Private YARA rules Hunting_JS_WebAssembly
Verdictaudit
Severityaudit
Matched indicatorxprime.su/_app/immutable/chunks/CZ6AO76J.js
WEBSITE ANALYSIS REPORT
http://xprime.su/watch/1309083
public
Detection signals
URLQuery findings, Threat Detection Systems, and IDS alerts
Threat Detection Systems
10DigiCert UltraDNS Sinkholed
VerdictMalicious
Severitymedium
Triggered on HTTP #1 HTTP #2 HTTP #3 HTTP #5 HTTP #6 HTTP #8 HTTP #12 HTTP #13 HTTP #14 HTTP #15 HTTP #18 HTTP #21 HTTP #22 HTTP #30 HTTP #33 HTTP #34 HTTP #38 HTTP #44 HTTP #46 HTTP #47 HTTP #54 HTTP #59 HTTP #60 HTTP #63 HTTP #64 HTTP #71 HTTP #72 HTTP #76 HTTP #77 HTTP #78 HTTP #91 HTTP #92 HTTP #93 HTTP #100 HTTP #106 HTTP #107 HTTP #109 HTTP #110 HTTP #111 HTTP #112 HTTP #113 HTTP #115 HTTP #121
Matched indicatorxprime.su
DNS4EU Sinkholed
VerdictMalicious
Severitymedium
DigiCert UltraDNS Sinkholed
VerdictMalicious
Severitymedium
Cloudflare DNS Sinkholed
VerdictMalicious
Severitymedium
DigiCert UltraDNS Sinkholed
VerdictMalicious
Severitymedium
Triggered on HTTP #43
Matched indicatorusrpubtrk.com
Cloudflare DNS Sinkholed
VerdictMalicious
Severitymedium
Triggered on HTTP #43
Matched indicatorusrpubtrk.com
DNS4EU Sinkholed
VerdictMalicious
Severitymedium
Triggered on HTTP #43
Matched indicatorusrpubtrk.com
Cloudflare DNS Sinkholed
VerdictMalicious
Severitymedium
DigiCert UltraDNS Sinkholed
VerdictMalicious
Severitymedium
Triggered on HTTP #79
Matched indicatordj.fattingnines.com
IDS
1Suricata IDS ET INFO Observed Cloudflare workers.dev Domain in TLS SNI
VerdictVerdict not recorded
Severitylow
Suricata /w Emerging Threats Pro
Triggered on Report-level