Report Overview

  1. Submitted URL

    ftp.vector.co.jp/47/95/3474/LostElish.exe?a8=h3s4_3t.Tz1UpsOULomavWN9mz5QlsOAPomvtRjZGvD.TzsWGRFWGzs3GzGPwPFmkvJA1CsOk3s47s00000007693001

  2. IP

    180.214.37.164

    ASN

    #23637 Equinix Japan Enterprise K.K.

  3. Submitted

    2024-05-09 00:29:15

    Access

    public

  4. Website Title

    about:privatebrowsing

  5. Final URL

    about:privatebrowsing

  6. Tags

  7. urlquery detections

    No alerts detected

Detections

  1. urlquery

    0

  2. Network Intrusion Detection

    0

  3. Threat Detection Systems

    1

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
ssocsp.cybertrust.ne.jp210772005-09-142019-10-072024-05-08
ftp.vector.co.jpunknown1994-01-182012-05-232021-11-10

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected


OpenPhish

No alerts detected


PhishTank

No alerts detected


mnemonic secure dns

No alerts detected


Quad9 DNS

No alerts detected


ThreatFox

No alerts detected


Files detected

  1. URL

    ftp.vector.co.jp/47/95/3474/LostElish.exe?a8=h3s4_3t.Tz1UpsOULomavWN9mz5QlsOAPomvtRjZGvD.TzsWGRFWGzs3GzGPwPFmkvJA1CsOk3s47s00000007693001

  2. IP

    180.214.37.164

  3. ASN

    #23637 Equinix Japan Enterprise K.K.

  1. File type

    PE32 executable (GUI) Intel 80386, for MS Windows, 7 sections, LHa self-extracting archive

    Size

    1.6 MB (1597625 bytes)

  2. Hash

    ba12827b2a48eb08fa7cc9dbd1784cce

    8afb84fe171e0f07647fb3e6a671d0af957577ed

    Detections

    AnalyzerVerdictAlert
    VirusTotalsuspicious

JavaScript (0)

HTTP Transactions (3)

URLIPResponseSize
ssocsp.cybertrust.ne.jp/OcspServer
124.24.58.212 1.5 kB
ssocsp.cybertrust.ne.jp/OcspServer
124.24.58.212 1.5 kB
ftp.vector.co.jp/47/95/3474/LostElish.exe?a8=h3s4_3t.Tz1UpsOULomavWN9mz5QlsOAPomvtRjZGvD.TzsWGRFWGzs3GzGPwPFmkvJA1CsOk3s47s00000007693001
180.214.37.164200 OK1.6 MB