Report Overview

  1. Submitted URL

    outspace.top/wp-content/plugins/backup-backup/includes/challan.zip

  2. IP

    43.139.115.112

    ASN

    #45090 Shenzhen Tencent Computer Systems Company Limited

  3. Submitted

    2024-05-08 22:30:07

    Access

    public

  4. Website Title

    about:privatebrowsing

  5. Final URL

    about:privatebrowsing

  6. Tags

  7. urlquery detections

    No alerts detected

Detections

  1. urlquery

    0

  2. Network Intrusion Detection

    0

  3. Threat Detection Systems

    1

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
ocsp.trust-provider.cnunknown2015-04-092022-02-102024-05-08
outspace.topunknownunknownNo dataNo data

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected


OpenPhish

No alerts detected


PhishTank

No alerts detected


mnemonic secure dns

No alerts detected


Quad9 DNS

No alerts detected


ThreatFox

No alerts detected


Files detected

  1. URL

    outspace.top/wp-content/plugins/backup-backup/includes/challan.zip

  2. IP

    43.139.115.112

  3. ASN

    #45090 Shenzhen Tencent Computer Systems Company Limited

  1. File type

    Zip archive data, at least v2.0 to extract, compression method=deflate

    Size

    331 kB (330971 bytes)

  2. Hash

    1294ac7fe599c30704fa1e8490334db1

    ef20b2f7a1ff52116e45b7d9229839640f3a1ef7

  1. Archive (1)

  2. FilenameMd5File type
    challan.cmd
    6b4e999cea39ddf88ba99a25a9953592
    PE32 executable (GUI) Intel 80386, for MS Windows, 3 sections

    Detections

    AnalyzerVerdictAlert
    Malpedia's yara-signator rulesmalware
    Detects win.kutaki.

JavaScript (0)

HTTP Transactions (3)

URLIPResponseSize
ocsp.trust-provider.cn/
150.139.142.18 599 B
ocsp.trust-provider.cn/
150.139.142.18 599 B
outspace.top/wp-content/plugins/backup-backup/includes/challan.zip
43.139.115.112200 OK331 kB