Report - dl1a.gamedl.ru/download/yk709fk6i19kv3t45i04gcqkbhl5lje3/H1/ee09b80a7a270257396b30d9d1de73b5832fc259159952b595eb3e003c172395/1758933/RepoCheatV.zip

Report Overview

Visited public
2025-04-14 17:18:32
Tags
URL
dl1a.gamedl.ru/download/yk709fk6i19kv3t45i04gcqkbhl5lje3/H1/ee09b80a7a270257396b30d9d1de73b5832fc259159952b595eb3e003c172395/1758933/RepoCheatV.zip
Finishing URL
about:privatebrowsing
IP / ASN
212.42.38.245
#50313 Teslatel LLC
Title
about:privatebrowsing

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
dl1a.gamedl.ru	unknown	2007-05-07	2018-07-07	2025-04-07	615 B	914 kB	212.42.38.245

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

Files detected

URL
dl1a.gamedl.ru/download/yk709fk6i19kv3t45i04gcqkbhl5lje3/H1/ee09b80a7a270257396b30d9d1de73b5832fc259159952b595eb3e003c172395/1758933/RepoCheatV.zip
IP
212.42.38.245
ASN
#50313 Teslatel LLC

File type
Zip archive data, at least v2.0 to extract, compression method=deflate
Size
913 kB (913392 bytes)
Hash
ec3563fe3056a8a3397c418d00845bed
a109e4f2de90f83d35cf01856070be3bbe87b1da
ee09b80a7a270257396b30d9d1de73b5832fc259159952b595eb3e003c172395

Archive (3)

Filename

Md5

File type

bJAjO.dll

01f4bd42c6c0c0eae3a818e70960e455

PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

injector.exe

68c779dcf2e547db71887e98de7051f2

PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

libs.zip

200221dc592ab09c3df03ebf868fa196

Zip archive data, at least v2.0 to extract, compression method=store

Detections

Analyzer	Verdict	Alert
VirusTotal	suspicious	VirusTotal - Scan result 9/67

JavaScript (0)

HTTP Transactions (1)

URL IP Response Size

dl1a.gamedl.ru/download/yk709fk6i19kv3t45i04gcqkbhl5lje3/H1/ee09b80a7a270257396b30d9d1de73b5832fc259159952b595eb3e003c172395/1758933/RepoCheatV.zip

212.42.38.245

200 OK

913 kB

URL User Request GET
dl1a.gamedl.ru/download/yk709fk6i19kv3t45i04gcqkbhl5lje3/H1/ee09b80a7a270257396b30d9d1de73b5832fc259159952b595eb3e003c172395/1758933/RepoCheatV.zip
IP
212.42.38.245:443
ASN
#50313 Teslatel LLC

Certificate
IssuerLet's Encrypt
Subjectvideo.playground.ru
FingerprintF2:15:A1:92:28:26:39:ED:58:FD:55:55:EC:02:EC:F2:34:93:C3:53
ValidityFri, 28 Feb 2025 04:37:07 GMT - Thu, 29 May 2025 04:37:06 GMT

File type
Zip archive data, at least v2.0 to extract, compression method=deflate
Size
913 kB (913392 bytes)
Hash
ec3563fe3056a8a3397c418d00845bed
a109e4f2de90f83d35cf01856070be3bbe87b1da
ee09b80a7a270257396b30d9d1de73b5832fc259159952b595eb3e003c172395

Detections

Analyzer	Verdict	Alert
VirusTotal	suspicious	VirusTotal - Scan result 9/67

HTTP Headers

GET /download/yk709fk6i19kv3t45i04gcqkbhl5lje3/H1/ee09b80a7a270257396b30d9d1de73b5832fc259159952b595eb3e003c172395/1758933/RepoCheatV.zip HTTP/1.1
Host: dl1a.gamedl.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx/1.10.3
Date: Mon, 14 Apr 2025 17:18:09 GMT
Content-Type: application/octet-stream
Content-Length: 913392
Connection: keep-alive
Last-Modified: Sun, 13 Apr 2025 14:16:03 GMT
Accept-Ranges: bytes

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

Quad9 DNS

ThreatFox

Files detected

URL

IP

ASN

File type

Size

Hash

Archive (3)

Detections

JavaScript (0)

HTTP Transactions (1)

URL User Request GET

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers