Report - site.albaseet.net/albaseet_plus/32/libzkfpcsharp.dll

Report Overview

Visitedpublic

2023-10-22 08:25:22

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Host Summary

Host	Rank	Registered	First Seen	Last Seen	Sent	Received	IP	Fingerprints
site.albaseet.net	unknown	2019-04-24	2022-06-26 23:59:48	2023-10-07 12:17:32	694 B	14 kB	104.21.20.95

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2023-10-22 08:25:20	high	172.67.192.12	Client IP	ET POLICY PE EXE or DLL Windows file download HTTP

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

File detected

URL

site.albaseet.net/albaseet_plus/32/libzkfpcsharp.dll

IP / ASN

172.67.192.12

#13335 CLOUDFLARENET

File Overview

File TypePE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows\012- data

Size13 kB (12800 bytes)

MD5dc2954b78cfe50cc2b3b900a0e1953a3

SHA1466af603380ea29260846987854d858d96e86d75

SHA256be72e22452448328ff23596964a1592cef63f8056763b041e2ea05195065ff56

JavaScript (0)

HTTP Transactions (2)

URL IP Response Size

site.albaseet.net/

104.21.20.95

142 B

URL

site.albaseet.net/

IP / ASN

104.21.20.95

#13335 CLOUDFLARENET

Requested byN/A

Resource Info

File typeHTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators

First Seen2023-10-22

Last Seen2023-10-22

Times Seen1

Size142 B (142 bytes)

MD524985d88088ffdd3f6a3cc838d1314f5

SHA1e633fdf92a0791010d7f30462daac69927e884a8

SHA256b6b4b2c59bc61b49997ed2c32f5da02567a4283dc1475045ee3e1c712cd075f5

HTTP Headers

GET / HTTP/1.1
Host: site.albaseet.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sun, 22 Oct 2023 08:25:08 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 27 Sep 2019 21:17:55 GMT
Vary: Accept-Encoding
X-Powered-By: ASP.NET
X-Powered-By-Plesk: PleskWin
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=pB%2FFjN%2FyFHEsosMChDmrVJqjY6kSS0PPcx8ql4crYCXC9HfE5vSoe3i2TQYy%2FFRiZd8lBNmLGDQRV5kU%2B4twVJ6UwbJNhU%2F4NeAn1huNoKAC7kqYqIzf1nnBKvuyYOlCXk5JuA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 81a05912a8beb4f7-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60

GET site.albaseet.net/albaseet_plus/32/libzkfpcsharp.dll

172.67.192.12

13 kB

URL

site.albaseet.net/albaseet_plus/32/libzkfpcsharp.dll

IP / ASN

172.67.192.12

#13335 CLOUDFLARENET

Requested byN/A

Resource Info

File typePE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows\012- data

First Seen2023-10-22

Last Seen2023-10-22

Times Seen1

Size13 kB (12800 bytes)

MD5dc2954b78cfe50cc2b3b900a0e1953a3

SHA1466af603380ea29260846987854d858d96e86d75

SHA256be72e22452448328ff23596964a1592cef63f8056763b041e2ea05195065ff56

Certificate Info

IssuerGoogle Trust Services LLC

Subjectalbaseet.net

Fingerprint1C:D7:4B:30:0E:30:5F:B1:CE:4B:54:11:02:43:52:F6:72:3F:34:B7

ValidityFri, 20 Oct 2023 09:03:57 GMT - Thu, 18 Jan 2024 09:03:56 GMT

Detections

Analyzer	Verdict	Alert
suricata	high	ET POLICY PE EXE or DLL Windows file download HTTP

HTTP Headers

GET /albaseet_plus/32/libzkfpcsharp.dll HTTP/1.1
Host: site.albaseet.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sun, 22 Oct 2023 08:25:09 GMT
Content-Type: application/x-msdownload
Content-Length: 12800
Connection: keep-alive
Last-Modified: Sun, 01 Jan 2023 13:53:45 GMT
Accept-Ranges: bytes
ETag: "7f897377e81dd91:0"
X-Powered-By: ASP.NET
X-Powered-By-Plesk: PleskWin
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=tjeChZTb1ooLlX27CzmSNCl5Knv5dZOxKYsIMgZN1NbnCQJfNt3Tkpe7vT5%2FQFnvchcAgtzbBUhQzi2PG2VI1%2FLKnKubBSUTaLc%2BMIdMqaUIDVgPR6DtPJYi%2FJDBHU2gSzAZdA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 81a059165827b51d-OSL
alt-svc: h2=":443"; ma=60