Report - static.smartftp.com/static/Products/Client/10.0.3235.0/x64/SmartFTP-Setup.exe

Report Overview

Visitedpublic

2024-06-17 18:26:12

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Host Summary

Host	Rank	Registered	First Seen	Last Seen	Sent	Received	IP	Fingerprints
r10.o.lencr.org	unknown	2020-06-29	2024-06-06 21:45:11	2024-06-17 18:15:38	1.6 kB	4.4 kB	23.36.76.226
static.smartftp.com	unknown	1999-04-02	2016-06-29 13:38:45	2024-04-17 14:28:58	531 B	10 MB	104.21.12.126

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

File detected

URL

static.smartftp.com/static/Products/Client/10.0.3235.0/x64/SmartFTP-Setup.exe

IP / ASN

104.21.12.126

#13335 CLOUDFLARENET

File Overview

File TypePE32+ executable (GUI) x86-64, for MS Windows, 6 sections

Size10 MB (10271120 bytes)

MD531c3278d6e3de01677e9a75c6719b7c8

SHA1a92d6737e3d6b5a69e49e1d64086c1dc822c6875

SHA25659c60faf837ec8ee08487f0b767a0a1122395f9d1013e032d7de624c1dddffe1

Detections

Analyzer	Verdict	Alert
VirusTotal	suspicious	VirusTotal - Scan result 4/71

JavaScript (0)

HTTP Transactions (6)

URL IP Response Size

r10.o.lencr.org/

23.36.76.226

504 B

URL

r10.o.lencr.org/

IP / ASN

23.36.76.226

#20940 Akamai International B.V.

Requested byN/A

Resource Info

File typedata

First Seen2024-06-15

Last Seen2024-08-19

Times Seen41629

Size504 B (504 bytes)

MD55c35a3180482afadf4e89f4cc249fa7b

SHA18a088c184606fe3e4e0da8cd90b6eb5e6d30fb97

SHA256146fe131cf8436e3de4832a23b351400b4819dbd9b9716302248d3ab447f000c

HTTP Headers

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "146FE131CF8436E3DE4832A23B351400B4819DBD9B9716302248D3AB447F000C"
Last-Modified: Sat, 15 Jun 2024 13:53:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7584
Expires: Mon, 17 Jun 2024 20:32:09 GMT
Date: Mon, 17 Jun 2024 18:25:45 GMT
Connection: keep-alive

r10.o.lencr.org/

23.36.76.226

504 B

URL

r10.o.lencr.org/

IP / ASN

23.36.76.226

#20940 Akamai International B.V.

Requested byN/A

Resource Info

File typedata

First Seen2024-06-17

Last Seen2024-08-19

Times Seen39533

Size504 B (504 bytes)

MD59d139a09a36fce99ece1fb963d49d2a9

SHA1a7d96d8755d02c7204c147daade1b1168a6ddb73

SHA256f9a59ebef1ee608c709b274e1c7be1320323232cdc79b17bdbf453a5a5aead09

HTTP Headers

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "F9A59EBEF1EE608C709B274E1C7BE1320323232CDC79B17BDBF453A5A5AEAD09"
Last-Modified: Mon, 17 Jun 2024 11:47:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17192
Expires: Mon, 17 Jun 2024 23:12:18 GMT
Date: Mon, 17 Jun 2024 18:25:46 GMT
Connection: keep-alive

GET static.smartftp.com/static/Products/Client/10.0.3235.0/x64/SmartFTP-Setup.exe

104.21.12.126

200 OK

10 MB

URL

static.smartftp.com/static/Products/Client/10.0.3235.0/x64/SmartFTP-Setup.exe

IP / ASN

104.21.12.126

#13335 CLOUDFLARENET

Requested byN/A

Resource Info

File typePE32+ executable (GUI) x86-64, for MS Windows, 6 sections

First Seen2024-06-15

Last Seen2024-08-19

Times Seen11

Size10 MB (10271120 bytes)

