Report - sikakeyb.cn/u_file/2407/10/HM66-CK75-hm-mag-v2.4.2.rar

Report Overview

Visitedpublic

2024-08-26 19:05:13

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Host Summary

Host	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
r10.o.lencr.org	unknown	2020-06-29	2024-06-06 21:45:11	2024-08-25 18:14:36	981 B	2.7 kB	23.36.77.32
r11.o.lencr.org	unknown	2020-06-29	2024-06-07 07:43:57	2024-08-26 18:12:23	2.0 kB	5.3 kB	23.36.76.226
sikakeyb.cn	unknown	unknown	No data	No data	508 B	45 MB	104.18.8.146

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

File detected

URL

sikakeyb.cn/u_file/2407/10/HM66-CK75-hm-mag-v2.4.2.rar

IP / ASN

104.18.8.146

#13335 CLOUDFLARENET

File Overview

File TypeRAR archive data, v5

Size45 MB (45062509 bytes)

MD5dfb7ec1b2e85634e7a2964a74816a724

SHA11801904eba9334d468d2dadc65361efc6b479a4b

SHA256ded287fa9b3ee7599709b971c22f4c2bf672554ddc085f6f8561d8889eff3de2

Detections

Analyzer	Verdict	Alert
VirusTotal	suspicious	VirusTotal - Scan result 4/66

JavaScript (0)

HTTP Transactions (10)

URL IP Response Size

r10.o.lencr.org/

23.36.77.32

504 B

URL

r10.o.lencr.org/

IP / ASN

23.36.77.32

#20940 Akamai International B.V.

Requested byN/A

Resource Info

File typedata

First Seen2024-08-26

Last Seen2024-08-29

Times Seen20149

Size504 B (504 bytes)

MD535888f142e8c995a2a992b24009a2cee

SHA18315b1d92f868af492e04ea1d0846ee9fc0328e7

SHA2565a2f5a87f6408bbc11020231759db8eeb24c28c0890da8f3ee2565d87b0e1e4c

HTTP Headers

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "5A2F5A87F6408BBC11020231759DB8EEB24C28C0890DA8F3EE2565D87B0E1E4C"
Last-Modified: Mon, 26 Aug 2024 02:36:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3734
Expires: Mon, 26 Aug 2024 20:07:01 GMT
Date: Mon, 26 Aug 2024 19:04:47 GMT
Connection: keep-alive

r11.o.lencr.org/

23.36.76.226

504 B

URL

r11.o.lencr.org/

IP / ASN

23.36.76.226

#20940 Akamai International B.V.

Requested byN/A

Resource Info

File typedata

First Seen2024-08-26

Last Seen2024-08-29

Times Seen13234

Size504 B (504 bytes)

MD5a5c8e602d1c34dad6d2bf031b1922353

SHA15326666dceb77fd224fb1b5d8ab3eeeee07cea4d

SHA2568d2071964c9d8a7e8e5e0c36bc5d82199123ce55059a79ffede86b59a9cb8db5

HTTP Headers

POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "8D2071964C9D8A7E8E5E0C36BC5D82199123CE55059A79FFEDE86B59A9CB8DB5"
Last-Modified: Mon, 26 Aug 2024 02:33:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19298
Expires: Tue, 27 Aug 2024 00:26:25 GMT
Date: Mon, 26 Aug 2024 19:04:47 GMT
Connection: keep-alive

r10.o.lencr.org/

23.36.77.32

504 B

URL

r10.o.lencr.org/

IP / ASN

23.36.77.32

#20940 Akamai International B.V.

Requested byN/A

Resource Info

File typedata

First Seen2024-08-26

Last Seen2024-08-29

Times Seen17376

Size504 B (504 bytes)

MD53c415be21fd13680f4c76a79399af82e

SHA1cc6afc7d2b2fd8451b793b01435087409e677f4c

SHA2565385c52f0502864e92da08547aefa7ce05ec21ff081c7413ce54723f3ab73303

HTTP Headers

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "5385C52F0502864E92DA08547AEFA7CE05EC21FF081C7413CE54723F3AB73303"
Last-Modified: Mon, 26 Aug 2024 02:37:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6423
Expires: Mon, 26 Aug 2024 20:51:51 GMT
Date: Mon, 26 Aug 2024 19:04:48 GMT
Connection: keep-alive

r10.o.lencr.org/

23.36.77.32

504 B

URL

r10.o.lencr.org/

IP / ASN

23.36.77.32

#20940 Akamai International B.V.

Requested byN/A

Resource Info

File typedata

First Seen2024-08-26

Last Seen2024-08-29

Times Seen23723

Size504 B (504 bytes)

MD5b0c68ac7e44a67b94268231c5f22ae25

SHA1a0c078abb7617e9b0ac402a24969ea22e024cf18

SHA256671ca341e73bd97fda1d098560ab338b45fbff67a5d85b47685273850d55e587

HTTP Headers

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "671CA341E73BD97FDA1D098560AB338B45FBFF67A5D85B47685273850D55E587"
Last-Modified: Mon, 26 Aug 2024 02:33:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6367
Expires: Mon, 26 Aug 2024 20:50:55 GMT
Date: Mon, 26 Aug 2024 19:04:48 GMT
Connection: keep-alive

GET sikakeyb.cn/u_file/2407/10/HM66-CK75-hm-mag-v2.4.2.rar

104.18.8.146

200 OK

45 MB

URL

sikakeyb.cn/u_file/2407/10/HM66-CK75-hm-mag-v2.4.2.rar

IP / ASN

104.18.8.146

#13335 CLOUDFLARENET

Requested byN/A

Resource Info

File typeRAR archive data, v5

First Seen2024-08-29

Last Seen2024-08-29

Times Seen1

Size45 MB (45062509 bytes)

MD5dfb7ec1b2e85634e7a2964a74816a724

SHA11801904eba9334d468d2dadc65361efc6b479a4b

SHA256ded287fa9b3ee7599709b971c22f4c2bf672554ddc085f6f8561d8889eff3de2

Certificate Info

IssuerCloudflare, Inc.

Subjectsikakeyb.cn

FingerprintAF:7D:EF:5C:CE:1D:5D:3A:28:94:2F:40:E5:9D:85:A0:0E:20:92:ED

ValidityMon, 04 Dec 2023 00:00:00 GMT - Tue, 03 Dec 2024 23:59:59 GMT

Detections

Analyzer	Verdict	Alert
VirusTotal	suspicious	VirusTotal - Scan result 4/66

HTTP Headers

GET /u_file/2407/10/HM66-CK75-hm-mag-v2.4.2.rar HTTP/1.1
Host: sikakeyb.cn
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Mon, 26 Aug 2024 19:04:48 GMT
content-type: application/x-rar-compressed
content-length: 45062509
cf-ray: 8b9616f6681f712b-OSL
cf-cache-status: HIT
accept-ranges: bytes
age: 6377
cache-control: public, max-age=31536000
etag: "66b0358a-2af996d"
expires: Tue, 26 Aug 2025 19:04:48 GMT
last-modified: Mon, 05 Aug 2024 02:14:34 GMT
vary: Accept-Encoding
set-cookie: __cf_bm=tLbGZ12yIzxp5e0SOFT2YmW9AFEENgxiSfkvyJG0E.U-1724699088-1.0.1.1-v0LU1MWiU6dK5KYPgPgZctRD7BQK2nPqfKUk_RNYGhhRjAYU2NiSAZ1Gisymmfe3EHMnovWyz7HHD5aS4S11jA; path=/; expires=Mon, 26-Aug-24 19:34:48 GMT; domain=.sikakeyb.cn; HttpOnly; Secure; SameSite=None
server: cloudflare
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

r11.o.lencr.org/

23.33.119.57

504 B

URL

r11.o.lencr.org/

IP / ASN

23.33.119.57

#20940 Akamai International B.V.

Requested byN/A

Resource Info

File typedata

First Seen2024-08-26

Last Seen2024-08-29

Times Seen16518

Size504 B (504 bytes)

MD50192c7488a56c1b9f50decbbc7c6e924

SHA17ed837f77d0fee2e3c5833f86d73eb2dfa3f6bec

SHA256571f2ef4cb90c7834acecbf6981410ddbd15611a6750b8a77717821dc1d1a167

HTTP Headers

POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "571F2EF4CB90C7834ACECBF6981410DDBD15611A6750B8A77717821DC1D1A167"
Last-Modified: Mon, 26 Aug 2024 02:38:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6620
Expires: Mon, 26 Aug 2024 20:55:13 GMT
Date: Mon, 26 Aug 2024 19:04:53 GMT
Connection: keep-alive

r11.o.lencr.org/

23.33.119.57

504 B

URL

r11.o.lencr.org/

IP / ASN

23.33.119.57

#20940 Akamai International B.V.

Requested byN/A

Resource Info

File typedata

First Seen2024-08-26

Last Seen2024-08-29

Times Seen16518

Size504 B (504 bytes)

MD50192c7488a56c1b9f50decbbc7c6e924

SHA17ed837f77d0fee2e3c5833f86d73eb2dfa3f6bec

SHA256571f2ef4cb90c7834acecbf6981410ddbd15611a6750b8a77717821dc1d1a167

HTTP Headers

POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "571F2EF4CB90C7834ACECBF6981410DDBD15611A6750B8A77717821DC1D1A167"
Last-Modified: Mon, 26 Aug 2024 02:38:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6620
Expires: Mon, 26 Aug 2024 20:55:13 GMT
Date: Mon, 26 Aug 2024 19:04:53 GMT
Connection: keep-alive

r11.o.lencr.org/

23.33.119.57

504 B

URL

r11.o.lencr.org/

IP / ASN

23.33.119.57

#20940 Akamai International B.V.

Requested byN/A

Resource Info

File typedata

First Seen2024-08-26

Last Seen2024-08-29

Times Seen16518

Size504 B (504 bytes)

MD50192c7488a56c1b9f50decbbc7c6e924

SHA17ed837f77d0fee2e3c5833f86d73eb2dfa3f6bec

SHA256571f2ef4cb90c7834acecbf6981410ddbd15611a6750b8a77717821dc1d1a167

HTTP Headers

POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "571F2EF4CB90C7834ACECBF6981410DDBD15611A6750B8A77717821DC1D1A167"
Last-Modified: Mon, 26 Aug 2024 02:38:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6620
Expires: Mon, 26 Aug 2024 20:55:13 GMT
Date: Mon, 26 Aug 2024 19:04:53 GMT
Connection: keep-alive

r11.o.lencr.org/

23.33.119.57

504 B

URL

r11.o.lencr.org/

IP / ASN

23.33.119.57

#20940 Akamai International B.V.

Requested byN/A

Resource Info

File typedata

First Seen2024-08-26

Last Seen2024-08-29

Times Seen16518

Size504 B (504 bytes)

MD50192c7488a56c1b9f50decbbc7c6e924

SHA17ed837f77d0fee2e3c5833f86d73eb2dfa3f6bec

SHA256571f2ef4cb90c7834acecbf6981410ddbd15611a6750b8a77717821dc1d1a167

HTTP Headers

POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "571F2EF4CB90C7834ACECBF6981410DDBD15611A6750B8A77717821DC1D1A167"
Last-Modified: Mon, 26 Aug 2024 02:38:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6620
Expires: Mon, 26 Aug 2024 20:55:13 GMT
Date: Mon, 26 Aug 2024 19:04:53 GMT
Connection: keep-alive

r11.o.lencr.org/

23.33.119.57

504 B

URL

r11.o.lencr.org/

IP / ASN

23.33.119.57

#20940 Akamai International B.V.

Requested byN/A

Resource Info

File typedata

First Seen2024-08-26

Last Seen2024-08-29

Times Seen16518

Size504 B (504 bytes)

MD50192c7488a56c1b9f50decbbc7c6e924

SHA17ed837f77d0fee2e3c5833f86d73eb2dfa3f6bec

SHA256571f2ef4cb90c7834acecbf6981410ddbd15611a6750b8a77717821dc1d1a167

HTTP Headers

POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "571F2EF4CB90C7834ACECBF6981410DDBD15611A6750B8A77717821DC1D1A167"
Last-Modified: Mon, 26 Aug 2024 02:38:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6620
Expires: Mon, 26 Aug 2024 20:55:13 GMT
Date: Mon, 26 Aug 2024 19:04:53 GMT
Connection: keep-alive