| justgetflux.com/flux-setup4-134.exe?update=1 | 216.176.200.22 | | 138 B |
URL justgetflux.com/flux-setup4-134.exe?update=1 IP216.176.200.22:0 ASN#4213 EVOCATIVE-GLOBAL
File typeHTML document, ASCII text, with CRLF line terminators Hashaff950cab4c0265e21d401db15f1026d f03e18461817f7a6546c8bf8fa8d686d7e30aca0 753e0dd54f28c4f7009b9c0b18a68aed175416bd8b7d134858264586eaac56f0
GET /flux-setup4-134.exe?update=1 HTTP/1.1
Host: justgetflux.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Moved Temporarily
Server: nginx
Date: Fri, 19 Apr 2024 23:24:15 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=35
Location: https://justgetflux.b-cdn.net/flux-setup4-134.exe?update=1
Set-Cookie: uid=2LDIFmYi/R8/On3ML/pwAg==; expires=Sat, 19-Apr-25 23:24:15 GMT; path=/
|
| justgetflux.b-cdn.net/flux-setup4-134.exe?update=1 | 138.199.36.7 | | 687 kB |
URL justgetflux.b-cdn.net/flux-setup4-134.exe?update=1 IP138.199.36.7:0 ASN#60068 Datacamp Limited
File typePE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive, 5 sections Size687 kB (686736 bytes) Hashebf5b897e0e4b90143764fc39e0c5a21 244eb29a512f1cc980bcfdc3bda2c62e1954c6d7 b53390dba0e0c227341f3c688be3aef91455c4f926e6527af6ce1e4acf74a7b3
Analyzer | Verdict | Alert | YARAhub by abuse.ch | malware | Detect files is `SliverFox` malware |
GET /flux-setup4-134.exe?update=1 HTTP/1.1
Host: justgetflux.b-cdn.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 19 Apr 2024 23:24:16 GMT
content-type: application/octet-stream
content-length: 686736
server: BunnyCDN-DE1-1047
cdn-pullzone: 40586
cdn-uid: a4dbc144-ce45-4f49-a651-2c2e7608da9c
cdn-requestcountrycode: NO
cache-control: public, max-age=180
last-modified: Wed, 21 Feb 2024 23:39:51 GMT
cdn-cachedat: 03/05/2024 02:55:54
cdn-proxyver: 1.04
cdn-requestpullcode: 206
cdn-requestpullsuccess: True
cdn-edgestorageid: 874
cdn-status: 200
cdn-requestid: 46fae1df5c77010e980ecd89349f4fb5
cdn-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
|