Report - tk-chel.ru/download/AGDataRequester.zip

Report Overview

Submitted URL
tk-chel.ru/download/AGDataRequester.zip
IP
91.225.124.26
ASN
#202800 TechnoKom Ltd
Submitted
2024-03-28 07:51:54
Access
public
Website Title
about:privatebrowsing
Final URL
about:privatebrowsing
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
1

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
tk-chel.ru	unknown	2005-01-19	2013-06-07	2024-03-28	493 B	5.0 MB	91.225.124.26

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

Files detected

URL
tk-chel.ru/download/AGDataRequester.zip
IP
91.225.124.26
ASN
#202800 TechnoKom Ltd

File type
Zip archive data, at least v2.0 to extract, compression method=deflate
Size
5.0 MB (5000481 bytes)
Hash
c838f59987959721c6b46b1e0869f1a9
4bb226f89a042acfdafbd4327b92ea112583dcd9
efd8b3b70f731bf4b1f4789e4f88fd19ea45af25686c1a464b55b5479858e0d1

Archive (29)

Filename

Md5

File type

AGDataRequester.AGAccessLayer.dll

26e7dc98c4c8a55c49a7887b440d4dea

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

AGDataRequester.App.vshost.exe.config

3a315aadd55c0031ca43dad59e960607

XML 1.0 document, ASCII text, with CRLF line terminators

AGDataRequester.App.vshost.exe.manifest

a19a2658ba69030c6ac9d11fd7d7e3c1

XML 1.0 document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators

AGDataRequester.Domain.dll

c8a1e64ae8078b5c256682f534e1dbff

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

AGDataRequester.exe

6bef1b52e46e8c3412b161e9357909dd

PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

AGDataRequester.exe.config

3a315aadd55c0031ca43dad59e960607

XML 1.0 document, ASCII text, with CRLF line terminators

AGDataRequester.vshost.exe

378dd10936aaff40eb34d94dc29f2366

PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

AGDataRequester.vshost.exe.config

3a315aadd55c0031ca43dad59e960607

XML 1.0 document, ASCII text, with CRLF line terminators

DevExpress.Data.v12.1.dll

5699f967f0bfe9b75358592efc6f0914

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

DevExpress.Utils.v12.1.dll

6620681f74aff3632e5af197ce5abae3

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

DevExpress.XtraEditors.v12.1.dll

f072055d2ed981231affd49e4732fafe

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

DevExpress.XtraTreeList.v12.1.dll

e22e3cbdecaac9d49d6c86ec262193f4

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

DevExpress.Data.v12.1.resources.dll

911e1a5ea5da17733b13ab02e5be5f94

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

DevExpress.Utils.v12.1.resources.dll

03670358142dc1bd02175a883fc56e8d

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

DevExpress.XtraEditors.v12.1.resources.dll

bf3a67d948b4a37f96d2380817e4bd1d

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

DevExpress.XtraTreeList.v12.1.resources.dll

caf46dc5abd6e89e5887a2e6aeaae57f

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

DevExpress.Data.v12.1.resources.dll

7abed1c386ef3ca3d465b6c4d91608ac

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

DevExpress.Utils.v12.1.resources.dll

315aa2b91b32d920eefafe8158731ad1

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

DevExpress.XtraEditors.v12.1.resources.dll

f0a2ba9fcc488063ecafd15e0567f86a

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

DevExpress.XtraTreeList.v12.1.resources.dll

7ac181ef52d088daab595488235fb8c3

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

DevExpress.Data.v12.1.resources.dll

d865fa1740991f7eec6b20626a23d505

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

DevExpress.Utils.v12.1.resources.dll

0efcc62e55320a1ca39ffa7e1a9248d8

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

DevExpress.XtraEditors.v12.1.resources.dll

dafdc85bb4e36b9199ae16afb1ec5bd7

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

DevExpress.XtraTreeList.v12.1.resources.dll

0061de1f79f95c682e1c6b2fcd93d9ec

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

Microsoft.CompilerServices.AsyncTargetingPack.Net4.dll

456159bb065013e470c3935c3e0baf9c

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

DevExpress.Data.v12.1.resources.dll

75ec325a470079e9c93e00faeecf431d

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

DevExpress.Utils.v12.1.resources.dll

d442492bc8274f0d7fd8dacd99f9018f

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

DevExpress.XtraEditors.v12.1.resources.dll

f85366d73f8d1debbd49951cb05ceeed

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

DevExpress.XtraTreeList.v12.1.resources.dll

6e4c1c76cb47c3745ee5b9c3f2cf1833

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

Detections

Analyzer	Verdict	Alert
YARAhub by abuse.ch	malware	meth_get_eip

JavaScript (0)

HTTP Transactions (1)

URL IP Response Size

	URL	IP	Response	Size
	tk-chel.ru/download/AGDataRequester.zip	91.225.124.26	200 OK	5.0 MB
URL User Request GET HTTP/1.1 tk-chel.ru/download/AGDataRequester.zip IP 91.225.124.26:443 ASN #202800 TechnoKom Ltd Certificate IssuerLet's Encrypt Subjecttk-chel.ru FingerprintB6:17:54:77:D6:5F:5E:E7:8F:C2:83:58:CC:75:CF:94:78:FD:01:1D ValidityMon, 26 Feb 2024 07:09:56 GMT - Sun, 26 May 2024 07:09:55 GMT File type Zip archive data, at least v2.0 to extract, compression method=deflate Size 5.0 MB (5000481 bytes) Hash c838f59987959721c6b46b1e0869f1a9 4bb226f89a042acfdafbd4327b92ea112583dcd9 efd8b3b70f731bf4b1f4789e4f88fd19ea45af25686c1a464b55b5479858e0d1 HTTP Headers `GET /download/AGDataRequester.zip HTTP/1.1 Host: tk-chel.ru User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Date: Thu, 28 Mar 2024 07:51:25 GMT Server: Apache/2.4.56 (Debian) Last-Modified: Thu, 05 Mar 2020 11:09:23 GMT ETag: "4c4d21-5a01991c6d0d5" Accept-Ranges: bytes Content-Length: 5000481 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: application/zip`

tk-chel.ru/download/AGDataRequester.zip

91.225.124.26

200 OK

5.0 MB

URL User Request GET HTTP/1.1
tk-chel.ru/download/AGDataRequester.zip
IP
91.225.124.26:443
ASN
#202800 TechnoKom Ltd

Certificate
IssuerLet's Encrypt
Subjecttk-chel.ru
FingerprintB6:17:54:77:D6:5F:5E:E7:8F:C2:83:58:CC:75:CF:94:78:FD:01:1D
ValidityMon, 26 Feb 2024 07:09:56 GMT - Sun, 26 May 2024 07:09:55 GMT

File type
Zip archive data, at least v2.0 to extract, compression method=deflate
Size
5.0 MB (5000481 bytes)
Hash
c838f59987959721c6b46b1e0869f1a9
4bb226f89a042acfdafbd4327b92ea112583dcd9
efd8b3b70f731bf4b1f4789e4f88fd19ea45af25686c1a464b55b5479858e0d1

HTTP Headers

GET /download/AGDataRequester.zip HTTP/1.1
Host: tk-chel.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Thu, 28 Mar 2024 07:51:25 GMT
Server: Apache/2.4.56 (Debian)
Last-Modified: Thu, 05 Mar 2020 11:09:23 GMT
ETag: "4c4d21-5a01991c6d0d5"
Accept-Ranges: bytes
Content-Length: 5000481
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: application/zip

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

Files detected

URL

IP

ASN

File type

Size

Hash

Archive (29)

Detections

JavaScript (0)

HTTP Transactions (1)

URL User Request GET HTTP/1.1

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers