Report Overview

  1. Submitted URL

    mark0.net/download/triddefs.zip

  2. IP

    198.54.114.128

    ASN

    #22612 NAMECHEAP-NET

  3. Submitted

    2024-04-19 04:36:33

    Access

    public

  4. Website Title

    about:privatebrowsing

  5. Final URL

    about:privatebrowsing

  6. Tags

  7. urlquery detections

    No alerts detected

Detections

  1. urlquery

    0

  2. Network Intrusion Detection

    0

  3. Threat Detection Systems

    2

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
mark0.net3957932004-09-242012-08-142024-04-16

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected


OpenPhish

No alerts detected


PhishTank

No alerts detected


mnemonic secure dns

No alerts detected


Quad9 DNS

No alerts detected


ThreatFox

No alerts detected


Files detected

  1. URL

    mark0.net/download/triddefs.zip

  2. IP

    198.54.114.128

  3. ASN

    #22612 NAMECHEAP-NET

  1. File type

    Zip archive data, at least v2.0 to extract, compression method=deflate

    Size

    2.1 MB (2121674 bytes)

  2. Hash

    63db63eed470bce3a671d8208f0dcecd

    1698a247fbaad35256b840a35051fdcfffc3385a

  1. Archive (1)

  2. FilenameMd5File type
    triddefs.trd
    c447bd7092464479e6f6dddd5729e539
    RIFF (little-endian) data, TrID defs package

    Detections

    AnalyzerVerdictAlert
    YARAhub by abuse.chmalware
    Detect files is `SliverFox` malware
    YARAhub by abuse.chmalware
    Detects a OneNote malicious loader mostly used by QBot (TA570/TA577)

JavaScript (0)

HTTP Transactions (1)

URLIPResponseSize
mark0.net/download/triddefs.zip
198.54.114.128200 OK2.1 MB