Report - 01-modern-warships-akamai.cdn.gaijin.net/modern_warships/0.87.3.36519/0812580e3a91d04e0965de43ae86bd9f9699c620/Modern%20Warships.exe

Report Overview

Visitedpublic

2024-12-31 01:25:21

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Host Summary

Host	Rank	Registered	First Seen	Last Seen	Sent	Received	IP	Fingerprints
01-modern-warships-akamai.cdn.gaijin.net	unknown	1998-03-26	2024-12-31	2024-12-31	586 B	678 kB	95.101.11.136

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

Scan Date	Severity	Indicator	Alert
2024-12-31	medium	01-modern-warships-akamai.cdn.gaijin.net/modern_warships/0.87.3.36519/0812580e3a91d04e0965de43ae86bd9f9699c620/Modern%20Warships.exe	files - file ~tmp01925d3f.exe

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

File detected

URL

01-modern-warships-akamai.cdn.gaijin.net/modern_warships/0.87.3.36519/0812580e3a91d04e0965de43ae86bd9f9699c620/Modern%20Warships.exe

IP / ASN

95.101.11.136

#20940 Akamai International B.V.

File Overview

File TypePE32+ executable (GUI) x86-64, for MS Windows, 7 sections

Size677 kB (677032 bytes)

MD51f73a5444a9bf9c34ad28913e621064b

SHA126d8ccc3bb70bf8d1f7fdba29d19f26c0478a3db

SHA256bcc73cc9b4dabdfef837e1c97c266d6e5218e7593eab49a8f2b3863963ccbeee

Detections

Analyzer	Verdict	Alert
YARAhub by abuse.ch	malware	files - file ~tmp01925d3f.exe

JavaScript (0)

HTTP Transactions (1)

URL IP Response Size

GET 01-modern-warships-akamai.cdn.gaijin.net/modern_warships/0.87.3.36519/0812580e3a91d04e0965de43ae86bd9f9699c620/Modern%20Warships.exe

95.101.11.136

200 OK

677 kB

URL

01-modern-warships-akamai.cdn.gaijin.net/modern_warships/0.87.3.36519/0812580e3a91d04e0965de43ae86bd9f9699c620/Modern%20Warships.exe

IP / ASN

95.101.11.136

#20940 Akamai International B.V.

Requested byN/A

Resource Info

File typePE32+ executable (GUI) x86-64, for MS Windows, 7 sections

First Seen2024-12-31

Last Seen2024-12-31

Times Seen1

Size677 kB (677032 bytes)

MD51f73a5444a9bf9c34ad28913e621064b

SHA126d8ccc3bb70bf8d1f7fdba29d19f26c0478a3db

SHA256bcc73cc9b4dabdfef837e1c97c266d6e5218e7593eab49a8f2b3863963ccbeee

Certificate Info

IssuerLet's Encrypt

Subjectmodern-warships-akamai.cdn.gaijin.net

Fingerprint78:B3:BC:68:C0:F3:91:9B:70:8F:3E:62:F0:56:1C:6A:E5:29:2F:B8

ValidityTue, 29 Oct 2024 13:39:29 GMT - Mon, 27 Jan 2025 13:39:28 GMT

Detections

Analyzer	Verdict	Alert
YARAhub by abuse.ch	malware	files - file ~tmp01925d3f.exe

HTTP Headers

GET /modern_warships/0.87.3.36519/0812580e3a91d04e0965de43ae86bd9f9699c620/Modern%20Warships.exe HTTP/1.1
Host: 01-modern-warships-akamai.cdn.gaijin.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 677032
accept-ranges: bytes
last-modified: Mon, 30 Dec 2024 16:03:03 GMT
x-rgw-object-type: Normal
etag: "1f73a5444a9bf9c34ad28913e621064b"
x-amz-request-id: tx0000088504c0bfe2276d5-006772c431-a10fa9b1-default
cache-control: max-age=86400
expires: Wed, 01 Jan 2025 01:24:56 GMT
date: Tue, 31 Dec 2024 01:24:56 GMT
alt-svc: h3=":443"; ma=93600,h3-29=":443"; ma=93600,h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
akamai-grn: 0.840b655f.1735608296.4f2520c
access-control-allow-origin: *
X-Firefox-Spdy: h2