Report - eternallybored.org/misc/netcat/netcat-win32-1.12.zip

Report Overview

Visited public
2024-04-22 17:18:00
Tags
Submit Tags
URL
eternallybored.org/misc/netcat/netcat-win32-1.12.zip
Finishing URL
about:privatebrowsing
IP / ASN
84.255.206.8
#34779 T-2, d.o.o.
Title
about:privatebrowsing

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
eternallybored.org	unknown	2007-09-10	2017-02-01 09:41:06	2024-04-16 16:01:52	506 B	112 kB	84.255.206.8

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

JavaScript (0)

HTTP Transactions (1)

URL IP Response Size

GET eternallybored.org/misc/netcat/netcat-win32-1.12.zip

84.255.206.8

200 OK

112 kB

URL User Request GET HTTP/2
eternallybored.org/misc/netcat/netcat-win32-1.12.zip
IP
84.255.206.8:443
ASN
#34779 T-2, d.o.o.

Certificate
IssuerLet's Encrypt
Subjecteternallybored.org
FingerprintA0:5E:7F:93:97:7E:CF:02:C9:AA:E2:48:4F:EA:41:A1:F2:AA:78:82
ValidityMon, 15 Apr 2024 01:34:28 GMT - Sun, 14 Jul 2024 01:34:27 GMT

File type
Zip archive data, at least v2.0 to extract, compression method=deflate
Size
112 kB (111892 bytes)
Hash
5cae15c12e26d4ac8f32cd7026a5cb7a
b1735341e8f16f5cbcc96ab34331fe9747fb07e1
413f85a1dbac60ab5516742d76beff4f4da22b8ef1a424f10f36ec77e6d274b1

Detections

Analyzer	Verdict	Alert
VirusTotal	malicious	VirusTotal - Scan result 28/56

HTTP Headers

GET /misc/netcat/netcat-win32-1.12.zip HTTP/1.1
Host: eternallybored.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
strict-transport-security: max-age=31536000; includeSubDomains
last-modified: Fri, 16 Sep 2011 22:54:25 GMT
etag: "1b514-4ad16dffb6eee"
accept-ranges: bytes
content-length: 111892
content-type: application/zip
date: Mon, 22 Apr 2024 17:17:34 GMT
server: Apache
X-Firefox-Spdy: h2

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

JavaScript (0)

HTTP Transactions (1)

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers