Report - ch2-www.copytrans.net/bin/Install

Report Overview

Visitedpublic

2023-12-21 19:35:44

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Host Summary

Host	Rank	Registered	First Seen	Last Seen	Sent	Received	IP	Fingerprints
ch2-www.copytrans.net	unknown	2007-03-07	2016-09-30 16:00:44	2023-11-17 20:43:57	526 B	7.9 MB	52.47.178.141

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

File detected

URL

ch2-www.copytrans.net/bin/Install_CopyTransControlCenter.exe

IP / ASN

52.47.178.141

#16509 AMAZON-02

File Overview

File TypePE32 executable (GUI) Intel 80386, for MS Windows

Size7.9 MB (7873536 bytes)

MD5243cd3b54966dcef29b4c15f58829a2c

SHA14771b761430bc6ba77a41c2ce5948ac316bfce51

SHA25654ce07811b5b120f0775d7ed7924f39347007cb86d63aace32d2e78f92109ff9

Detections

Analyzer	Verdict	Alert
VirusTotal	suspicious	VirusTotal - Scan result 1/61

JavaScript (0)

HTTP Transactions (1)

URL IP Response Size

GET ch2-www.copytrans.net/bin/Install_CopyTransControlCenter.exe

52.47.178.141

200 OK

7.9 MB

URL

ch2-www.copytrans.net/bin/Install_CopyTransControlCenter.exe

IP / ASN

52.47.178.141

#16509 AMAZON-02

Requested byN/A

Resource Info

File typePE32 executable (GUI) Intel 80386, for MS Windows

First Seen2023-07-03

Last Seen2024-08-20

Times Seen2

Size7.9 MB (7873536 bytes)

MD5243cd3b54966dcef29b4c15f58829a2c

SHA14771b761430bc6ba77a41c2ce5948ac316bfce51

SHA25654ce07811b5b120f0775d7ed7924f39347007cb86d63aace32d2e78f92109ff9

Certificate Info

IssuerLet's Encrypt

Subjectcopytrans.net

FingerprintB9:4D:78:DA:B4:79:F7:2D:3F:9C:08:D3:A3:73:12:58:D5:7B:21:4F

ValidityThu, 09 Nov 2023 01:36:24 GMT - Wed, 07 Feb 2024 01:36:23 GMT

Detections

Analyzer	Verdict	Alert
VirusTotal	suspicious	VirusTotal - Scan result 1/61

HTTP Headers

GET /bin/Install_CopyTransControlCenter.exe HTTP/1.1
Host: ch2-www.copytrans.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
etag: "782400-5f79fcd0199f3"
accept-ranges: bytes
content-length: 7873536
x-frame-options: DENY
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
strict-transport-security: max-age=300; includeSubDomains
content-security-policy: frame-ancestors 'self' https://*.webvisor.com https://metrika.yandex.ru/ https://www.copytrans.net
referrer-policy: no-referrer-when-downgrade
content-type: application/x-msdos-program
date: Thu, 21 Dec 2023 19:35:17 GMT
server: Apache
X-Firefox-Spdy: h2