Report - update.shared.it/SUPERMICRO/X10DRL-I/driver/IATA

Report Overview

Visitedpublic

2025-04-15 06:02:42

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Host Summary

Host	Rank	Registered	First Seen	Last Seen	Sent	Received	IP	Fingerprints
update.shared.it	unknown	1997-12-30	2017-01-22	2025-04-11	523 B	24 MB	94.102.140.92

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

Scan Date	Severity	Indicator	Alert
2025-04-15	medium	update.shared.it/SUPERMICRO/X10DRL-I/driver/IATA_CD.exe	Detect pe file that no import table

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

File detected

URL

update.shared.it/SUPERMICRO/X10DRL-I/driver/IATA_CD.exe

IP / ASN

94.102.140.92

#47217 Planetel SPA

File Overview

File TypePE32 executable (GUI) Intel 80386, for MS Windows, 4 sections

Size24 MB (24360432 bytes)

MD53a5b03484d1a05a3a2753d7bc47e256f

SHA10f7e973026b3b23283dd17ab8402a44f723b1776

SHA25667de4b712d2f73ef6d51c868afebadc8a9a6891908d7daa627f3b20b20a66a89

Detections

Analyzer	Verdict	Alert
YARAhub by abuse.ch	malware	Detect pe file that no import table

JavaScript (0)

HTTP Transactions (1)

URL IP Response Size

GET update.shared.it/SUPERMICRO/X10DRL-I/driver/IATA_CD.exe

94.102.140.92

200 OK

24 MB

URL

update.shared.it/SUPERMICRO/X10DRL-I/driver/IATA_CD.exe

IP / ASN

94.102.140.92

#47217 Planetel SPA

Requested byN/A

Resource Info

File typePE32 executable (GUI) Intel 80386, for MS Windows, 4 sections

First Seen2025-04-15

Last Seen2025-04-15

Times Seen1

Size24 MB (24360432 bytes)

MD53a5b03484d1a05a3a2753d7bc47e256f

SHA10f7e973026b3b23283dd17ab8402a44f723b1776

SHA25667de4b712d2f73ef6d51c868afebadc8a9a6891908d7daa627f3b20b20a66a89

Certificate Info

IssuerLet's Encrypt

Subjectshared.it

FingerprintB0:E5:3C:F4:97:C7:77:93:B2:0A:F7:48:04:DF:C8:23:4F:23:AE:88

ValiditySat, 15 Mar 2025 01:18:48 GMT - Fri, 13 Jun 2025 01:18:47 GMT

Detections

Analyzer	Verdict	Alert
YARAhub by abuse.ch	malware	Detect pe file that no import table

HTTP Headers

GET /SUPERMICRO/X10DRL-I/driver/IATA_CD.exe HTTP/1.1
Host: update.shared.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
date: Tue, 15 Apr 2025 06:03:22 GMT
server: Apache/2.4.7 (Ubuntu)
last-modified: Mon, 27 Apr 2015 12:38:13 GMT
etag: "173b5f0-514b404ef1740"
accept-ranges: bytes
content-length: 24360432
content-type: application/x-msdos-program