| okok.co.kr/attachment/cfile6.uf@2370BB3854C1D49F06C1A5.exe |  27.0.236.142 | 302 Found | 0 B |
URL User Request GET HTTP/2okok.co.kr/attachment/cfile6.uf@2370BB3854C1D49F06C1A5.exe IP27.0.236.142:443
CertificateIssuerLet's Encrypt Subjectokok.co.kr Fingerprint12:EE:38:9E:6E:60:74:02:9A:34:40:4E:1E:01:F2:80:1F:BE:0C:C5 ValidityTue, 30 Jan 2024 18:29:45 GMT - Mon, 29 Apr 2024 18:29:44 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /attachment/cfile6.uf@2370BB3854C1D49F06C1A5.exe HTTP/1.1
Host: okok.co.kr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Fri, 29 Mar 2024 12:58:52 GMT
content-length: 0
t_userid: 884fbff06f4690db4fc2f1fb29164fddcc5e8cbd
set-cookie: REACTION_GUEST=32e359693596d9b05ee33bbf2b0d17f1d2a6216d
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: 0
strict-transport-security: max-age=31536000 ; includeSubDomains
location: https://t1.daumcdn.net/cfile/tistory/2370BB3854C1D49F06?download
X-Firefox-Spdy: h2
|
IP27.0.236.142:0
CertificateIssuerLet's Encrypt Subjectokok.co.kr Fingerprint12:EE:38:9E:6E:60:74:02:9A:34:40:4E:1E:01:F2:80:1F:BE:0C:C5 ValidityTue, 30 Jan 2024 18:29:45 GMT - Mon, 29 Apr 2024 18:29:44 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: okok.co.kr
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
content-length: 0
location: https://okok.co.kr/
cache-control: no-cache
|
| t1.daumcdn.net/cfile/tistory/2370BB3854C1D49F06?download |  23.36.76.233 | 200 OK | 1.7 MB |
URL User Request GET HTTP/2t1.daumcdn.net/cfile/tistory/2370BB3854C1D49F06?download IP23.36.76.233:443 ASN#20940 Akamai International B.V.
CertificateIssuerDigiCert Inc Subject*.daumcdn.net FingerprintCA:35:9F:C9:79:95:A3:31:DB:52:EF:5D:9E:43:C0:01:C8:4C:42:FD ValidityWed, 07 Jun 2023 00:00:00 GMT - Fri, 07 Jun 2024 23:59:59 GMT
File typePE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed, 3 sections Size1.7 MB (1719632 bytes) Hash2c9dbfbf084deda9264115da545e10a7 964afcdadd1c2db1e134d12281bd49411df905b9 c13f08ec782f5f20907fed627119df984a23b0d20d49c71f1ee3b9edc6f8e91d
| Analyzer | Verdict | Alert |
|---|
| VirusTotal | suspicious | |
GET /cfile/tistory/2370BB3854C1D49F06?download HTTP/1.1
Host: t1.daumcdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: openresty
content-type: application/x-dosexec
content-length: 1719632
last-modified: Sun, 17 May 2015 19:23:51 GMT
content-disposition: attachment; filename="utorrent.exe"
x-twg-redirected: not_found
accept-ranges: bytes
x-wcss: dC1jb21tb24wMS1id2NhY2hlMjI6aGl0OjA=
report-to: {"group":"kakao-nel","max_age":86400,"endpoints":[{"url":"https://nel.onkakao.net/upload/"}],"include_subdomains":true}
nel: {"report_to":"kakao-nel","max_age":86400,"include_subdomains":true}
cache-control: max-age=171715
expires: Sun, 31 Mar 2024 12:40:48 GMT
date: Fri, 29 Mar 2024 12:58:53 GMT
X-Firefox-Spdy: h2
|