Report Overview
Submitted URL
asurastrike.de/ERAB/ERAB.exe
IP
146.247.97.33
ASN
#57037 MKQ Internetservice
Submitted
2024-04-19 15:46:05
Access
public
Website Title
about:privatebrowsing
Final URL
about:privatebrowsing
Tags
urlquery detections
No alerts detected
Detections
urlquery
0
Network Intrusion Detection
1
Threat Detection Systems
3
Domain Summary
Domain / FQDN | Rank | Registered | First Seen | Last Seen | Sent | Received | IP |
---|---|---|---|---|---|---|---|
asurastrike.de | unknown | unknown | 2014-08-15 | 2024-04-16 | 398 B | 3.0 MB | 146.247.97.33 |
Related reports
Network Intrusion Detection Systems
Suricata /w Emerging Threats Pro
Timestamp | Severity | Source IP | Destination IP | Alert |
---|---|---|---|---|
2024-04-19 15:45:39 | high | 146.247.97.33 | Client IP |
Threat Detection Systems
Public InfoSec YARA rules
Scan Date | Severity | Indicator | Alert |
---|---|---|---|
2024-04-19 | medium | asurastrike.de/ERAB/ERAB.exe | Detects an SFX archive with automatic script execution |
OpenPhish
No alerts detected
PhishTank
No alerts detected
mnemonic secure dns
No alerts detected
Quad9 DNS
No alerts detected
ThreatFox
No alerts detected
Files detected
URL
asurastrike.de/ERAB/ERAB.exe
IP
146.247.97.33
ASN
#57037 MKQ Internetservice
File type
PE32 executable (GUI) Intel 80386, for MS Windows, 4 sections
Size
3.0 MB (2968064 bytes)
Hash
4981db688e12f532b5160d235712ded0
ef30e279ba4bb8b357ffa6a97aa0228e963873e8
Detections
Analyzer | Verdict | Alert |
---|---|---|
YARAhub by abuse.ch | malware | Detects an SFX archive with automatic script execution |
VirusTotal | malicious |
JavaScript (0)
HTTP Transactions (1)
URL | IP | Response | Size | ||||||||||||||||
---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
asurastrike.de/ERAB/ERAB.exe | 146.247.97.33 | 200 OK | 3.0 MB | ||||||||||||||||
Detections
HTTP Headers
| |||||||||||||||||||