Report Overview

  1. Submitted URL

    pool.cn.com/tunnel/zeph.zip

  2. IP

    47.129.4.240

    ASN

    #16509 AMAZON-02

  3. Submitted

    2024-04-17 17:02:40

    Access

    public

  4. Website Title

    about:privatebrowsing

  5. Final URL

    about:privatebrowsing

  6. Tags

  7. urlquery detections

    No alerts detected

Detections

  1. urlquery

    0

  2. Network Intrusion Detection

    0

  3. Threat Detection Systems

    1

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
ocsp.trust-provider.cnunknown2015-04-092022-02-102024-04-17
pool.cn.comunknown2022-08-242021-05-132023-11-19

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected


OpenPhish

No alerts detected


PhishTank

No alerts detected


mnemonic secure dns

No alerts detected


Quad9 DNS

No alerts detected


ThreatFox

No alerts detected


Files detected

  1. URL

    pool.cn.com/tunnel/zeph.zip

  2. IP

    47.129.4.240

  3. ASN

    #16509 AMAZON-02

  1. File type

    Zip archive data, at least v2.0 to extract, compression method=deflate

    Size

    4.9 MB (4926181 bytes)

  2. Hash

    ff9c28f3bead63be8bf47043610b3d21

    f1434d5474d945360db45aca9ddcf27225df84f8

  1. Archive (2)

  2. FilenameMd5File type
    zeph.exe
    ccd1c405d02dccbeeff6b77ddfd914fc
    PE32+ executable (console) x86-64, for MS Windows, 6 sections
    ���������ڿ�˵��.txt
    9c5aacc716c8277d348bb31fb44d3b80
    Unicode text, UTF-8 text

    Detections

    AnalyzerVerdictAlert
    Public Nextron YARA rulesmalware
    Detects mining pool protocol string in Executable

JavaScript (0)

HTTP Transactions (3)

URLIPResponseSize
ocsp.trust-provider.cn/
112.50.95.96 600 B
ocsp.trust-provider.cn/
150.139.142.18 600 B
pool.cn.com/tunnel/zeph.zip
47.129.4.240200 OK4.9 MB