Report - route9w.com/rockxp.exe

Report Overview

Visitedpublic

2023-09-18 23:53:25

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Host Summary

Host	Rank	Registered	First Seen	Last Seen	Sent	Received	IP	Fingerprints
route9w.com	unknown	2003-02-05	2015-12-21 10:42:24	2023-07-25 08:31:01	478 B	431 kB	169.62.176.234

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

File detected

URL

route9w.com/rockxp.exe

IP / ASN

169.62.176.234

#36351 SOFTLAYER

File Overview

File TypePE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed, RAR self-extracting archive\012- data

Size431 kB (430775 bytes)

MD528a9ac11dfa1be9184bb01252e025b47

SHA19d657f73fc028989f0a8ae89ef79e63a9a113b1f

SHA25647c2209bf39079192197b443751968d610a024803c5ad183b5d95dbf2f74d700

Detections

Analyzer	Verdict	Alert
VirusTotal	malicious	VirusTotal - Scan result 39/69

JavaScript (0)

HTTP Transactions (1)

URL IP Response Size

GET route9w.com/rockxp.exe

169.62.176.234

200 OK

431 kB

URL

route9w.com/rockxp.exe

IP / ASN

169.62.176.234

#36351 SOFTLAYER

Requested byN/A

Resource Info

File typePE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed, RAR self-extracting archive\012- data

First Seen2023-08-19

Last Seen2025-05-04

Times Seen4

Size431 kB (430775 bytes)

MD528a9ac11dfa1be9184bb01252e025b47

SHA19d657f73fc028989f0a8ae89ef79e63a9a113b1f

SHA25647c2209bf39079192197b443751968d610a024803c5ad183b5d95dbf2f74d700

Certificate Info

IssuerLet's Encrypt

Subjectroute9w.com

Fingerprint7A:18:8F:C4:F0:D9:C0:FD:A1:E0:38:E5:8A:80:5C:03:C6:5F:10:B4

ValidityTue, 25 Jul 2023 05:29:14 GMT - Mon, 23 Oct 2023 05:29:13 GMT

Detections

Analyzer	Verdict	Alert
VirusTotal	malicious	VirusTotal - Scan result 39/69

HTTP Headers

GET /rockxp.exe HTTP/1.1
Host: route9w.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Mon, 18 Sep 2023 23:53:08 GMT
content-type: application/octet-stream
content-length: 430775
last-modified: Sun, 09 Jul 2006 21:01:07 GMT
etag: "44b16e93-692b7"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2