Report - dl.keepstreams.com/download/1088_1250_b3f3c7bd/keepstreams

Report Overview

Visitedpublic

2025-01-01 01:43:43

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Host Summary

Host	Rank	Registered	First Seen	Last Seen	Sent	Received	IP	Fingerprints
dl.keepstreams.com	unknown	2021-09-26	2022-10-02	2024-12-30	523 B	174 kB	54.240.174.116

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

Scan Date	Severity	Indicator	Alert
2025-01-01	medium	dl.keepstreams.com/download/1088_1250_b3f3c7bd/keepstreams_1250.exe	Detect pe file that no import table

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

File detected

URL

dl.keepstreams.com/download/1088_1250_b3f3c7bd/keepstreams_1250.exe

IP / ASN

54.240.174.116

#16509 AMAZON-02

File Overview

File TypePE32 executable (GUI) Intel 80386, for MS Windows, 5 sections

Size174 kB (173505 bytes)

MD5568322b39be9aee70e734a1f10569aba

SHA119a94a7a71f3ca41c8a937e81dcb984231f153c9

SHA25616365fd7e4b9aedef74aa7214bb27378087614efe7226f4aa8a551118d7493cd

Detections

Analyzer	Verdict	Alert
YARAhub by abuse.ch	malware	Detect pe file that no import table

JavaScript (0)

HTTP Transactions (1)

URL IP Response Size

GET dl.keepstreams.com/download/1088_1250_b3f3c7bd/keepstreams_1250.exe

54.240.174.116

200 OK

174 kB

URL

dl.keepstreams.com/download/1088_1250_b3f3c7bd/keepstreams_1250.exe

IP / ASN

54.240.174.116

#16509 AMAZON-02

Requested byN/A

Resource Info

File typePE32 executable (GUI) Intel 80386, for MS Windows, 5 sections

First Seen2025-01-01

Last Seen2025-01-01

Times Seen1

Size174 kB (173505 bytes)

MD5568322b39be9aee70e734a1f10569aba

SHA119a94a7a71f3ca41c8a937e81dcb984231f153c9

SHA25616365fd7e4b9aedef74aa7214bb27378087614efe7226f4aa8a551118d7493cd

Certificate Info

IssuerAmazon

Subjectdl.keepstreams.com

Fingerprint6B:97:09:21:88:60:F0:85:38:16:D7:E3:9D:F2:7D:0E:C4:7C:BB:EF

ValidityMon, 14 Oct 2024 00:00:00 GMT - Wed, 12 Nov 2025 23:59:59 GMT

Detections

Analyzer	Verdict	Alert
YARAhub by abuse.ch	malware	Detect pe file that no import table

HTTP Headers

GET /download/1088_1250_b3f3c7bd/keepstreams_1250.exe HTTP/1.1
Host: dl.keepstreams.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: application/x-msdos-program
content-length: 550969752
date: Wed, 01 Jan 2025 01:43:20 GMT
last-modified: Tue, 31 Dec 2024 12:04:22 GMT
etag: "51395c2acf92b25b18a7a41d951bf25b-53"
x-amz-server-side-encryption: AES256
x-amz-meta-ctime: 1735646660
x-amz-meta-mode: 33188
x-amz-meta-gid: 0
x-amz-meta-uid: 0
x-amz-meta-mtime: 1735640612
accept-ranges: bytes
server: AmazonS3
x-cache: Miss from cloudfront
via: 1.1 9037b7743a833da13439f0d4e2619b52.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: n_bcU8iRm_oqWaYjtHyxWeCl87CDFt8wVeOG3Xsbg0bcf4euCv5PHQ==
X-Firefox-Spdy: h2