Report - dqunying2.jb51.net/201904/tools/ctwpgsljjxq

Report Overview

Visitedpublic

2025-01-29 12:31:41

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Host Summary

Host	Rank	Registered	First Seen	Last Seen	Sent	Received	IP	Fingerprints
dqunying2.jb51.net	unknown	2006-07-22	2021-11-12	2025-01-19	518 B	552 kB	116.10.184.160

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

File detected

URL

dqunying2.jb51.net/201904/tools/ctwpgsljjxq_jb51.rar

IP / ASN

116.10.184.160

#138169 China Telecom

File Overview

File TypeRAR archive data, v5

Size551 kB (551225 bytes)

MD5596382f0a37dcaf22cac64eb23f2939d

SHA12e908e25adb25124d5ec0324bcf4237d613aa8ab

SHA256ca97ef7e273f751d2138bbd15ce66e17258d5272007b5baa9bea19d37207e679

Detections

Analyzer	Verdict	Alert
VirusTotal	malicious	VirusTotal - Scan result 30/64

JavaScript (0)

HTTP Transactions (1)

URL IP Response Size

GET dqunying2.jb51.net/201904/tools/ctwpgsljjxq_jb51.rar

116.10.184.160

200 OK

551 kB

URL User Request GET HTTPS

dqunying2.jb51.net/201904/tools/ctwpgsljjxq_jb51.rar

IP / ASN

116.10.184.160

#138169 China Telecom

Requested byN/A

Resource Info

File typeRAR archive data, v5

First Seen2023-11-29

Last Seen2025-01-29

Times Seen3

Size551 kB (551225 bytes)

MD5596382f0a37dcaf22cac64eb23f2939d

SHA12e908e25adb25124d5ec0324bcf4237d613aa8ab

SHA256ca97ef7e273f751d2138bbd15ce66e17258d5272007b5baa9bea19d37207e679

Certificate Info

IssuerTrustAsia Technologies, Inc.

Subject*.jb51.net

Fingerprint59:67:26:63:D9:4D:12:29:ED:86:49:B7:60:64:95:87:DC:26:67:1E

ValidityTue, 03 Dec 2024 00:00:00 GMT - Fri, 02 Jan 2026 23:59:59 GMT

Detections

Analyzer	Verdict	Alert
VirusTotal	malicious	VirusTotal - Scan result 30/64

HTTP Headers

GET /201904/tools/ctwpgsljjxq_jb51.rar HTTP/1.1
Host: dqunying2.jb51.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/octet-stream
Last-Modified: Mon, 08 Apr 2019 08:32:52 GMT
Accept-Ranges: bytes
ETag: "092daa7e5edd41:0"
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Wed, 29 Jan 2025 12:31:14 GMT
Content-Length: 551225