Report - resolveinformatica.com.br/programas/reset/ml/Software_Reset_Epson_L3150

Report Overview

Visitedpublic

2024-06-10 15:05:23

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Host Summary

Host	Rank	Registered	First Seen	Last Seen	Sent	Received	IP	Fingerprints
resolveinformatica.com.br	unknown	2021-04-16	2021-04-16 11:11:42	2024-04-18 05:06:41	537 B	1.3 MB	154.56.42.49

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

Scan Date	Severity	Indicator	Alert
2024-06-10	medium	resolveinformatica.com.br/programas/reset/ml/Software_Reset_Epson_L3150_Resolve.exe	Detects an SFX archive with automatic script execution

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

File detected

URL

resolveinformatica.com.br/programas/reset/ml/Software_Reset_Epson_L3150_Resolve.exe

IP / ASN

154.56.42.49

#47583 Hostinger International Limited

File Overview

File TypePE32 executable (GUI) Intel 80386, for MS Windows, 6 sections

Size1.3 MB (1312773 bytes)

MD5e2ce87c27f4a4d429526448b72a51960

SHA12cd7acfd5656bf5b9cda34648c76edd0a8a71b5a

SHA25614f1ee2415f537efa9f69441f56bda2bc0f5d904a140a852415a0c802fab59f4

Detections

Analyzer	Verdict	Alert
YARAhub by abuse.ch	malware	Detects an SFX archive with automatic script execution
VirusTotal	malicious	VirusTotal - Scan result 36/72

JavaScript (0)

HTTP Transactions (1)

URL IP Response Size

GET resolveinformatica.com.br/programas/reset/ml/Software_Reset_Epson_L3150_Resolve.exe

154.56.42.49

200 OK

1.3 MB

URL User Request GET HTTPS

resolveinformatica.com.br/programas/reset/ml/Software_Reset_Epson_L3150_Resolve.exe

IP / ASN

154.56.42.49

#47583 Hostinger International Limited

Requested byN/A

Resource Info

File typePE32 executable (GUI) Intel 80386, for MS Windows, 6 sections

First Seen2024-06-10

Last Seen2024-10-04

Times Seen5

Size1.3 MB (1312773 bytes)

MD5e2ce87c27f4a4d429526448b72a51960

SHA12cd7acfd5656bf5b9cda34648c76edd0a8a71b5a

SHA25614f1ee2415f537efa9f69441f56bda2bc0f5d904a140a852415a0c802fab59f4

Certificate Info

IssuerLet's Encrypt

Subjectresolveinformatica.com.br

Fingerprint65:49:20:E1:82:49:55:8E:1A:1F:F5:8A:2B:EB:E5:59:3E:3A:EA:F9

ValidityWed, 17 Apr 2024 13:30:21 GMT - Tue, 16 Jul 2024 13:30:20 GMT

Detections

Analyzer	Verdict	Alert
YARAhub by abuse.ch	malware	Detects an SFX archive with automatic script execution
VirusTotal	malicious	VirusTotal - Scan result 36/72

HTTP Headers

GET /programas/reset/ml/Software_Reset_Epson_L3150_Resolve.exe HTTP/1.1
Host: resolveinformatica.com.br
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: application/x-executable
last-modified: Wed, 03 Apr 2024 19:18:18 GMT
etag: "140805-660dab7a-c90ee32f5b4330af;;;"
accept-ranges: bytes
content-length: 1312773
date: Mon, 10 Jun 2024 15:04:58 GMT
server: LiteSpeed
platform: hostinger
content-security-policy: upgrade-insecure-requests
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2