Report - all.undo.jp/asr/arc/ASR1860.zip

Report Overview

Visited public
2025-01-25 01:32:36
Tags
Submit Tags
URL
all.undo.jp/asr/arc/ASR1860.zip
Finishing URL
about:privatebrowsing
IP / ASN
210.224.185.11
#9371 SAKURA Internet Inc.
Title
about:privatebrowsing

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
all.undo.jp	unknown	2005-09-27	2012-11-20	2025-01-23	1.1 kB	5.4 MB	210.224.185.11

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

Files detected

URL
all.undo.jp/asr/arc/ASR1860.zip
IP
210.224.185.11
ASN
#9371 SAKURA Internet Inc.

File type
Zip archive data, at least v2.0 to extract, compression method=deflate
Size
5.4 MB (5428892 bytes)
Hash
61d8bd495eb772cf613e910bd2bf7216
9e53fbb87c8aceff33b6edd90edc44b3dce891a8
397dfe2fb0e22a9df66ca312bda9fd32553afc51b125eecb73b6ef79a8289bf8

Archive (6)

Filename

Md5

File type

data.7z

0a3f698f849dd1543ef9a5b3f7a2222a

7-zip archive data, version 0.4

history.txt

2ae305dd46b517f50fd0148969a2f40d

Unicode text, UTF-16, little-endian text, with CRLF line terminators

How to uninstall.txt

c601c31479939308337f58a7ef5bdc6f

Unicode text, UTF-16, little-endian text, with CRLF line terminators

How to update.txt

935898f25f7179eb4e0fae4d71c2e1ca

Unicode text, UTF-16, little-endian text, with CRLF line terminators

InstAsr.exe

ddaefca973dd33ad71d3af0f444c9ef5

PE32 executable (GUI) Intel 80386, for MS Windows, 5 sections

�ŏ��ɓǂ��ł��readme 1st.txt

9264bfc04170c208c5a888d537b3d6b4

Unicode text, UTF-16, little-endian text, with CRLF line terminators

Detections

Analyzer	Verdict	Alert
YARAhub by abuse.ch	malware	files - file ~tmp01925d3f.exe
VirusTotal	suspicious	VirusTotal - Scan result 2/67

JavaScript (0)

HTTP Transactions (3)

URL IP Response Size

all.undo.jp/

210.224.185.11

302 Moved Temporarily

138 B

URL
all.undo.jp/
IP
210.224.185.11:0
ASN
#9371 SAKURA Internet Inc.

File type
HTML document, ASCII text, with CRLF line terminators
Size
138 B (138 bytes)
Hash
aff950cab4c0265e21d401db15f1026d
f03e18461817f7a6546c8bf8fa8d686d7e30aca0
753e0dd54f28c4f7009b9c0b18a68aed175416bd8b7d134858264586eaac56f0

HTTP Headers

GET / HTTP/1.1
Host: all.undo.jp
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 302 Moved Temporarily
Server: nginx
Date: Sat, 25 Jan 2025 01:32:13 GMT
Content-Type: text/html
Content-Length: 138
Connection: keep-alive
Location: https://all.undo.jp/

GET all.undo.jp/asr/arc/ASR1860.zip

210.224.185.11

200 OK

5.4 MB

URL User Request GET HTTP/2
all.undo.jp/asr/arc/ASR1860.zip
IP
210.224.185.11:443
ASN
#9371 SAKURA Internet Inc.

Certificate
IssuerGehirn Inc.
Subject*.sakura.ne.jp
FingerprintB1:61:36:52:FA:BE:B7:78:61:28:EF:B6:F9:15:70:57:36:FE:0F:E2
ValidityWed, 17 Apr 2024 00:00:00 GMT - Sun, 18 May 2025 23:59:59 GMT

File type
Zip archive data, at least v2.0 to extract, compression method=deflate
Size
5.4 MB (5428892 bytes)
Hash
61d8bd495eb772cf613e910bd2bf7216
9e53fbb87c8aceff33b6edd90edc44b3dce891a8
397dfe2fb0e22a9df66ca312bda9fd32553afc51b125eecb73b6ef79a8289bf8

Detections

Analyzer	Verdict	Alert
VirusTotal	suspicious	VirusTotal - Scan result 2/67

HTTP Headers

GET /asr/arc/ASR1860.zip HTTP/1.1
Host: all.undo.jp
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Sat, 25 Jan 2025 01:32:13 GMT
content-type: application/zip
content-length: 5428892
last-modified: Wed, 15 Jan 2025 06:44:00 GMT
etag: "52d69c-62bb900a4ac00"
accept-ranges: bytes
X-Firefox-Spdy: h2

all.undo.jp/

210.224.185.11

200 OK

12 kB

URL
all.undo.jp/
IP
210.224.185.11:0
ASN
#9371 SAKURA Internet Inc.

File type
data
Size
12 kB (11915 bytes)
Hash
7dcd972b8f430578765269e348e7c514
20ee542a785d7de611c8b9437cf90876d3fdb4c9
814b27dbb3f7470674774985ea2093afb637b123a016a10e9bd18d011c050348

HTTP Headers

GET / HTTP/1.1
Host: all.undo.jp
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: nginx
date: Sat, 25 Jan 2025 01:32:17 GMT
content-type: text/html
accept-ranges: bytes
vary: Accept-Encoding
X-Firefox-Spdy: h2

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

Quad9 DNS

ThreatFox

Files detected

URL

IP

ASN

File type

Size

Hash

Archive (6)

Detections

JavaScript (0)

HTTP Transactions (3)

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers