Report - cdn.discordapp.com/attachments/1185115180338778162/1185749287368405092/FSR2FSR3

Report Overview

Visitedpublic

2023-12-21 06:21:47

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Host Summary

Host	Rank	Registered	First Seen	Last Seen	Sent	Received	IP	Fingerprints
cdn.discordapp.com	2474	2015-02-26	2015-08-24 15:06:21	2023-12-20 05:14:39	553 B	4.4 MB	162.159.130.233

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

File detected

URL

cdn.discordapp.com/attachments/1185115180338778162/1185749287368405092/FSR2FSR3_200.zip

IP / ASN

162.159.130.233

#13335 CLOUDFLARENET

File Overview

File TypeZip archive data, at least v2.0 to extract, compression method=deflate

Size4.4 MB (4358039 bytes)

MD53eadb0f60536f162dd049b959e43cb2a

SHA1bf1c427ed8eeee2af70231597d720962975728fc

SHA256c87a0278c79d0c785ad70607064f98e905a05f205268ecc19bd1cc862231ef82

Archive (3)

Modified	Filename	Size	MD5	File type
2023-12-17 02:01	FSR2FSR3.asi	13 MB	bbef75897414898312ea366e0a989e64	PE32+ executable (DLL) (GUI) x86-64, for MS Windows, 6 sections
2023-06-28 16:11	winmm.dll	340 kB	fd883ee20026af1219b72b2c25e45f2d	PE32+ executable (DLL) (GUI) x86-64, for MS Windows, 7 sections
2023-08-19 22:23	winmm.ini	35 B	d4f4902bf6fa672ff40308981938adc3	ASCII text, with CRLF line terminators

Detections

Analyzer	Verdict	Alert
YARAhub by abuse.ch	malware	files - file ~tmp01925d3f.exe

JavaScript (0)

HTTP Transactions (1)

URL IP Response Size

	URL	IP	Response	Size
	GET cdn.discordapp.com/attachments/1185115180338778162/1185749287368405092/FSR2FSR3_200.zip	162.159.130.233	200 OK	4.4 MB
URL cdn.discordapp.com/attachments/1185115180338778162/1185749287368405092/FSR2FSR3_200.zip IP / ASN 162.159.130.233 #13335 CLOUDFLARENET Requested byN/A Resource Info File typeZip archive data, at least v2.0 to extract, compression method=deflate First Seen2023-12-18 Last Seen2024-08-20 Times Seen5 Size4.4 MB (4358039 bytes) MD53eadb0f60536f162dd049b959e43cb2a SHA1bf1c427ed8eeee2af70231597d720962975728fc SHA256c87a0278c79d0c785ad70607064f98e905a05f205268ecc19bd1cc862231ef82 Certificate Info IssuerCloudflare, Inc. Subjectdiscordapp.com Fingerprint97:8B:EE:AD:1E:BF:A1:69:E7:94:29:F7:55:7A:29:64:19:C7:81:39 ValidityFri, 20 Oct 2023 00:00:00 GMT - Sat, 19 Oct 2024 23:59:59 GMT HTTP Headers GET /attachments/1185115180338778162/1185749287368405092/FSR2FSR3_200.zip HTTP/1.1 Host: cdn.discordapp.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache HTTP/2 200 OK date: Thu, 21 Dec 2023 06:21:19 GMT content-type: application/zip content-length: 4358039 cf-ray: 838e06371bea56a2-OSL cf-cache-status: HIT accept-ranges: bytes, bytes cache-control: public, max-age=31536000 content-disposition: attachment; filename="FSR2FSR3_200.zip" etag: "3eadb0f60536f162dd049b959e43cb2a" expires: Fri, 20 Dec 2024 06:21:19 GMT last-modified: Sun, 17 Dec 2023 01:04:20 GMT vary: Accept-Encoding alt-svc: h3=":443"; ma=86400 x-goog-generation: 1702775060330143 x-goog-hash: crc32c=rbBIww==, md5=Pq2w9gU28WLdBJuVnkPLKg== x-goog-metageneration: 1 x-goog-storage-class: STANDARD x-goog-stored-content-encoding: identity x-goog-stored-content-length: 4358039 x-guploader-uploadid: ABPtcPrW4BzejoFu6gDwJgXXhSpk78BuxmA1NHT0-10PNVzxPHDdxV67jasrRJRthBYShH6atug x-robots-tag: noindex, nofollow, noarchive, nocache, noimageindex, noodp report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=5SQkbxnYU7sTztv0DPLVQTd3dPWC3uXSgYpKSSq0cY1n6M6DfzKv6tKd%2Fn1zEPRrQj38S2c9a2sD0mBp8aHNVM%2BTMlAPfZeR6WkjEFFBPTu4%2F2hF84AGB49Kv9SD5xIK3LkG2g%3D%3D"}],"group":"cf-nel","max_age":604800} nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} set-cookie: __cf_bm=FuGf68RN2E5vJt0SOey8K_iHTOwiFLRyQGfD_fv.QGc-1703139679-1-AR8qQjioVm7jjF/Wm8QBfBVWHqNeCuErKwK8EctdrXGp1JZh3Ia5xfg8S9la+mC+nVnyW6xpc89lEmm/pHLL9/0=; path=/; expires=Thu, 21-Dec-23 06:51:19 GMT; domain=.discordapp.com; HttpOnly; Secure; SameSite=None _cfuvid=uLNVeTsK8zr08ltClJlv1cfhIU9T4yrTXt_OvIzFPXk-1703139679890-0-604800000; path=/; domain=.discordapp.com; HttpOnly; Secure; SameSite=None server: cloudflare X-Firefox-Spdy: h2

GET cdn.discordapp.com/attachments/1185115180338778162/1185749287368405092/FSR2FSR3_200.zip

162.159.130.233

200 OK

4.4 MB

URL

cdn.discordapp.com/attachments/1185115180338778162/1185749287368405092/FSR2FSR3_200.zip

IP / ASN

162.159.130.233

#13335 CLOUDFLARENET

Requested byN/A

Resource Info

File typeZip archive data, at least v2.0 to extract, compression method=deflate

First Seen2023-12-18

Last Seen2024-08-20

Times Seen5

Size4.4 MB (4358039 bytes)

MD53eadb0f60536f162dd049b959e43cb2a

SHA1bf1c427ed8eeee2af70231597d720962975728fc

SHA256c87a0278c79d0c785ad70607064f98e905a05f205268ecc19bd1cc862231ef82

Certificate Info

IssuerCloudflare, Inc.

Subjectdiscordapp.com

Fingerprint97:8B:EE:AD:1E:BF:A1:69:E7:94:29:F7:55:7A:29:64:19:C7:81:39

ValidityFri, 20 Oct 2023 00:00:00 GMT - Sat, 19 Oct 2024 23:59:59 GMT

HTTP Headers

GET /attachments/1185115180338778162/1185749287368405092/FSR2FSR3_200.zip HTTP/1.1
Host: cdn.discordapp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Thu, 21 Dec 2023 06:21:19 GMT
content-type: application/zip
content-length: 4358039
cf-ray: 838e06371bea56a2-OSL
cf-cache-status: HIT
accept-ranges: bytes, bytes
cache-control: public, max-age=31536000
content-disposition: attachment; filename="FSR2FSR3_200.zip"
etag: "3eadb0f60536f162dd049b959e43cb2a"
expires: Fri, 20 Dec 2024 06:21:19 GMT
last-modified: Sun, 17 Dec 2023 01:04:20 GMT
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
x-goog-generation: 1702775060330143
x-goog-hash: crc32c=rbBIww==, md5=Pq2w9gU28WLdBJuVnkPLKg==
x-goog-metageneration: 1
x-goog-storage-class: STANDARD
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 4358039
x-guploader-uploadid: ABPtcPrW4BzejoFu6gDwJgXXhSpk78BuxmA1NHT0-10PNVzxPHDdxV67jasrRJRthBYShH6atug
x-robots-tag: noindex, nofollow, noarchive, nocache, noimageindex, noodp
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=5SQkbxnYU7sTztv0DPLVQTd3dPWC3uXSgYpKSSq0cY1n6M6DfzKv6tKd%2Fn1zEPRrQj38S2c9a2sD0mBp8aHNVM%2BTMlAPfZeR6WkjEFFBPTu4%2F2hF84AGB49Kv9SD5xIK3LkG2g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
set-cookie: __cf_bm=FuGf68RN2E5vJt0SOey8K_iHTOwiFLRyQGfD_fv.QGc-1703139679-1-AR8qQjioVm7jjF/Wm8QBfBVWHqNeCuErKwK8EctdrXGp1JZh3Ia5xfg8S9la+mC+nVnyW6xpc89lEmm/pHLL9/0=; path=/; expires=Thu, 21-Dec-23 06:51:19 GMT; domain=.discordapp.com; HttpOnly; Secure; SameSite=None
_cfuvid=uLNVeTsK8zr08ltClJlv1cfhIU9T4yrTXt_OvIzFPXk-1703139679890-0-604800000; path=/; domain=.discordapp.com; HttpOnly; Secure; SameSite=None
server: cloudflare
X-Firefox-Spdy: h2