Report - ahmettoprak.com/contGptv5.6.zip

Report Overview

Submitted URL
ahmettoprak.com/contGptv5.6.zip
IP
46.31.77.53
ASN
#212219 Talha Bogaz
Submitted
2024-03-29 13:00:51
Access
public
Website Title
about:privatebrowsing
Final URL
about:privatebrowsing
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
5

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
ahmettoprak.com	unknown	2022-02-13	2015-09-21	2024-03-28	485 B	10 MB	46.31.77.53

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

Files detected

URL
ahmettoprak.com/contGptv5.6.zip
IP
46.31.77.53
ASN
#212219 Talha Bogaz

File type
Zip archive data, at least v2.0 to extract, compression method=deflate
Size
10 MB (10330224 bytes)
Hash
60069ffe564a85c9d3fe3752aab3658b
60cedc4b3e9375e1f35337e1ab3a00d7162ef726
3f46d02cdb912968a198956fda50eb296e125d4b4b9dd7732c7d45b41072a49b

Archive (46)

Filename

Md5

File type

ServiceStack.Interfaces.dll

72acfeec2b807babf9d4f0a04d519af2

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

ServiceStack.Text.dll

44f9d808031e4286ab978c6625c5d776

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

Svg.dll

ce507fd3028c31ac3072f2d853a771c8

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

System.CodeDom.dll

34f6f6df02024f033c0d9cecc9e19f5e

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

System.Drawing.Common.dll

be22da1cad42253f0c6e21b74ddc69d9

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

System.Management.dll

3f0374ce99148b086aa42355d80f4f47

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

System.Security.Cryptography.Pkcs.dll

d032a8e7997b4b2fd4a9ca0cd05ebfd4

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

Update.dll

c99fe6ffc5d43fbd6157ee0ebbf6b25c

PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

Update.exe

0d848d26f2c5f9b4892bd22923a1efec

PE32+ executable (GUI) x86-64, for MS Windows, 7 sections

Update.runtimeconfig.json

d720176a229e9d969b40fabeb0baf62e

JSON text data

ContGpt.resources.dll

1f17768e49ebd852aef7d4a41171656c

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

libcairo.2.dylib

f2283f83c42ed873bf33ddcf112069c6

Mach-O 64-bit x86_64 dynamically linked shared library, flags:<NOUNDEFS|DYLDLINK|TWOLEVEL|NO_REEXPORTED_DYLIBS>

libfontconfig.1.dylib

6df9564f3ecdb9925ab2b577ffda6241

Mach-O 64-bit x86_64 dynamically linked shared library, flags:<NOUNDEFS|DYLDLINK|TWOLEVEL|NO_REEXPORTED_DYLIBS>

libfreetype.6.dylib

6ed27798ad791ceed7147400507ac349

Mach-O 64-bit x86_64 dynamically linked shared library, flags:<NOUNDEFS|DYLDLINK|TWOLEVEL|NO_REEXPORTED_DYLIBS>

libgdiplus-lighthouse.dylib

2dd0778a547acb19bbd5b4b8aa60bbeb

Mach-O 64-bit x86_64 dynamically linked shared library, flags:<NOUNDEFS|DYLDLINK|TWOLEVEL|NO_REEXPORTED_DYLIBS>

libgdiplus.dylib

bcfea27575e25dac881c31e346cf9a7f

Mach-O 64-bit x86_64 dynamically linked shared library, flags:<NOUNDEFS|DYLDLINK|TWOLEVEL|NO_REEXPORTED_DYLIBS>

libgif.7.dylib

ca4f6fcf7b3e2f8477a843efd2762278

Mach-O 64-bit x86_64 dynamically linked shared library, flags:<NOUNDEFS|DYLDLINK|TWOLEVEL|NO_REEXPORTED_DYLIBS>

libglib-2.0.0.dylib

027ee674be9693c6289cad71d79ba712

Mach-O 64-bit x86_64 dynamically linked shared library, flags:<NOUNDEFS|DYLDLINK|TWOLEVEL|NO_REEXPORTED_DYLIBS>

libintl.8.dylib

25c5dd886d0eaecf3573a1697f4c18df

Mach-O 64-bit x86_64 dynamically linked shared library, flags:<NOUNDEFS|DYLDLINK|TWOLEVEL|NO_REEXPORTED_DYLIBS>

libjpeg.9.dylib

cbc59972fec6d859deb71805c4ad9849

Mach-O 64-bit x86_64 dynamically linked shared library, flags:<NOUNDEFS|DYLDLINK|TWOLEVEL|NO_REEXPORTED_DYLIBS>

libpcre.1.dylib

9fbfacc8854171db57dc8e93358b35e1

Mach-O 64-bit x86_64 dynamically linked shared library, flags:<NOUNDEFS|DYLDLINK|TWOLEVEL|NO_REEXPORTED_DYLIBS>

libpixman-1.0.dylib

676d403ac03f7f81b0045dc2652b7e24

Mach-O 64-bit x86_64 dynamically linked shared library, flags:<NOUNDEFS|DYLDLINK|TWOLEVEL|NO_REEXPORTED_DYLIBS|HAS_TLV_DESCRIPTORS>

libpng16.16.dylib

6c191a46167cc86e5eaeeaa337697886

Mach-O 64-bit x86_64 dynamically linked shared library, flags:<NOUNDEFS|DYLDLINK|TWOLEVEL|NO_REEXPORTED_DYLIBS>

libtiff.5.dylib

078138a5ceb1fa80e095b8888a90f972

Mach-O 64-bit x86_64 dynamically linked shared library, flags:<NOUNDEFS|DYLDLINK|TWOLEVEL|NO_REEXPORTED_DYLIBS>

Microsoft.Win32.SystemEvents.dll

86e139d290234bb43917cd5ca8c1944c

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

System.Drawing.Common.dll

02991bc8ebfd556c5eb06276b849d273

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

System.Management.dll

2747aa1b689032ab6f9ae503ffaa1b1c

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

System.Security.Cryptography.Pkcs.dll

763ef5891e2bbfa16fcd439f6a44f721

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

ContGpt.deps.json

d3738259413af0a605b4bfbca87e474b

JSON text data

ContGpt.dll

f93b691aac6e5ed1ea1e9210a0e1c507

PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

ContGpt.exe

7d3f849f7f9261341b249d9e3a4df3a2

PE32+ executable (GUI) x86-64, for MS Windows, 7 sections

ContGpt.runtimeconfig.json

815144559dbc206641ba9a37ab7e0c71

JSON text data

EPPlus.dll

a9bbaf98efbb3d6a3fa1a61303b0ccbf

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

EPPlus.Interfaces.dll

f0afb9b6adfe85178e205603080cd54d

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

EPPlus.System.Drawing.dll

b170b96b78f2eec8b027852359eb05a0

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

ExCSS.dll

ba0ae58127bff2f6b90e3e657c3f9cfa

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

Microsoft.Bcl.AsyncInterfaces.dll

70d5e04957ca93f7db2a9a2f3a09ec53

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

Microsoft.IO.RecyclableMemoryStream.dll

dec6e827e9155eb95e1e7de2129a8ad7

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

Microsoft.Win32.SystemEvents.dll

79d6c2a9de95fd50eda86bdcdea58698

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

Newtonsoft.Json.dll

adf3e3eecde20b7c9661e9c47106a14a

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

OpenAI.GPT3.dll

fa14eb645ccb9c083bd48ae8810e6639

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

OpenAI_API.dll

857f5cf72b26b36297234d57b88c80ec

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

runtime.osx.10.10-x64.CoreCompat.System.Drawing.dll

ba50d24fc3e7c47d9ad0f977c927c626

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

ServiceStack.Client.dll

072fe0bf0dbab222c0c2e9d68b46845e

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

ServiceStack.Common.dll

eb5faf8b0e18a61aea6c0876a38d8f14

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

ServiceStack.dll

af92bc76dab184e48649575ddadede0a

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

Detections

Analyzer	Verdict	Alert
Public InfoSec YARA rules	malware	Identifies Avaddon ransomware.
VirusTotal	suspicious	VirusTotal - Scan result 1/64

JavaScript (0)

HTTP Transactions (1)

URL IP Response Size

ahmettoprak.com/contGptv5.6.zip

46.31.77.53

200 OK

10 MB

URL User Request GET HTTP/2
ahmettoprak.com/contGptv5.6.zip
IP
46.31.77.53:443
ASN
#212219 Talha Bogaz

Certificate
IssuerLet's Encrypt
Subjectahmettoprak.com
Fingerprint5B:A1:35:1F:39:ED:F2:BD:AC:BD:C9:64:73:E8:2B:49:2F:EC:E5:D1
ValidityThu, 28 Mar 2024 03:45:19 GMT - Wed, 26 Jun 2024 03:45:18 GMT

File type
Zip archive data, at least v2.0 to extract, compression method=deflate
Size
10 MB (10330224 bytes)
Hash
60069ffe564a85c9d3fe3752aab3658b
60cedc4b3e9375e1f35337e1ab3a00d7162ef726
3f46d02cdb912968a198956fda50eb296e125d4b4b9dd7732c7d45b41072a49b

Detections

Analyzer	Verdict	Alert
VirusTotal	suspicious	VirusTotal - Scan result 1/64

HTTP Headers

GET /contGptv5.6.zip HTTP/1.1
Host: ahmettoprak.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Fri, 29 Mar 2024 13:00:21 GMT
content-type: application/zip
content-length: 10330224
last-modified: Fri, 16 Feb 2024 11:55:59 GMT
etag: "65cf4d4f-9da070"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

Files detected

URL

IP

ASN

File type

Size

Hash

Archive (46)

Detections

JavaScript (0)

HTTP Transactions (1)

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers