Report Overview
Submitted URL
www.netway.net.cn/upload/202102241609029rURyB.zip
IP
211.152.51.235
ASN
#4811 China Telecom Group
Submitted
2024-04-23 09:50:18
Access
public
Website Title
about:privatebrowsing
Final URL
about:privatebrowsing
Tags
urlquery detections
No alerts detected
Detections
urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
1
Domain Summary
Domain / FQDN | Rank | Registered | First Seen | Last Seen | Sent | Received | IP |
---|---|---|---|---|---|---|---|
www.netway.net.cn | unknown | 1998-01-24 | 2017-04-16 | 2023-10-10 | 419 B | 20 MB | 211.152.51.235 |
Related reports
Network Intrusion Detection Systems
Suricata /w Emerging Threats Pro
Threat Detection Systems
Public InfoSec YARA rules
No alerts detected
Files detected
URL
www.netway.net.cn/upload/202102241609029rURyB.zip
IP
211.152.51.235
ASN
#4811 China Telecom Group
File type
Zip archive data, at least v2.0 to extract, compression method=deflate
Size
20 MB (19918198 bytes)
Hash
e6696116efc2ed0ebeea0eebb158213d
36abbb3c3a367f36362ecd63ccf7d61da0e673b4
Archive (1)
Filename | Md5 | File type | |||
---|---|---|---|---|---|
HT-SSLVPN-7.0.39 (3).exe | 1795ba3bcbe990e23a361073e9306b3b
| PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive, 5 sections |
Detections
Analyzer | Verdict | Alert |
---|---|---|
YARAhub by abuse.ch | malware | Detect files is `SliverFox` malware |
JavaScript (0)
HTTP Transactions (1)
URL | IP | Response | Size | |
---|---|---|---|---|
www.netway.net.cn/upload/202102241609029rURyB.zip | 211.152.51.235 | 200 OK | 20 MB | |
HTTP Headers
| ||||