Report - mms.alliedmods.net/mmsdrop/2.0/mmsource-2.0.0-git1313-windows.zip

Report Overview

Visitedpublic

2024-12-25 09:42:30

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Host Summary

Host	Rank	Registered	First Seen	Last Seen	Sent	Received	IP	Fingerprints
mms.alliedmods.net	unknown	2005-10-08	2015-06-26	2024-12-17	519 B	4.5 MB	172.67.73.151

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

File detected

URL

mms.alliedmods.net/mmsdrop/2.0/mmsource-2.0.0-git1313-windows.zip

IP / ASN

172.67.73.151

#13335 CLOUDFLARENET

File Overview

File TypeZip archive data, at least v1.0 to extract, compression method=store

Size4.5 MB (4547928 bytes)

MD5db9cdcf16240d7d360ae84f1ce55b161

SHA1cb40781acd647b7928c566c2c4ce78fa9d61cc22

SHA256dab309dda8078f93f3c193a2620399a05b1f1a82669dddaac5b11fcdbc5e22b9

Archive (33)

Modified	Filename	Size	MD5	File type
2024-08-04 12:17	metamod.2.bgt.dll	254 kB	7e15d638a8dc99e97c54516886f58382	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, 5 sections
2024-08-04 12:18	metamod.2.blade.dll	253 kB	d319e011c7bbf2c5484ffc1b5208a2b2	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, 5 sections
2024-08-04 12:19	metamod.2.bms.dll	287 kB	d662282f1f247f69677c8b35a851354d	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, 5 sections
2024-08-04 12:19	metamod.2.contagion.dll	253 kB	a797f9782a1eafbbb10abab0402f7174	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, 5 sections
2024-08-04 12:16	metamod.2.csgo.dll	253 kB	f51cc8359fb519413eb37c1c800d1b57	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, 5 sections
2024-08-04 12:19	metamod.2.css.dll	256 kB	e1089a0a183e6f72bc86b02248447e94	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, 5 sections
2024-08-04 12:19	metamod.2.darkm.dll	252 kB	b0c44d9b93717c17832d0cb11b5dd218	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, 5 sections
2024-08-04 12:19	metamod.2.dods.dll	256 kB	3b978116c07a5dd4a9023aff1cb82d0f	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, 5 sections
2024-08-04 12:18	metamod.2.doi.dll	256 kB	aaf9c966910ba2832c67d76f9c7ba239	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, 5 sections
2024-08-04 12:18	metamod.2.ep1.dll	252 kB	61a2d4f293d0e795c8ec0cc5d4111f1e	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, 5 sections
2024-08-04 12:15	metamod.2.ep2.dll	254 kB	8548d250ebe9b3a8e027a180db8b4e75	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, 5 sections
2024-08-04 12:19	metamod.2.eye.dll	253 kB	58cc89f5baf152d73728da1492e821b6	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, 5 sections
2024-08-04 12:19	metamod.2.hl2dm.dll	256 kB	3789842db8b2e8a6357b42e670a0cabe	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, 5 sections
2024-08-04 12:20	metamod.2.insurgency.dll	256 kB	061213c42fa96de2ecffff41f9984f7a	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, 5 sections
2024-08-04 12:10	metamod.2.l4d.dll	254 kB	4d099cbb11e0ab52a8503b64b1ff5bb2	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, 5 sections
2024-08-04 12:11	metamod.2.l4d2.dll	254 kB	37e588a71ab58789f952c289c7f5b6cd	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, 5 sections
2024-08-04 12:13	metamod.2.nd.dll	253 kB	e2350c1b06586a3071b691b3636caf74	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, 5 sections
2024-08-04 12:15	metamod.2.pvkii.dll	281 kB	f5830049a9727f7b71534930d014855e	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, 5 sections
2024-08-04 12:16	metamod.2.sdk2013.dll	256 kB	274105cc0bb00d53805ade45ca22aea8	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, 5 sections
2024-08-04 12:16	metamod.2.swarm.dll	269 kB	e82e0f81262705ca91410667ded4661a	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, 5 sections
2024-08-04 12:17	metamod.2.tf2.dll	332 kB	91bde81f3e311f62975cf92bc22beb04	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, 5 sections
2024-08-04 12:08	server.dll	153 kB	6e51cc980ae6ec05c212620c9e9c6330	PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, 5 sections
2024-08-04 12:18	metamod.2.blade.dll	352 kB	1197b8d3cb3f57dcfcd085aeb421dad4	PE32+ executable (DLL) (GUI) x86-64, for MS Windows, 7 sections
2024-08-04 12:16	metamod.2.cs2.dll	1.4 MB	7b52e7202869d2c5f3b5f29f42d73d9a	PE32+ executable (DLL) (GUI) x86-64, for MS Windows, 7 sections
2024-08-04 12:18	metamod.2.dota.dll	329 kB	8bb85896201ac344940ca251dc8fb9ba	PE32+ executable (DLL) (GUI) x86-64, for MS Windows, 7 sections
2024-08-04 12:10	metamod.2.insurgency.dll	354 kB	eb978d5f9331a3bccf74a8ad87dcec42	PE32+ executable (DLL) (GUI) x86-64, for MS Windows, 7 sections
2024-08-04 12:11	metamod.2.mcv.dll	351 kB	822a9530381528b61ef269d147d96f4b	PE32+ executable (DLL) (GUI) x86-64, for MS Windows, 7 sections
2024-08-04 12:17	metamod.2.tf2.dll	459 kB	c21fe7097e21bc4c29729f4ccd5f9af5	PE32+ executable (DLL) (GUI) x86-64, for MS Windows, 7 sections
2024-08-04 12:08	server.dll	186 kB	d0c93e8e0f5673b86b2d094162e83604	PE32+ executable (DLL) (GUI) x86-64, for MS Windows, 7 sections
2023-10-13 10:02	metaplugins.ini	559 B	2672941c14b8e8b0602a66a2e009b2cd	ASCII text
2023-10-13 10:02	README.txt	105 B	70c31e761d79cb7f14ff099145bbb4b3	ASCII text
2023-10-13 10:02	metamod.vdf	50 B	e473e9ea9aa41146e3351a7fa5fa70dd	ASCII text
2023-10-13 10:02	metamod_x64.vdf	56 B	dabd4e1d5bd52cadf3a7528a89b29210	ASCII text

Detections

Analyzer	Verdict	Alert
YARAhub by abuse.ch	malware	files - file ~tmp01925d3f.exe
YARAhub by abuse.ch	malware	files - file ~tmp01925d3f.exe
YARAhub by abuse.ch	malware	files - file ~tmp01925d3f.exe
YARAhub by abuse.ch	malware	files - file ~tmp01925d3f.exe
YARAhub by abuse.ch	malware	files - file ~tmp01925d3f.exe
YARAhub by abuse.ch	malware	files - file ~tmp01925d3f.exe
YARAhub by abuse.ch	malware	files - file ~tmp01925d3f.exe
YARAhub by abuse.ch	malware	files - file ~tmp01925d3f.exe
YARAhub by abuse.ch	malware	files - file ~tmp01925d3f.exe
YARAhub by abuse.ch	malware	files - file ~tmp01925d3f.exe
YARAhub by abuse.ch	malware	files - file ~tmp01925d3f.exe
YARAhub by abuse.ch	malware	files - file ~tmp01925d3f.exe
YARAhub by abuse.ch	malware	files - file ~tmp01925d3f.exe
YARAhub by abuse.ch	malware	files - file ~tmp01925d3f.exe
YARAhub by abuse.ch	malware	files - file ~tmp01925d3f.exe
YARAhub by abuse.ch	malware	files - file ~tmp01925d3f.exe
YARAhub by abuse.ch	malware	files - file ~tmp01925d3f.exe
YARAhub by abuse.ch	malware	files - file ~tmp01925d3f.exe
YARAhub by abuse.ch	malware	files - file ~tmp01925d3f.exe
YARAhub by abuse.ch	malware	files - file ~tmp01925d3f.exe
YARAhub by abuse.ch	malware	files - file ~tmp01925d3f.exe
YARAhub by abuse.ch	malware	files - file ~tmp01925d3f.exe
YARAhub by abuse.ch	malware	files - file ~tmp01925d3f.exe
YARAhub by abuse.ch	malware	files - file ~tmp01925d3f.exe
YARAhub by abuse.ch	malware	files - file ~tmp01925d3f.exe
YARAhub by abuse.ch	malware	files - file ~tmp01925d3f.exe
YARAhub by abuse.ch	malware	files - file ~tmp01925d3f.exe
YARAhub by abuse.ch	malware	files - file ~tmp01925d3f.exe
VirusTotal	suspicious	VirusTotal - Scan result 1/69

JavaScript (0)

HTTP Transactions (1)

URL IP Response Size

GET mms.alliedmods.net/mmsdrop/2.0/mmsource-2.0.0-git1313-windows.zip

172.67.73.151

200 OK

4.5 MB

URL

mms.alliedmods.net/mmsdrop/2.0/mmsource-2.0.0-git1313-windows.zip

IP / ASN

172.67.73.151

#13335 CLOUDFLARENET

Requested byN/A

Resource Info

File typeZip archive data, at least v1.0 to extract, compression method=store

First Seen2024-08-19

Last Seen2025-03-25

Times Seen19

Size4.5 MB (4547928 bytes)

MD5db9cdcf16240d7d360ae84f1ce55b161

SHA1cb40781acd647b7928c566c2c4ce78fa9d61cc22

SHA256dab309dda8078f93f3c193a2620399a05b1f1a82669dddaac5b11fcdbc5e22b9

Certificate Info

IssuerGoogle Trust Services

Subjectalliedmods.net

FingerprintD7:31:DA:47:E4:D9:8A:43:A7:5E:EE:3B:C9:7D:B9:11:72:E4:25:C4

ValiditySun, 10 Nov 2024 09:50:17 GMT - Sat, 08 Feb 2025 09:50:16 GMT

Detections

Analyzer	Verdict	Alert
VirusTotal	suspicious	VirusTotal - Scan result 1/69

HTTP Headers

GET /mmsdrop/2.0/mmsource-2.0.0-git1313-windows.zip HTTP/1.1
Host: mms.alliedmods.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Wed, 25 Dec 2024 09:42:04 GMT
content-type: application/zip
content-length: 4547928
last-modified: Sun, 04 Aug 2024 19:20:04 GMT
etag: "456558-61ee0729c35ea"
cache-control: max-age=14400
cf-cache-status: HIT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hJw7ExEBfZUc%2F9EmQbmWbjGyy5F1pxO7CaEsA9AbIpLTeS1KzMhONZUu1qNZWVHsN0bHtOjA9Lu%2BDOe7BeAd0Lk1w%2BxraC7oJ4w4DUe3lSocguiZvVXSdSgnTOW%2FLz8TQLr0XQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8f77e1023d8a56bf-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=5851&min_rtt=456&rtt_var=10799&sent=7&recv=11&lost=0&retrans=0&sent_bytes=3285&recv_bytes=1283&delivery_rate=7869565&cwnd=254&unsent_bytes=0&cid=6d4565c05a269f00&ts=216&x=0"
X-Firefox-Spdy: h2