Report - ns2.elhacker.net/e-zines/raza/raza004.zip

Report Overview

Visited public
2025-03-16 11:38:36
Tags
URL
ns2.elhacker.net/e-zines/raza/raza004.zip
Finishing URL
about:privatebrowsing
IP / ASN
104.26.4.20
#13335 CLOUDFLARENET
Title
about:privatebrowsing

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
ns2.elhacker.net	unknown	2001-02-22	2014-01-30	2025-02-12	509 B	261 kB	172.67.70.27

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

Files detected

URL
ns2.elhacker.net/e-zines/raza/raza004.zip
IP
172.67.70.27
ASN
#13335 CLOUDFLARENET

File type
Zip archive data, at least v2.0 to extract, compression method=deflate
Size
260 kB (259968 bytes)
Hash
f9348795697fce3366da2333028e02c2
2ce1e7d088cc5e2ea6e99097638a3c77e88ed2c0
2c106a80ca9e815bdceab954890732407fa90233058ca0df8546f6bff1c5864f

Archive (9)

Filename

Md5

File type

FILE_ID.DIZ

2e6f67082c976895514cc624a55b5edd

ASCII text, with CRLF line terminators

LOGO4.JPG

034b7e492dd89467b3ccce30c50edfc1

JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 500x400, components 3

RAZA004.TXT

1f68facff3d4ef4c0d65b7038f5fbd25

data

CIH.ZIP

c4ac3cddd04357420686cc546cd16d75

Zip archive data, at least v2.0 to extract, compression method=deflate

PRI.JPG

da7ce5312ed9b1c93055bf381fa9741c

JPEG image data, JFIF standard 1.01, resolution (DPI), density 150x150, segment length 16, baseline, precision 8, 471x613, components 1

BLWCB15A.ZIP

37e9a92eda19e9716ed0bd9a3de24388

Zip archive data, at least v2.0 to extract, compression method=deflate

CLEANCIH.EXE

236ce60f21f4b253f1f688b645cb3096

MS-DOS executable, MZ for MS-DOS

TELMEX.GIF

48b33f2c0ad8d736d7fd4f4084904952

GIF image data, version 87a, 721 x 524

APPJAVA.ZIP

9cc38bcb50551911a9fa5631d819c1fe

Zip archive data, at least v2.0 to extract, compression method=deflate

Detections

Analyzer	Verdict	Alert
VirusTotal	malicious	VirusTotal - Scan result 44/63

JavaScript (0)

HTTP Transactions (1)

URL IP Response Size

ns2.elhacker.net/e-zines/raza/raza004.zip

172.67.70.27

200 OK

260 kB

URL User Request GET
ns2.elhacker.net/e-zines/raza/raza004.zip
IP
172.67.70.27:443
ASN
#13335 CLOUDFLARENET

Certificate
IssuerGoogle Trust Services
Subjectelhacker.net
Fingerprint12:C4:6D:01:23:54:A0:F8:1E:AB:8B:C5:3D:FA:82:2A:BC:BF:A0:43
ValidityWed, 26 Feb 2025 21:08:30 GMT - Tue, 27 May 2025 22:08:25 GMT

File type
Zip archive data, at least v2.0 to extract, compression method=deflate
Size
260 kB (259968 bytes)
Hash
f9348795697fce3366da2333028e02c2
2ce1e7d088cc5e2ea6e99097638a3c77e88ed2c0
2c106a80ca9e815bdceab954890732407fa90233058ca0df8546f6bff1c5864f

Detections

Analyzer	Verdict	Alert
VirusTotal	malicious	VirusTotal - Scan result 44/63

HTTP Headers

GET /e-zines/raza/raza004.zip HTTP/1.1
Host: ns2.elhacker.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Sun, 16 Mar 2025 11:38:14 GMT
content-type: application/zip
feature-policy: geolocation 'self'
strict-transport-security: max-age=31536000
last-modified: Sat, 24 Dec 2011 18:26:09 GMT
etag: "3f780-4b4daaad81240-gzip"
accept-ranges: bytes
vary: Accept-Encoding,User-Agent
content-encoding: gzip
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vccpcWkza%2FKV2MplzlGLuFXwgvqQBCBIKKzrksCtAy1OtsdyhFJkb7%2BUphVDZ838gOC7G4eaZGeBvC54ZjtdPVcZekcpr4YQ6l9UJU3Ch3Qf2LWY%2BDspsRXf%2FyfkuL1zoBc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
expect-ct: max-age=86400, enforce
referrer-policy: same-origin
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
server: cloudflare
cf-ray: 9213f68fbe9f712d-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=53129&min_rtt=52930&rtt_var=11293&sent=8&recv=9&lost=0&retrans=0&sent_bytes=3199&recv_bytes=1143&delivery_rate=70410&cwnd=254&unsent_bytes=0&cid=ed7ec67c49e6d658&ts=361&x=0"
X-Firefox-Spdy: h2

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

Quad9 DNS

ThreatFox

Files detected

URL

IP

ASN

File type

Size

Hash

Archive (9)

Detections

JavaScript (0)

HTTP Transactions (1)

URL User Request GET

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers