Report - www.gol2777.com/apps/ole777idr-setup-3.1.0.exe?=v0.1/

Report Overview

Visitedpublic

2025-03-18 13:16:15

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Host Summary

Host	Rank	Registered	First Seen	Last Seen	Sent	Received	IP	Fingerprints
www.gol2777.com	unknown	2022-06-24	2022-06-29	2024-01-14	521 B	49 MB	172.67.174.165

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

Scan Date	Severity	Indicator	Alert
2025-03-18	medium	www.gol2777.com/apps/ole777idr-setup-3.1.0.exe?=v0.1/	Detect pe file that no import table

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

File detected

URL

www.gol2777.com/apps/ole777idr-setup-3.1.0.exe?=v0.1/

IP / ASN

172.67.174.165

#13335 CLOUDFLARENET

File Overview

File TypePE32 executable (GUI) Intel 80386, for MS Windows, 5 sections

Size49 MB (48950304 bytes)

MD58434c595ec16aee127a4f691f38499d0

SHA1353a3126c41e6c308065b614e5d413a84cf66791

SHA256fca9b57714b2e18c87f3674209777a7f39777588cdb5eda69d1de7b8621988b8

Detections

Analyzer	Verdict	Alert
YARAhub by abuse.ch	malware	Detect pe file that no import table

JavaScript (0)

HTTP Transactions (1)

URL IP Response Size

GET www.gol2777.com/apps/ole777idr-setup-3.1.0.exe?=v0.1/

172.67.174.165

200 OK

49 MB

URL

www.gol2777.com/apps/ole777idr-setup-3.1.0.exe?=v0.1/

IP / ASN

172.67.174.165

#13335 CLOUDFLARENET

Requested byN/A

Resource Info

File typePE32 executable (GUI) Intel 80386, for MS Windows, 5 sections

First Seen2025-03-18

Last Seen2025-03-18

Times Seen1

Size49 MB (48950304 bytes)

MD58434c595ec16aee127a4f691f38499d0

SHA1353a3126c41e6c308065b614e5d413a84cf66791

SHA256fca9b57714b2e18c87f3674209777a7f39777588cdb5eda69d1de7b8621988b8

Detections

Analyzer	Verdict	Alert
YARAhub by abuse.ch	malware	Detect pe file that no import table

HTTP Headers

GET /apps/ole777idr-setup-3.1.0.exe?=v0.1/ HTTP/1.1
Host: www.gol2777.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Tue, 18 Mar 2025 13:15:54 GMT
content-type: application/octet-stream
content-length: 48950304
last-modified: Mon, 17 Mar 2025 08:07:46 GMT
etag: "67d7d852-2eaec20"
expires: Tue, 18 Mar 2025 17:15:53 GMT
cache-control: public, max-age=14400
content-security-policy: frame-ancestors https://ole777-indo.com
access-control-allow-origin: *
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8YkzreMathhQPvMDdyQeXm6EAuJ%2BiGDzRkVve7CKRvEnM5%2ByLv1piFMHSqovdQz7glL%2BsdXUbaqHQ0pJpkUFT1JKkl8K5BE9311C3j%2BQSRhKVN%2BY4m6hD%2FB5oMxApMUDmvg%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 92250057fa2ecab5-HAM
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=12995&min_rtt=12706&rtt_var=2433&sent=7&recv=10&lost=0&retrans=0&sent_bytes=3176&recv_bytes=1153&delivery_rate=294708&cwnd=253&unsent_bytes=0&cid=3877d4a91b580ba6&ts=1424&x=0"
X-Firefox-Spdy: h2