Report Overview

  1. Submitted URL

    xemhang.vn/Website1/Duong/View.exe

  2. IP

    118.70.144.70

    ASN

    #18403 FPT Telecom Company

  3. Submitted

    2024-04-26 23:12:35

    Access

    public

  4. Website Title

    about:privatebrowsing

  5. Final URL

    about:privatebrowsing

  6. Tags

  7. urlquery detections

    No alerts detected

Detections

  1. urlquery

    0

  2. Network Intrusion Detection

    0

  3. Threat Detection Systems

    8

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
xemhang.vnunknownunknown2022-05-202024-04-16

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules
SeverityIndicatorAlert
mediumxemhang.vn/Website1/Duong/View.exeDetects Monero Crypto Coin Miner
mediumxemhang.vn/Website1/Duong/View.exeLinux.Trojan.Pornoasset
mediumxemhang.vn/Website1/Duong/View.exeMacOS.Cryptominer.Generic
mediumxemhang.vn/Website1/Duong/View.exeMacOS.Cryptominer.Xmrig

OpenPhish

No alerts detected


PhishTank

No alerts detected


mnemonic secure dns

No alerts detected


Quad9 DNS

No alerts detected


ThreatFox

No alerts detected


Files detected

  1. URL

    xemhang.vn/Website1/Duong/View.exe

  2. IP

    118.70.144.70

  3. ASN

    #18403 FPT Telecom Company

  1. File type

    PE32 executable (GUI) Intel 80386, for MS Windows, 8 sections

    Size

    13 MB (13405184 bytes)

  2. Hash

    5fa35f67e3dfdff6ee2b00aef61642e0

    59600291780aac70c950c8d9d28e57aaf2ce488a

    Detections

    AnalyzerVerdictAlert
    Public Nextron YARA rulesmalware
    Detects Monero Crypto Coin Miner
    Elastic Security YARA Rulesmalware
    Linux.Trojan.Pornoasset
    Elastic Security YARA Rulesmalware
    MacOS.Cryptominer.Generic
    Elastic Security YARA Rulesmalware
    MacOS.Cryptominer.Xmrig

JavaScript (0)

HTTP Transactions (1)

URLIPResponseSize
xemhang.vn/Website1/Duong/View.exe
118.70.144.70200 OK13 MB