Report - site.albaseet.net/albaseet

Report Overview

Visitedpublic

2023-10-22 08:25:22

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Host Summary

Host	Rank	Registered	First Seen	Last Seen	Sent	Received	IP	Fingerprints
site.albaseet.net	unknown	2019-04-24	2022-06-26 23:59:48	2023-10-07 12:17:32	504 B	23 MB	104.21.20.95

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

File detected

URL

site.albaseet.net/albaseet_plus/64/ALBASEET+.exe

IP / ASN

104.21.20.95

#13335 CLOUDFLARENET

File Overview

File TypePE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows\012- data

Size23 MB (23173632 bytes)

MD5463a1f23562834ae0a9c8f23b2623024

SHA1bbfd3883b6dd7e0b672ca329734859e04c402082

SHA2560f959cfd09952441cdca8b4e8260dfed032e3d5f598efdd751ab116e5362e4b6

Detections

Analyzer	Verdict	Alert
VirusTotal	suspicious	VirusTotal - Scan result 6/57

JavaScript (0)

HTTP Transactions (1)

URL IP Response Size

GET site.albaseet.net/albaseet_plus/64/ALBASEET+.exe

104.21.20.95

200 OK

23 MB

URL

site.albaseet.net/albaseet_plus/64/ALBASEET+.exe

IP / ASN

104.21.20.95

#13335 CLOUDFLARENET

Requested byN/A

Resource Info

File typePE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows\012- data

First Seen2023-10-22

Last Seen2023-10-22

Times Seen1

Size23 MB (23173632 bytes)

MD5463a1f23562834ae0a9c8f23b2623024

SHA1bbfd3883b6dd7e0b672ca329734859e04c402082

SHA2560f959cfd09952441cdca8b4e8260dfed032e3d5f598efdd751ab116e5362e4b6

Certificate Info

IssuerGoogle Trust Services LLC

Subjectalbaseet.net

Fingerprint1C:D7:4B:30:0E:30:5F:B1:CE:4B:54:11:02:43:52:F6:72:3F:34:B7

ValidityFri, 20 Oct 2023 09:03:57 GMT - Thu, 18 Jan 2024 09:03:56 GMT

Detections

Analyzer	Verdict	Alert
VirusTotal	suspicious	VirusTotal - Scan result 6/57

HTTP Headers

GET /albaseet_plus/64/ALBASEET+.exe HTTP/1.1
Host: site.albaseet.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sun, 22 Oct 2023 08:25:06 GMT
content-type: application/octet-stream
content-length: 23173632
last-modified: Sat, 21 Oct 2023 09:44:14 GMT
etag: "6515e42634da1:0"
x-powered-by: ASP.NET
x-powered-by-plesk: PleskWin
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=AyTSSSKI6B7HUeVrYPPt6YZ%2BT%2Fq9efMnt9gcb6zbl3EV7%2F4j%2Bra3Zhm4D67DFRSbud2JIlBn5HqoS%2Bb7SdiO%2FA94ME%2F8Mp%2FoEj3E4LsZ9mYQacsDjSWdCohCUjV4mIMR6cCPNQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 81a05901dec75694-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2