Report - download.iskysoft.com/cbs_down/data-recovery

Report Overview

Visitedpublic

2025-05-24 00:37:04

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Host Summary

Host	Rank	Registered	First Seen	Last Seen	Sent	Received	IP	Fingerprints
download.iskysoft.com	unknown	2007-06-28	2012-05-21	2025-05-19	525 B	38 MB	23.36.76.200

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

Scan Date	Severity	Indicator	Alert
2025-05-24	medium	download.iskysoft.com/cbs_down/data-recovery_full1657.exe	Detect pe file that no import table

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

File detected

URL

download.iskysoft.com/cbs_down/data-recovery_full1657.exe

IP / ASN

23.36.76.200

#20940 Akamai International B.V.

File Overview

File TypePE32 executable (GUI) Intel 80386, for MS Windows, 8 sections

Size38 MB (38495224 bytes)

MD5b956c185ced3778b65fd665c049c981c

SHA178875a87f1dd62929143edbd435163bcb73c390e

SHA256e87992306e593af3900a5bc91a25eb427abacb5353460dcd7d6a9dbf33c9356c

Detections

Analyzer	Verdict	Alert
YARAhub by abuse.ch	malware	Detect pe file that no import table

JavaScript (0)

HTTP Transactions (1)

URL IP Response Size

GET download.iskysoft.com/cbs_down/data-recovery_full1657.exe

23.36.76.200

200 OK

38 MB

URL

download.iskysoft.com/cbs_down/data-recovery_full1657.exe

IP / ASN

23.36.76.200

#20940 Akamai International B.V.

Requested byN/A

Resource Info

File typePE32 executable (GUI) Intel 80386, for MS Windows, 8 sections

First Seen2025-05-16

Last Seen2025-05-24

Times Seen2

Size38 MB (38495224 bytes)

MD5b956c185ced3778b65fd665c049c981c

SHA178875a87f1dd62929143edbd435163bcb73c390e

SHA256e87992306e593af3900a5bc91a25eb427abacb5353460dcd7d6a9dbf33c9356c

Detections

Analyzer	Verdict	Alert
YARAhub by abuse.ch	malware	Detect pe file that no import table

HTTP Headers

GET /cbs_down/data-recovery_full1657.exe HTTP/1.1
Host: download.iskysoft.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/octet-stream
x-envoy-upstream-service-time: 18
Strict-Transport-Security: max-age=15724800; includeSubDomains
Last-Modified: Tue, 19 Sep 2023 02:39:33 GMT
ETag: "769DE85C71B012D59AF84AE79E8FFB8D-1"
Content-Length: 38495224
Cache-Control: max-age=31536000
Expires: Sun, 24 May 2026 00:36:30 GMT
Date: Sat, 24 May 2025 00:36:30 GMT
Connection: keep-alive