Report - hrathnir.info/download/Hrathnir-7.1c(32bit).zip

Report Overview

Visited public
2024-01-20 01:52:10
Tags
URL
hrathnir.info/download/Hrathnir-7.1c(32bit).zip
Finishing URL
about:privatebrowsing
IP / ASN
202.172.26.24
#37907 DigiRock, Inc.
Title
about:privatebrowsing

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
hrathnir.info	unknown	2010-12-18	2015-07-20 14:20:08	2023-11-18 12:59:21	417 B	3.0 MB	202.172.26.24

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

Files detected

URL
hrathnir.info/download/Hrathnir-7.1c(32bit).zip
IP
202.172.26.24
ASN
#37907 DigiRock, Inc.

File type
Zip archive data, at least v2.0 to extract, compression method=deflate
Size
3.0 MB (3043957 bytes)
Hash
e4921dbaa87de81b6c105afff6de0064
1ff5a214f919d1ddbbbf221784172125681be673
64bf38f02832f89025afa6f4c91de5e5ae40d7889237e58a8ac2043e5122aa1f

Archive (10)

Filename

Md5

File type

Hrathnir-Readme_English.txt

36d5cef3cdd9a286bad42712fa050f53

Unicode text, UTF-16, little-endian text, with CRLF line terminators

Hrathnir-Readme_Japanese.txt

09bf8a2bb6d3ad53b797c61653f19093

Unicode text, UTF-16, little-endian text, with CRLF line terminators

Hrathnir.exe

82a139513dca8cf883bda453532bb081

PE32 executable (GUI) Intel 80386, for MS Windows, 5 sections

mfc120u.dll

f4f2a4c459dd3aa22dd3984d13b15746

PE32 executable (DLL) (console) Intel 80386, for MS Windows, 5 sections

msvcr120.dll

034ccadc1c073e4216e9466b720f9849

PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, 5 sections

NattyCommon.dll

1cbd6b3a4162605040ed05906965802a

PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, 6 sections

ButtonClick.wav

b982c93e0891fe06c2f0f27ff3aeced3

RIFF (little-endian) data, WAVE audio, Microsoft PCM, 16 bit, stereo 44100 Hz

ButtonHover.wav

a45c4392d37f8ed79590a73aa3ea46a3

RIFF (little-endian) data, WAVE audio, Microsoft PCM, 16 bit, stereo 44100 Hz

MenuClose.wav

0aef5d6721bc998b048d02b2474467d8

RIFF (little-endian) data, WAVE audio, Microsoft PCM, 16 bit, stereo 22050 Hz

MenuOpen.wav

0ead3a3b63d35b9de1c84d23d76d4d7f

RIFF (little-endian) data, WAVE audio, Microsoft PCM, 16 bit, mono 44100 Hz

Detections

Analyzer	Verdict	Alert
YARAhub by abuse.ch	malware	meth_get_eip

JavaScript (0)

HTTP Transactions (1)

URL IP Response Size

	URL	IP	Response	Size
	hrathnir.info/download/Hrathnir-7.1c(32bit).zip	202.172.26.24	200 OK	3.0 MB
URL User Request GET HTTP/1.1 hrathnir.info/download/Hrathnir-7.1c(32bit).zip IP 202.172.26.24:80 ASN #37907 DigiRock, Inc. File type Zip archive data, at least v2.0 to extract, compression method=deflate Size 3.0 MB (3043957 bytes) Hash e4921dbaa87de81b6c105afff6de0064 1ff5a214f919d1ddbbbf221784172125681be673 64bf38f02832f89025afa6f4c91de5e5ae40d7889237e58a8ac2043e5122aa1f HTTP Headers `GET /download/Hrathnir-7.1c(32bit).zip HTTP/1.1 Host: hrathnir.info User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate DNT: 1 Connection: keep-alive Upgrade-Insecure-Requests: 1 Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Date: Sat, 20 Jan 2024 01:51:37 GMT Server: Apache Last-Modified: Sun, 05 Jul 2015 04:51:10 GMT ETag: "2e7275-51a1989aeeb80" Accept-Ranges: bytes Content-Length: 3043957 Vary: User-Agent Keep-Alive: timeout=15, max=100 Connection: Keep-Alive Content-Type: application/zip`

hrathnir.info/download/Hrathnir-7.1c(32bit).zip

202.172.26.24

200 OK

3.0 MB

URL User Request GET HTTP/1.1
hrathnir.info/download/Hrathnir-7.1c(32bit).zip
IP
202.172.26.24:80
ASN
#37907 DigiRock, Inc.

File type
Zip archive data, at least v2.0 to extract, compression method=deflate
Size
3.0 MB (3043957 bytes)
Hash
e4921dbaa87de81b6c105afff6de0064
1ff5a214f919d1ddbbbf221784172125681be673
64bf38f02832f89025afa6f4c91de5e5ae40d7889237e58a8ac2043e5122aa1f

HTTP Headers

GET /download/Hrathnir-7.1c(32bit).zip HTTP/1.1
Host: hrathnir.info
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sat, 20 Jan 2024 01:51:37 GMT
Server: Apache
Last-Modified: Sun, 05 Jul 2015 04:51:10 GMT
ETag: "2e7275-51a1989aeeb80"
Accept-Ranges: bytes
Content-Length: 3043957
Vary: User-Agent
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Content-Type: application/zip

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

Files detected

URL

IP

ASN

File type

Size

Hash

Archive (10)

Detections

JavaScript (0)

HTTP Transactions (1)

URL User Request GET HTTP/1.1

IP

ASN

File type

Size

Hash

HTTP Headers