MD531c3278d6e3de01677e9a75c6719b7c8

SHA1a92d6737e3d6b5a69e49e1d64086c1dc822c6875

SHA25659c60faf837ec8ee08487f0b767a0a1122395f9d1013e032d7de624c1dddffe1

Certificate Info

IssuerLet's Encrypt

Subjectsmartftp.com

FingerprintD8:04:F1:E0:17:50:07:11:F7:AD:3B:14:A9:88:68:A5:AD:3C:76:F7

ValiditySun, 05 May 2024 12:47:36 GMT - Sat, 03 Aug 2024 12:47:35 GMT

Detections

Analyzer	Verdict	Alert
VirusTotal	suspicious	VirusTotal - Scan result 4/71

HTTP Headers

GET /static/Products/Client/10.0.3235.0/x64/SmartFTP-Setup.exe HTTP/1.1
Host: static.smartftp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Mon, 17 Jun 2024 18:25:46 GMT
content-type: application/octet-stream
content-length: 10271120
last-modified: Wed, 12 Jun 2024 10:19:12 GMT
etag: "b26ba5f8b1bcda1:0"
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: default-src 'none'; script-src 'self' 'unsafe-inline' 'wasm-unsafe-eval'; connect-src 'self'; img-src 'self' data:; style-src 'self' 'unsafe-inline'; font-src 'self'; frame-src 'self'; base-uri 'self'
feature-policy: camera 'none';microphone 'none';geolocation 'none';
referrer-policy: strict-origin
report-to: {"group":"default","max_age":604800,"endpoints":[{"url":"https://smartftp.report-uri.com/a/d/g"}],"include_subdomains":true}
alt-svc: h3=":443"; ma=86400
cache-control: max-age=7200
cf-cache-status: REVALIDATED
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 895515889f411ec2-AMS
X-Firefox-Spdy: h2

r10.o.lencr.org/

23.36.76.226

504 B

URL

r10.o.lencr.org/

IP / ASN

23.36.76.226

#20940 Akamai International B.V.

Requested byN/A

Resource Info

File typedata

First Seen2024-06-15

Last Seen2024-08-19

Times Seen41892

Size504 B (504 bytes)

MD5ede0b27def700f18bb6d4eb4c1d97352

SHA1c802c366cb2eee6b9339349aa21677fdb1bd5fa5

SHA25618ffb58da62f40b37a43b0baaceefe8bc3ef83ccdf9ee19ff874ccb0d802c9f2

HTTP Headers

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "18FFB58DA62F40B37A43B0BAACEEFE8BC3EF83CCDF9EE19FF874CCB0D802C9F2"
Last-Modified: Sat, 15 Jun 2024 17:32:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=20648
Expires: Tue, 18 Jun 2024 00:09:56 GMT
Date: Mon, 17 Jun 2024 18:25:48 GMT
Connection: keep-alive

r10.o.lencr.org/

23.36.76.226

504 B

URL

r10.o.lencr.org/

IP / ASN

23.36.76.226

#20940 Akamai International B.V.

Requested byN/A

Resource Info

File typedata

First Seen2024-06-15

Last Seen2024-08-19

Times Seen41892

Size504 B (504 bytes)

MD5ede0b27def700f18bb6d4eb4c1d97352

SHA1c802c366cb2eee6b9339349aa21677fdb1bd5fa5

SHA25618ffb58da62f40b37a43b0baaceefe8bc3ef83ccdf9ee19ff874ccb0d802c9f2

HTTP Headers

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "18FFB58DA62F40B37A43B0BAACEEFE8BC3EF83CCDF9EE19FF874CCB0D802C9F2"
Last-Modified: Sat, 15 Jun 2024 17:32:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=20648
Expires: Tue, 18 Jun 2024 00:09:56 GMT
Date: Mon, 17 Jun 2024 18:25:48 GMT
Connection: keep-alive

r10.o.lencr.org/

23.36.76.226

504 B

URL

r10.o.lencr.org/

IP / ASN

23.36.76.226

#20940 Akamai International B.V.

Requested byN/A

Resource Info

File typedata

First Seen2024-06-15

Last Seen2024-08-19

Times Seen41892

Size504 B (504 bytes)

MD5ede0b27def700f18bb6d4eb4c1d97352

SHA1c802c366cb2eee6b9339349aa21677fdb1bd5fa5

SHA25618ffb58da62f40b37a43b0baaceefe8bc3ef83ccdf9ee19ff874ccb0d802c9f2

HTTP Headers

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "18FFB58DA62F40B37A43B0BAACEEFE8BC3EF83CCDF9EE19FF874CCB0D802C9F2"
Last-Modified: Sat, 15 Jun 2024 17:32:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=20648
Expires: Tue, 18 Jun 2024 00:09:56 GMT
Date: Mon, 17 Jun 2024 18:25:48 GMT
Connection: keep-alive