Report - 8b8b.ru/mame_zip/Pretty_Soldier_Sailor_Moon

Report Overview

Submitted URL
8b8b.ru/mame_zip/Pretty_Soldier_Sailor_Moon_(95,03,22B).zip
IP
37.140.192.156
ASN
#197695 Domain names registrar REG.RU, Ltd
Submitted
2024-04-24 11:38:18
Access
public
Website Title
about:privatebrowsing
Final URL
about:privatebrowsing
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
1

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
8b8b.ru	unknown	2009-01-19	2016-10-05	2023-07-28	513 B	14 MB	37.140.192.156

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

Files detected

URL
8b8b.ru/mame_zip/Pretty_Soldier_Sailor_Moon_(95,03,22B).zip
IP
37.140.192.156
ASN
#197695 Domain names registrar REG.RU, Ltd

File type
Zip archive data, at least v2.0 to extract, compression method=deflate
Size
14 MB (14219792 bytes)
Hash
41c2a6a8a0d3d271c8497efe11a0d119
17c2d7dab123f1765e026401a0e8c137a1e29f91
bd443de11b0b90e5438d10608ed0f49aa131cb59f664e0428f5bc7824ae6d090

Archive (17)

Filename

Md5

File type

bpsm.u46

5cd742eec8ffe3c8de53e0e1bb77445a

data

bpsm.u47

e72e39eba42447123af7ee2939a64b53

data

bpsm.u48

590c330458ebee37d6c86ba00f3f5c7e

data

bpsm.u53

b610c8e5baaee7a93437e2251d7c5c8a

data

bpsm.u54

14f4a272c5828a079f5bfc56473ed81c

data

bpsm.u57

0354cc5c573a78f94d5cdfa7ddba8156

data

bpsm.u58

c57ede49a9350e61843599725410b250

data

bpsm.u60

b08850484f121f2c3f9752e85cbf7be7

data

bpsm.u61

9ec8b75b4e75427d5b73abb1e70378f4

data

bpsm.u62

560743bef96082112868d0d6093942db

data

bpsm.u63

1ffec122b6be24ab373d5ea198683fcc

DIY-Thermocam raw data (Lepton 3.x), scale 0-0, spot sensor temperature 0.000000, unit celsius, color scheme 0, minimum point enabled, calibration: offset 8591245312.000000, slope 3.004898

bpsm.u64

a0cdbcc2d032b71587e04f848bff26d8

data

bpsm.u65

36b9b84cd4934c72fbf22a3cc8364778

data

bpsm.u76

3b86d97ac6b46a435a999ecbbd5bc091

data

bpsm.u77

33e4e537b8e7b78997c5556fefc15a28

data

bpsm945a.u45

cf810faa9e13ccc2cc0daeabc4c6c2f3

data

bpsm945a.u9

8c36f157b352b30a8ec1623ae7e1bbc8

data

Detections

Analyzer	Verdict	Alert
YARAhub by abuse.ch	malware	meth_get_eip

JavaScript (0)

HTTP Transactions (1)

URL IP Response Size

	URL	IP	Response	Size
	8b8b.ru/mame_zip/Pretty_Soldier_Sailor_Moon_(95,03,22B).zip	37.140.192.156	200 OK	14 MB
URL User Request GET HTTP/2 8b8b.ru/mame_zip/Pretty_Soldier_Sailor_Moon_(95,03,22B).zip IP 37.140.192.156:443 ASN #197695 Domain names registrar REG.RU, Ltd Certificate IssuerLet's Encrypt Subject8b8b.ru FingerprintE3:DA:27:28:83:8B:7E:CF:69:E4:7A:91:99:CA:4B:5A:92:AE:1A:2A ValidityWed, 28 Feb 2024 12:32:22 GMT - Tue, 28 May 2024 12:32:21 GMT File type Zip archive data, at least v2.0 to extract, compression method=deflate Size 14 MB (14219792 bytes) Hash 41c2a6a8a0d3d271c8497efe11a0d119 17c2d7dab123f1765e026401a0e8c137a1e29f91 bd443de11b0b90e5438d10608ed0f49aa131cb59f664e0428f5bc7824ae6d090 HTTP Headers `GET /mame_zip/Pretty_Soldier_Sailor_Moon_(95,03,22B).zip HTTP/1.1 Host: 8b8b.ru User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` `HTTP/2 200 OK server: nginx date: Wed, 24 Apr 2024 11:37:48 GMT content-type: application/zip content-length: 14219792 last-modified: Tue, 20 Dec 2022 21:00:00 GMT etag: "63a22250-d8fa10" expires: Wed, 01 May 2024 11:37:48 GMT cache-control: max-age=604800 strict-transport-security: max-age=31536000; accept-ranges: bytes X-Firefox-Spdy: h2`

8b8b.ru/mame_zip/Pretty_Soldier_Sailor_Moon_(95,03,22B).zip

37.140.192.156

200 OK

14 MB

URL User Request GET HTTP/2
8b8b.ru/mame_zip/Pretty_Soldier_Sailor_Moon_(95,03,22B).zip
IP
37.140.192.156:443
ASN
#197695 Domain names registrar REG.RU, Ltd

Certificate
IssuerLet's Encrypt
Subject8b8b.ru
FingerprintE3:DA:27:28:83:8B:7E:CF:69:E4:7A:91:99:CA:4B:5A:92:AE:1A:2A
ValidityWed, 28 Feb 2024 12:32:22 GMT - Tue, 28 May 2024 12:32:21 GMT

File type
Zip archive data, at least v2.0 to extract, compression method=deflate
Size
14 MB (14219792 bytes)
Hash
41c2a6a8a0d3d271c8497efe11a0d119
17c2d7dab123f1765e026401a0e8c137a1e29f91
bd443de11b0b90e5438d10608ed0f49aa131cb59f664e0428f5bc7824ae6d090

HTTP Headers

GET /mame_zip/Pretty_Soldier_Sailor_Moon_(95,03,22B).zip HTTP/1.1
Host: 8b8b.ru
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Wed, 24 Apr 2024 11:37:48 GMT
content-type: application/zip
content-length: 14219792
last-modified: Tue, 20 Dec 2022 21:00:00 GMT
etag: "63a22250-d8fa10"
expires: Wed, 01 May 2024 11:37:48 GMT
cache-control: max-age=604800
strict-transport-security: max-age=31536000;
accept-ranges: bytes
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

Files detected

URL

IP

ASN

File type

Size

Hash

Archive (17)

Detections

JavaScript (0)

HTTP Transactions (1)

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers