Report - fastping.co.kr/app/download/public/fastping

Report Overview

Visitedpublic

2025-05-11 00:00:00

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Host Summary

Host	Rank	Registered	First Seen	Last Seen	Sent	Received	IP	Fingerprints
fastping.co.kr	unknown	2010-04-21	2012-05-29	2025-03-10	521 B	5.3 MB	211.37.173.62

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

Scan Date	Severity	Indicator	Alert
2025-05-11	medium	fastping.co.kr/app/download/public/fastping_agent.exe	Detect files is `SliverFox` malware

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

File detected

URL

fastping.co.kr/app/download/public/fastping_agent.exe

IP / ASN

211.37.173.62

#4766 Korea Telecom

File Overview

File TypePE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive, 5 sections

Size5.3 MB (5272360 bytes)

MD526bffacbe27d55365f789e1aeeb78373

SHA118891667fee37423b5b21adb3492b1a620fee8f3

SHA256681d2e727b242b4785f801b2d546e6607571b16586f89a8faaa37f7f10812dd0

Detections

Analyzer	Verdict	Alert
YARAhub by abuse.ch	malware	Detect files is `SliverFox` malware
VirusTotal	suspicious	VirusTotal - Scan result 1/72

JavaScript (0)

HTTP Transactions (1)

URL IP Response Size

GET fastping.co.kr/app/download/public/fastping_agent.exe

211.37.173.62

200 OK

5.3 MB

URL User Request GET HTTPS

fastping.co.kr/app/download/public/fastping_agent.exe

IP / ASN

211.37.173.62

#4766 Korea Telecom

Requested byN/A

Resource Info

File typePE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive, 5 sections

First Seen2025-05-11

Last Seen2025-05-11

Times Seen1

Size5.3 MB (5272360 bytes)

MD526bffacbe27d55365f789e1aeeb78373

SHA118891667fee37423b5b21adb3492b1a620fee8f3

SHA256681d2e727b242b4785f801b2d546e6607571b16586f89a8faaa37f7f10812dd0

Certificate Info

IssuerLet's Encrypt

Subjectfastping.co.kr

Fingerprint66:8B:8E:5D:CC:83:A0:11:2C:16:F8:E8:15:03:54:3A:40:41:B4:87

ValidityMon, 28 Apr 2025 05:26:40 GMT - Sun, 27 Jul 2025 05:26:39 GMT

Detections

Analyzer	Verdict	Alert
YARAhub by abuse.ch	malware	Detect files is `SliverFox` malware
VirusTotal	suspicious	VirusTotal - Scan result 1/72

HTTP Headers

GET /app/download/public/fastping_agent.exe HTTP/1.1
Host: fastping.co.kr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sat, 10 May 2025 23:59:43 GMT
Server: Apache/2.4.52 (Ubuntu)
Last-Modified: Mon, 28 Apr 2025 03:15:40 GMT
ETag: "507328-633ce1944e0cc"
Accept-Ranges: bytes
Content-Length: 5272360
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: application/x-msdos-program