ba71553ce5f734ad3576b907a4d

PHP script, Unicode text, UTF-8 text

endpay.php

ed1f71034f26416329274d1df50a1dcb

PHP script, ASCII text

logo.png

1d75db3d7cb9cce23a818f0a18547a6d

PNG image data, 300 x 300, 8-bit/color RGBA, interlaced

base.apk

99ddd3e4a51f53d7ace28f24175d2c1b

Zip archive data, at least v0.0 to extract, compression method=store

database.php

c3c751630e8dfc5e0696a0f08738cea5

PHP script, Unicode text, UTF-8 text

download.php

4e3dec9567387e7b4aacdb42cfe2e5b5

HTML document, Unicode text, UTF-8 text

index.php

42c085f55d723385ba2a1b6d9350be66

JavaScript source, Unicode text, UTF-8 text

Detections

Analyzer	Verdict	Alert
Public Nextron YARA rules	malware	PHP webshell obfuscated by encoding of mixed hex and dec
Public Nextron YARA rules	malware	PHP webshell which eval()s obfuscated string
Public Nextron YARA rules	malware	PHP webshell obfuscated by encoding of mixed hex and dec
Public Nextron YARA rules	malware	PHP webshell which eval()s obfuscated string
Public Nextron YARA rules	malware	PHP webshell obfuscated by encoding of mixed hex and dec
Public Nextron YARA rules	malware	PHP webshell which eval()s obfuscated string
VirusTotal	malicious	VirusTotal - Scan result 12/66

JavaScript (0)

HTTP Transactions (1)

URL IP Response Size

eblugh-ir-my.sbs/ir.zip

170.64.190.229

200 OK

4.8 MB

URL User Request GET HTTP/1.1
eblugh-ir-my.sbs/ir.zip
IP
170.64.190.229:443
ASN
#14061 DIGITALOCEAN-ASN

Certificate
IssuerLet's Encrypt
Subjecteblugh-ir-my.sbs
Fingerprint32:5E:60:86:78:4A:D9:11:79:D4:BF:73:85:E6:FC:54:AA:75:B0:27
ValidityWed, 08 May 2024 08:05:22 GMT - Tue, 06 Aug 2024 08:05:21 GMT

File type
Zip archive data, at least v2.0 to extract, compression method=deflate
Size
4.8 MB (4770499 bytes)
Hash
5e804a454a0d22b2236ff4baa6cb18e6
2209f7446106093ddf2ea8385b569acfcbc08ef7
19a636dea732525b45b02c0323f2be04a1dbeafc5da0e1493bf7a64b98c95b7e

Detections

Analyzer	Verdict	Alert
VirusTotal	malicious	VirusTotal - Scan result 12/66

HTTP Headers

GET /ir.zip HTTP/1.1
Host: eblugh-ir-my.sbs
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Fri, 10 May 2024 01:19:37 GMT
Server: Apache
Last-Modified: Mon, 06 May 2024 03:29:12 GMT
Accept-Ranges: bytes
Content-Length: 4770499
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: application/zip

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

Files detected

URL

IP

ASN

File type

Size

Hash

Archive (109)

Detections

JavaScript (0)

HTTP Transactions (1)

URL User Request GET HTTP/1.1

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers