Report - vrpirates.wiki/downloads/rookie/rookie_2.34.1

Report Overview

Visited public
2025-05-28 15:11:44
Tags
Submit Tags
URL
vrpirates.wiki/downloads/rookie/rookie_2.34.1_portable.zip
Finishing URL
about:privatebrowsing
IP / ASN
185.247.224.87
#200651 FlokiNET ehf
Title
about:privatebrowsing

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
vrpirates.wiki	unknown	2023-10-11	2023-10-25	2025-05-16	526 B	1.2 MB	185.247.224.87

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

Files detected

URL
vrpirates.wiki/downloads/rookie/rookie_2.34.1_portable.zip
IP
185.247.224.87
ASN
#200651 FlokiNET ehf

File type
Zip archive data, at least v2.0 to extract, compression method=deflate
Size
1.2 MB (1239996 bytes)
Hash
f036fcdb20b031d103ddc48a7d4e3fde
1122163c4df062887a6943826ed5213242200306
a329b31b2fda9f72c907b2688f6ee6d64b2e1a9a0d8efd186b3d64b930550800

Archive (4)

Filename

Md5

File type

Rookie Offline.cmd

83b85f3a19c77666117db1dfbbfd782b

ASCII text, with CRLF line terminators

AddDefenderExceptions.ps1

598164f06f8abd143a91d20c0562eb93

ASCII text, with CRLF line terminators

CleanupInstall.cmd

9ae44cebbde4f44c27801bbf93494c1d

DOS batch file, ASCII text, with CRLF line terminators

AndroidSideloader.exe

552e9c39473ca27a5de66ab0c87aceaa

PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

Detections

Analyzer	Verdict	Alert
YARAhub by abuse.ch	malware	Detect files disabling or modifying Windows Defender, Windows Firewall, or Microsoft Smartscreen
VirusTotal	malicious	VirusTotal - Scan result 38/66

JavaScript (0)

HTTP Transactions (1)

URL IP Response Size

GET vrpirates.wiki/downloads/rookie/rookie_2.34.1_portable.zip

185.247.224.87

200 OK

1.2 MB

URL User Request GET
vrpirates.wiki/downloads/rookie/rookie_2.34.1_portable.zip
IP
185.247.224.87:443
ASN
#200651 FlokiNET ehf

Certificate
IssuerZeroSSL
Subjectvrpirates.wiki
Fingerprint9F:0E:10:5B:17:00:79:68:66:D8:BA:01:7F:D3:4B:B8:AA:56:49:67
ValidityTue, 01 Apr 2025 00:00:00 GMT - Mon, 30 Jun 2025 23:59:59 GMT

File type
Zip archive data, at least v2.0 to extract, compression method=deflate
Size
1.2 MB (1239996 bytes)
Hash
f036fcdb20b031d103ddc48a7d4e3fde
1122163c4df062887a6943826ed5213242200306
a329b31b2fda9f72c907b2688f6ee6d64b2e1a9a0d8efd186b3d64b930550800

Detections

Analyzer	Verdict	Alert
VirusTotal	malicious	VirusTotal - Scan result 38/66

HTTP Headers

GET /downloads/rookie/rookie_2.34.1_portable.zip HTTP/1.1
Host: vrpirates.wiki
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-ua-compatible: IE=edge
content-language: en
content-disposition: attachment; filename=rookie_2.34.1_portable.zip
content-type: application/zip
accept-ranges: bytes
cache-control: public, max-age=0
last-modified: Sun, 13 Apr 2025 09:40:01 GMT
etag: W/"12ebbc-1962e852bd5"
content-length: 1239996
date: Wed, 28 May 2025 15:11:12 GMT
X-Firefox-Spdy: h2

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

Quad9 DNS

ThreatFox

Files detected

URL

IP

ASN

File type

Size

Hash

Archive (4)

Detections

JavaScript (0)

HTTP Transactions (1)

URL User Request GET

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers