Report - 181.214.221.14:8080/Redirects/Starfall.dll

Report Overview

Visitedpublic

2025-02-05 18:21:17

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Host Summary

Host	Rank	Registered	First Seen	Last Seen	Sent	Received	IP	Fingerprints
181.214.221.14	unknown	unknown	No data	No data	424 B	19 kB	181.214.221.14

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2025-02-05	medium	181.214.221.14	Sinkholed

ThreatFox

No alerts detected

File detected

URL

181.214.221.14:8080/Redirects/Starfall.dll

IP / ASN

181.214.221.14

#210356 BattleHost

File Overview

File TypePE32+ executable (DLL) (GUI) x86-64, for MS Windows, 6 sections

Size19 kB (18944 bytes)

MD53b5f2c880caf50e244d036c747585142

SHA19d3c52969c64b9beef5b7d02644bd9c8657465fb

SHA2562d203a4b12798fa51d2ccc588fe5ee7d37ca60c55b931113f0b1b9ee5ef57288

Detections

Analyzer	Verdict	Alert
VirusTotal	suspicious	VirusTotal - Scan result 2/71

JavaScript (0)

HTTP Transactions (1)

URL IP Response Size

GET 181.214.221.14:8080/Redirects/Starfall.dll

181.214.221.14

200 OK

19 kB

URL User Request GET HTTP

181.214.221.14:8080/Redirects/Starfall.dll

IP / ASN

181.214.221.14

#210356 BattleHost

Requested byN/A

Resource Info

File typePE32+ executable (DLL) (GUI) x86-64, for MS Windows, 6 sections

First Seen2025-01-11

Last Seen2025-02-06

Times Seen4

Size19 kB (18944 bytes)

MD53b5f2c880caf50e244d036c747585142

SHA19d3c52969c64b9beef5b7d02644bd9c8657465fb

SHA2562d203a4b12798fa51d2ccc588fe5ee7d37ca60c55b931113f0b1b9ee5ef57288

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed
VirusTotal	suspicious	VirusTotal - Scan result 2/71

HTTP Headers

GET /Redirects/Starfall.dll HTTP/1.1
Host: 181.214.221.14:8080
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, OPTIONS
Access-Control-Allow-Headers: Range, Content-Type
Accept-Ranges: bytes
Content-Length: 18944
Content-Type: application/octet-stream
Date: Wed, 05 Feb 2025 18:20:47 GMT
Connection: keep-alive
Keep-Alive: timeout=5