Report Overview

  1. Submitted URL

    pkg.dl.mail.ru/packages/0_2002115distrib360/VKPlayCloudUpdater.exe

  2. IP

    178.22.89.141

    ASN

    #47764 LLC VK

  3. Submitted

    2024-05-10 09:36:46

    Access

    public

  4. Website Title

    about:privatebrowsing

  5. Final URL

    about:privatebrowsing

  6. Tags

  7. urlquery detections

    No alerts detected

Detections

  1. urlquery

    0

  2. Network Intrusion Detection

    2

  3. Threat Detection Systems

    2

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
pkg.dl.mail.ruunknown1997-09-272014-10-072022-09-02

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

SeveritySource IPDestination IPAlert
high 178.22.89.142Client IP
high 178.22.89.142Client IP

Threat Detection Systems

Public InfoSec YARA rules
SeverityIndicatorAlert
mediumpkg.dl.mail.ru/packages/0_2002115distrib360/VKPlayCloudUpdater.exemeth_get_eip

OpenPhish

No alerts detected


PhishTank

No alerts detected


mnemonic secure dns

No alerts detected


Quad9 DNS

No alerts detected


ThreatFox

No alerts detected


Files detected

  1. URL

    pkg.dl.mail.ru/packages/0_2002115distrib360/VKPlayCloudUpdater.exe

  2. IP

    178.22.89.142

  3. ASN

    #47764 LLC VK

  1. File type

    PE32 executable (GUI) Intel 80386, for MS Windows, 5 sections

    Size

    4.4 MB (4356624 bytes)

  2. Hash

    4b7ab1ba85af7143f901aec5322d10fc

    b2b1ee83107f1e63b97246ceb8e31a144d8b0ade

    Detections

    AnalyzerVerdictAlert
    YARAhub by abuse.chmalware
    meth_get_eip

JavaScript (0)

HTTP Transactions (1)

URLIPResponseSize
pkg.dl.mail.ru/packages/0_2002115distrib360/VKPlayCloudUpdater.exe
178.22.89.142200 OK4.4 MB