Report - vip.123pan.cn/1709404/version_identification/InkeysUpdate20250209a.zip?timestamp=1736883129655

Report Overview

Visited public
2025-02-16 08:26:10
Tags
URL
vip.123pan.cn/1709404/version_identification/InkeysUpdate20250209a.zip?timestamp=1736883129655
Finishing URL
about:privatebrowsing
IP / ASN
59.47.237.141
#137688 CHINATELECOM Liaoning Benxi MAN
Title
about:privatebrowsing

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
vip.123pan.cn	unknown	2021-10-14	2023-08-10	2025-02-14	560 B	18 MB	59.47.225.41

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

Files detected

URL
vip.123pan.cn/1709404/version_identification/InkeysUpdate20250209a.zip?timestamp=1736883129655
IP
59.47.225.41
ASN
#137688 CHINATELECOM Liaoning Benxi MAN

File type
Zip archive data, at least v2.0 to extract, compression method=deflate
Size
18 MB (18178438 bytes)
Hash
c547f7d5e0606473658f86ee00c60644
f19b648611360a772f4f798f0c811ada7d5b859b
2331200983b79be7034b00f110b24d2ae3d5bb721746910e26fb2a228decf690

Archive (1)

Filename

Md5

File type

Inkeys.exe

2a4946ab85b01c618eddfa0a66b00815

PE32 executable (GUI) Intel 80386, for MS Windows, 6 sections

Detections

Analyzer	Verdict	Alert
YARAhub by abuse.ch	malware	win_amadey_bytecodes_oct_2023

JavaScript (0)

HTTP Transactions (1)

URL IP Response Size

	URL	IP	Response	Size
	vip.123pan.cn/1709404/version_identification/InkeysUpdate20250209a.zip?timestamp=1736883129655	59.47.225.41	200 OK	18 MB
URL User Request GET HTTP/1.1 vip.123pan.cn/1709404/version_identification/InkeysUpdate20250209a.zip?timestamp=1736883129655 IP 59.47.225.41:443 ASN #137688 CHINATELECOM Liaoning Benxi MAN Certificate IssuerDigiCert, Inc. Subject.123pan.cn Fingerprint01:34:1E:B8:05:3E:7E:B2:5E:E2:5F:43:A9:5F:BE:8B:6C:BD:95:1D ValidityTue, 16 Apr 2024 00:00:00 GMT - Tue, 06 May 2025 23:59:59 GMT File type Zip archive data, at least v2.0 to extract, compression method=deflate Size 18 MB (18178438 bytes) Hash c547f7d5e0606473658f86ee00c60644 f19b648611360a772f4f798f0c811ada7d5b859b 2331200983b79be7034b00f110b24d2ae3d5bb721746910e26fb2a228decf690 HTTP Headers GET /1709404/version_identification/InkeysUpdate20250209a.zip?timestamp=1736883129655 HTTP/1.1 Host: vip.123pan.cn User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache HTTP/1.1 200 OK Date: Sun, 16 Feb 2025 08:25:38 GMT Content-Type: application/zip Content-Length: 18178438 Connection: keep-alive Last-Modified: Wed, 12 Feb 2025 14:37:37 GMT x-rgw-object-type: Normal ETag: "68f0288d997aec400396cfa13b3ce0c2-2" x-amz-request-id: tx000006153cc5e83cf1ae4-0067acb6d2-7232-zone Age: 322096 Via: 00p4000283[cHs f ] X-MF-CDN-Cache-Status: hit-fresh ram Access-Control-Allow-Origin: Access-Control-Max-Age: 604800 X-Content-Type-Options: nosniff Server: X-MF-CDN Content-disposition: inline;filename="InkeysUpdate20250209a.zip";filename*=UTF-8''InkeysUpdate20250209a.zip Accept-Ranges: bytes

vip.123pan.cn/1709404/version_identification/InkeysUpdate20250209a.zip?timestamp=1736883129655

59.47.225.41

200 OK

18 MB

URL User Request GET HTTP/1.1
vip.123pan.cn/1709404/version_identification/InkeysUpdate20250209a.zip?timestamp=1736883129655
IP
59.47.225.41:443
ASN
#137688 CHINATELECOM Liaoning Benxi MAN

Certificate
IssuerDigiCert, Inc.
Subject*.123pan.cn
Fingerprint01:34:1E:B8:05:3E:7E:B2:5E:E2:5F:43:A9:5F:BE:8B:6C:BD:95:1D
ValidityTue, 16 Apr 2024 00:00:00 GMT - Tue, 06 May 2025 23:59:59 GMT

File type
Zip archive data, at least v2.0 to extract, compression method=deflate
Size
18 MB (18178438 bytes)
Hash
c547f7d5e0606473658f86ee00c60644
f19b648611360a772f4f798f0c811ada7d5b859b
2331200983b79be7034b00f110b24d2ae3d5bb721746910e26fb2a228decf690

HTTP Headers

GET /1709404/version_identification/InkeysUpdate20250209a.zip?timestamp=1736883129655 HTTP/1.1
Host: vip.123pan.cn
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sun, 16 Feb 2025 08:25:38 GMT
Content-Type: application/zip
Content-Length: 18178438
Connection: keep-alive
Last-Modified: Wed, 12 Feb 2025 14:37:37 GMT
x-rgw-object-type: Normal
ETag: "68f0288d997aec400396cfa13b3ce0c2-2"
x-amz-request-id: tx000006153cc5e83cf1ae4-0067acb6d2-7232-zone
Age: 322096
Via: 00p4000283[cHs f ]
X-MF-CDN-Cache-Status: hit-fresh ram
Access-Control-Allow-Origin: *
Access-Control-Max-Age: 604800
X-Content-Type-Options: nosniff
Server: X-MF-CDN
Content-disposition: inline;filename="InkeysUpdate20250209a.zip";filename*=UTF-8''InkeysUpdate20250209a.zip
Accept-Ranges: bytes

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

Quad9 DNS

ThreatFox

Files detected

URL

IP

ASN

File type

Size

Hash

Archive (1)

Detections

JavaScript (0)

HTTP Transactions (1)

URL User Request GET HTTP/1.1

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers