Report - conspiracy.hu/releases/cns!rgba

Report Overview

Submitted URL
conspiracy.hu/releases/cns!rgba_luxo4k.zip
IP
95.140.42.194
ASN
#60071 RendszerNET Kft.
Submitted
2024-04-16 07:03:43
Access
public
Website Title
about:privatebrowsing
Final URL
about:privatebrowsing
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
2

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
conspiracy.hu	unknown	2004-09-21	2012-05-22	2024-04-13	989 B	5.4 kB	95.140.42.194

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

Files detected

URL
conspiracy.hu/files/cns!rgba_luxo4k.zip
IP
95.140.42.194
ASN
#60071 RendszerNET Kft.

File type
Zip archive data, at least v1.0 to extract, compression method=store
Size
4.6 kB (4572 bytes)
Hash
00e566d65f9dc769b13ed56b454f8b07
d414269d33eed8b00b7d8f92053e8e4fe4dc023e
a24917bf0613982a7e552cab2777219f920a47927a940e30e4be4c04d9a65599

Archive (3)

Filename

Md5

File type

file_id.diz

1ab79e74b621d44796f5a5f397670cf2

ASCII text, with CRLF line terminators

cns!rgba_luxo4k.exe

2ce18a4e033eba4afba434590bd5edd6

PE32 executable (GUI) Intel 80386 (stripped to external PDB) Mono/.Net assembly, for MS Windows

cns!rgba_luxo4k.txt

04e10ce8d6c21968043dc941262724ca

ASCII text, with CRLF line terminators

Detections

Analyzer	Verdict	Alert
VirusTotal	suspicious	VirusTotal - Scan result 8/57

JavaScript (0)

HTTP Transactions (2)

URL IP Response Size

conspiracy.hu/releases/cns!rgba_luxo4k.zip

95.140.42.194

301 Moved Permanently

255 B

URL User Request GET HTTP/1.1
conspiracy.hu/releases/cns!rgba_luxo4k.zip
IP
95.140.42.194:443
ASN
#60071 RendszerNET Kft.

Certificate
IssuerLet's Encrypt
Subjectmail.zoom.conspiracy.hu
Fingerprint1E:AD:0F:60:85:6F:DA:72:C8:8A:FF:8D:49:66:BF:63:EC:26:FD:3C
ValidityThu, 04 Apr 2024 08:33:33 GMT - Wed, 03 Jul 2024 08:33:32 GMT

File type
HTML document, ASCII text
Size
255 B (255 bytes)
Hash
82d5bc0040eb117a55be71f2b3da412c
45a36e604a428f235215a00ff0e9301f1a3abf0b
f994c092ac75bc2e81d9e1b8ce8455dd4973f42fcf680d41fc60de31fa8a4160

HTTP Headers

GET /releases/cns!rgba_luxo4k.zip HTTP/1.1
Host: conspiracy.hu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 301 Moved Permanently
Date: Tue, 16 Apr 2024 07:03:17 GMT
Server: Apache
Location: https://conspiracy.hu/files/cns!rgba_luxo4k.zip
Content-Length: 255
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1

conspiracy.hu/files/cns!rgba_luxo4k.zip

95.140.42.194

200 OK

4.6 kB

URL User Request GET HTTP/1.1
conspiracy.hu/files/cns!rgba_luxo4k.zip
IP
95.140.42.194:443
ASN
#60071 RendszerNET Kft.

Certificate
IssuerLet's Encrypt
Subjectmail.zoom.conspiracy.hu
Fingerprint1E:AD:0F:60:85:6F:DA:72:C8:8A:FF:8D:49:66:BF:63:EC:26:FD:3C
ValidityThu, 04 Apr 2024 08:33:33 GMT - Wed, 03 Jul 2024 08:33:32 GMT

File type
Zip archive data, at least v1.0 to extract, compression method=store
Size
4.6 kB (4572 bytes)
Hash
00e566d65f9dc769b13ed56b454f8b07
d414269d33eed8b00b7d8f92053e8e4fe4dc023e
a24917bf0613982a7e552cab2777219f920a47927a940e30e4be4c04d9a65599

Detections

Analyzer	Verdict	Alert
VirusTotal	suspicious	VirusTotal - Scan result 8/57

HTTP Headers

GET /files/cns!rgba_luxo4k.zip HTTP/1.1
Host: conspiracy.hu
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Tue, 16 Apr 2024 07:03:17 GMT
Server: Apache
Last-Modified: Sat, 03 Nov 2007 17:41:44 GMT
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: br
Content-Length: 4572
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: application/zip

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

Files detected

URL

IP

ASN

File type

Size

Hash

Archive (3)

Detections

JavaScript (0)

HTTP Transactions (2)

URL User Request GET HTTP/1.1

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers

URL User Request GET HTTP/1.1

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers