Report Overview
Domain Summary
Domain / FQDN | Rank | Registered | First Seen | Last Seen | Sent | Received | IP |
---|---|---|---|---|---|---|---|
cpkarma.cc | unknown | 2023-03-13 | 2023-03-13 | 2023-09-10 | 479 B | 98 kB | 104.21.47.200 |
Related reports
Network Intrusion Detection Systems
Suricata /w Emerging Threats Pro
Threat Detection Systems
Public InfoSec YARA rules
No alerts detected
OpenPhish
No alerts detected
PhishTank
No alerts detected
mnemonic secure dns
No alerts detected
Quad9 DNS
No alerts detected
ThreatFox
No alerts detected
Files detected
URL
cpkarma.cc/Karma-v1.0.zip
IP
104.21.47.200
ASN
#13335 CLOUDFLARENET
File type
Zip archive data, at least v1.0 to extract, compression method=store
Size
98 kB (97515 bytes)
Hash
7ab5270d3ab6f2491a33f0e020480392
37152c36afdad38cba926bfeb6b101b0fc361aa8
Archive (5)
Filename | Md5 | File type | |||
---|---|---|---|---|---|
karma.py | c0c032dc2913759a601dde47c6b88bba | Python script, ASCII text executable, with very long lines (7662), with CRLF line terminators | |||
main.zip | 645c1615c18757526871e079f9f00d3d
| Zip archive data, at least v1.0 to extract, compression method=store | |||
requirements.txt | beaf4eef32cd964f7f2a06efb7f8bbce | ASCII text, with CRLF line terminators | |||
karma.php | 86c8fa07b9ba5de65cc4838a186b6a75
| PHP script, ASCII text, with very long lines (28300), with CRLF line terminators | |||
letter.txt | b10a8db164e0754105b7a99be72e3fe5 | ASCII text, with no line terminators |
Detections
Analyzer | Verdict | Alert |
---|---|---|
Public Nextron YARA rules | malware | PHP webshell using some kind of eval with encoded blob to decode |
VirusTotal | malicious |
JavaScript (0)
HTTP Transactions (1)
URL | IP | Response | Size | |||||||
---|---|---|---|---|---|---|---|---|---|---|
cpkarma.cc/Karma-v1.0.zip | 104.21.47.200 | 200 OK | 98 kB | |||||||
Detections
HTTP Headers
| ||||||||||