Report Overview
Visitedpublic
2025-02-12 15:03:20
Tags
Submit Tags
URL
files.sshnuke.net/cemuhook_1112_0554.zip
Finishing URL
about:privatebrowsing
IP / ASN
172.67.199.85
Title
about:privatebrowsing
Detections
urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
0
Host Summary
| Host | Rank | Registered | First Seen | Last Seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
files.sshnuke.net 1 alert(s) on this Host | unknown | 2013-12-07 | 2017-03-25 | 2025-02-10 | 506 B | 6.3 MB | 172.67.199.85 |
Related reports
Threat Detection Systems
Public InfoSec YARA rules
No alerts detected
OpenPhish
No alerts detected
PhishTank
No alerts detected
Quad9 DNS
No alerts detected
ThreatFox
No alerts detected
File detected
URL
files.sshnuke.net/cemuhook_1112_0554.zip
IP / ASN
172.67.199.85
File Overview
File TypeZip archive data, at least v2.0 to extract, compression method=deflate
Size6.3 MB (6278236 bytes)
MD5812d1cc155155da1385d99853da6d737
SHA1a254d60855961040571269cad915cc44df9563ac
Archive (11)
| Filename | MD5 | File type |
|---|---|---|
| dbghelp.dll | 65c9ef1e28e3dbc2a03c95d372b0175b | PE32+ executable (DLL) (GUI) x86-64, for MS Windows, 10 sections |
| Go to project website for updates.url | 460ef3f85b08174f6b99ea72294958e2 | MS Windows 95 Internet shortcut text (URL=<https://sshnuke.net/cemuhook/>), ASCII text, with CRLF line terminators |
| 0005000010175d00.ini | 9c398e12936dce7c759141872d805749 | ASCII text, with CRLF line terminators |
| 0005000010175c00.ini | f2ceacfe262da2a9476c0409cf143e56 | ASCII text, with CRLF line terminators |
| 0005000010175b00.ini | ea653fe1288622be565355d17cf68845 | ASCII text, with CRLF line terminators |
| 0005000010177800.ini | eb93eb214f1649fa12a3f84f8ea354ec | ASCII text, with CRLF line terminators |
| sample_patches.zip | 0c6dd9f3a2660a4789bb952cd4ed8f5f | Zip archive data, at least v1.0 to extract, compression method=store |
| keystone.dll | 861abbc1bdd2380e00c1a3d6ed557e4d | PE32+ executable (DLL) (console) x86-64, for MS Windows, 7 sections |
| patches.txt | 9d2e17580887c8a4b37ef0fe8116ce84 | ASCII text |
| rules.txt | feacf6b02d31f484af9a6cbc48f6eeab | ASCII text |
| Get latest graphic packs from HERE.url | 2044071fb6b01db25ce837fa61bc2347 | MS Windows 95 Internet shortcut text (URL=<https://slashiee.github.io/cemu_graphic_packs/>), ASCII text, with CRLF line terminators |
Detections
| Analyzer | Verdict | Alert |
|---|---|---|
| YARAhub by abuse.ch | malware | files - file ~tmp01925d3f.exe |
| VirusTotal | suspicious |
JavaScript (0)
No JavaScripts
HTTP Transactions (1)
| URL | IP | Response | Size |
|---|