Report Overview
Domain Summary
Domain / FQDN | Rank | Registered | First Seen | Last Seen | Sent | Received | IP |
---|---|---|---|---|---|---|---|
anadius.su | unknown | 2023-11-07 | 2023-11-13 | 2024-12-21 | 505 B | 250 kB | ![]() |
Related reports
Network Intrusion Detection Systems
Suricata /w Emerging Threats Pro
Threat Detection Systems
Public InfoSec YARA rules
No alerts detected
OpenPhish
No alerts detected
PhishTank
No alerts detected
Quad9 DNS
No alerts detected
ThreatFox
No alerts detected
Files detected
URL
anadius.su/attachments/EA%20DLC%20Unlocker%20v2.zip
IP
91.149.227.100
ASN
#200508 Sorok76 Ltd
File type
Zip archive data, at least v2.0 to extract, compression method=deflate
Size
249 kB (249230 bytes)
Hash
8ccfb657503c5ae44bf1df7281d733f7
47f0e72d9b9a7d06e76340e1adce4d30512ade2a
Archive (31)
Filename | Md5 | File type | ||||||
---|---|---|---|---|---|---|---|---|
g_STAR WARS Jedi Survivor.ini | 85ec254324d2b9b8bd33fc7e1023d873 | ASCII text, with CRLF line terminators | ||||||
g_My Time at Portia.ini | ede7b7058e8c95575ef5517d36784fe2 | ASCII text, with CRLF line terminators | ||||||
g_Dead Space 2023.ini | fc3f0c4d744a4310c775b2879399c468 | ASCII text, with CRLF line terminators | ||||||
g_The Surge.ini | 7b0cffc89d868888402003be8d94c0e7 | ASCII text, with CRLF line terminators | ||||||
g_The Sims 4.ini | f610a2db9d405db00b03d2e891d358bb | Unicode text, UTF-8 text, with CRLF line terminators | ||||||
g_SimCity 2013.ini | 2a83a1d376bd05d4c5516aa75c9d7786 | ASCII text, with CRLF line terminators | ||||||
setup.bat | dcc9950b262c57c2f7cb5cf62d079099 | ASCII text, with very long lines (321), with CRLF line terminators | ||||||
g_STAR WARS Jedi Fallen Order.ini | 473c794e2d9ce2a2a68879595b0e7f04 | ASCII text, with CRLF line terminators | ||||||
g_Cities Skylines.ini | b7f9bf30d6947aff647b416da0fd551f | ASCII text, with CRLF line terminators | ||||||
g_Mutant Year Zero.ini | d2df62135af50232e599c5be5f1105b3 | ASCII text, with CRLF line terminators | ||||||
g_Need For Speed Heat.ini | c11c8268aa87fd021f691d4ae9529ccb | ASCII text, with CRLF line terminators | ||||||
g_Northgard.ini | 43b7f6386594bb53e06aa1b750950f47 | ASCII text, with CRLF line terminators | ||||||
setup_linux.sh | 6ac1972a00a9b39710c680d2bbcdd5c7 | Bourne-Again shell script, ASCII text executable | ||||||
g_It Takes Two.ini | 31561acf01f495280b2e03ec26b7812f | ASCII text, with CRLF line terminators | ||||||
g_F1 23.ini | 18416efa57d527355f065064172a821d | ASCII text, with CRLF line terminators | ||||||
g_Need For Speed Unbound.ini | 78d13354bf2a2970ed74c39a1a2ef065 | ASCII text, with CRLF line terminators | ||||||
config.ini | 9cd8592f5b8934fec8b47994c4fda5b6 | Generic INItialization configuration [autoupdate] | ||||||
g_This War of Mine.ini | d60f144dce2ff1ecbe28b1b5b6276f3e | ASCII text, with CRLF line terminators | ||||||
g_The Sims 3.ini | 55daa556f13a5d4d7fe9aecf7d8a4d64 | ASCII text, with CRLF line terminators | ||||||
g_Need For Speed Payback.ini | c49b925d0158a9c34e976d436c8ac2a0 | ASCII text, with CRLF line terminators | ||||||
g_GRID Legends.ini | c2dc8a3df7745fc6bafb633d4ea33fb5 | ASCII text, with CRLF line terminators | ||||||
readme.txt | 1d91eea5c0aa4a1e16e75c8fe2815a7c | ASCII text, with CRLF line terminators | ||||||
g_Frostpunk.ini | fb2516caacebcdb02e9f2194ba72de12 | ASCII text, with CRLF line terminators | ||||||
g_Tales of Kenzera ZAU.ini | bd254a902a564a63590230d825614a2b | ASCII text, with CRLF line terminators | ||||||
g_The Sinking City.ini | 7a4cd7023da1924c4e9b8a062742ed5f | ASCII text, with CRLF line terminators | ||||||
g_F1 22.ini | 51fff0fdf96929ece2b1ca964d006550 | Unicode text, UTF-8 text, with CRLF line terminators | ||||||
g_Dead Space 3.ini | 19f5deda4368c463d16687109abf543d | ASCII text, with CRLF line terminators | ||||||
g_Tropico 6.ini | 768e49dae6976e945da44c075a1dd38d | ASCII text, with CRLF line terminators | ||||||
g_Need For Speed Most Wanted.ini | 53020d0ff8e79ee8305061d5d3964927 | ASCII text, with CRLF line terminators | ||||||
version.dll | b69243228b677fdacac06ce9365a4571
| PE32+ executable (DLL) (GUI) x86-64, for MS Windows, 9 sections | ||||||
version.dll | 2ef99a682256f6b9820b876a9eb2950a
| PE32 executable (DLL) (GUI) Intel 80386, for MS Windows, 7 sections |
Detections
Analyzer | Verdict | Alert |
---|---|---|
YARAhub by abuse.ch | malware | files - file ~tmp01925d3f.exe |
YARAhub by abuse.ch | malware | files - file ~tmp01925d3f.exe |
JavaScript (0)
HTTP Transactions (1)
URL | IP | Response | Size | |
---|---|---|---|---|
GET anadius.su/attachments/EA%20DLC%20Unlocker%20v2.zip | ![]() | 200 OK | 249 kB | |
HTTP Headers
| ||||