Report - isz.nhely.hu/start.exe

Report Overview

Visitedpublic

2025-02-16 19:08:23

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Host Summary

Host	Rank	Registered	First Seen	Last Seen	Sent	Received	IP	Fingerprints
isz.nhely.hu	unknown	2016-01-17	2022-10-07	2023-09-01	404 B	361 B	193.39.15.162
www.isz.nhely.hu	unknown	2016-01-17	2022-06-03	2023-09-03	408 B	5.4 kB	193.39.15.162

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Timestamp	Severity	Source IP	Destination IP	Alert
2025-02-16 19:08:03	high	193.39.15.162	Client IP	ET POLICY PE EXE or DLL Windows file download HTTP

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

File detected

URL

www.isz.nhely.hu/start.exe

IP / ASN

193.39.15.162

#62214 Rackforest Zrt.

File Overview

File TypePE32 executable (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

Size5.1 kB (5120 bytes)

MD5f0420ba23a28847d2291eaa8d57569d4

SHA1fc6e3eff8a805bf08d8f63406d22dc22ce4166b1

SHA2563d1d7f947c9600550f22fcbdf78f1602ec961830fcfa4663144e5d92fbd1b222

Detections

Analyzer	Verdict	Alert
VirusTotal	suspicious	VirusTotal - Scan result 9/71

JavaScript (0)

HTTP Transactions (2)

URL IP Response Size

GET isz.nhely.hu/start.exe

193.39.15.162

301 Moved Permanently

162 B

URL

isz.nhely.hu/start.exe

IP / ASN

193.39.15.162

#62214 Rackforest Zrt.

Requested byN/A

Resource Info

File typeHTML document, ASCII text, with CRLF line terminators

First Seen2023-04-05

Last Seen2025-07-11

Times Seen131096

Size162 B (162 bytes)

MD54f8e702cc244ec5d4de32740c0ecbd97

SHA13adb1f02d5b6054de0046e367c1d687b6cdf7aff

SHA2569e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a

HTTP Headers

GET /start.exe HTTP/1.1
Host: isz.nhely.hu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sun, 16 Feb 2025 19:07:52 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Location: http://www.isz.nhely.hu/start.exe

GET www.isz.nhely.hu/start.exe

193.39.15.162

200 OK

5.1 kB

URL

www.isz.nhely.hu/start.exe

IP / ASN

193.39.15.162

#62214 Rackforest Zrt.

Requested byN/A

Resource Info

File typePE32 executable (console) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

First Seen2023-06-19

Last Seen2025-02-16

Times Seen3

Size5.1 kB (5120 bytes)

MD5f0420ba23a28847d2291eaa8d57569d4

SHA1fc6e3eff8a805bf08d8f63406d22dc22ce4166b1

SHA2563d1d7f947c9600550f22fcbdf78f1602ec961830fcfa4663144e5d92fbd1b222

Detections

Analyzer	Verdict	Alert
VirusTotal	suspicious	VirusTotal - Scan result 9/71
suricata	high	ET POLICY PE EXE or DLL Windows file download HTTP

HTTP Headers

GET /start.exe HTTP/1.1
Host: www.isz.nhely.hu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Date: Sun, 16 Feb 2025 19:07:53 GMT
Content-Type: application/x-msdos-program
Content-Length: 5120
Connection: keep-alive
Last-Modified: Tue, 03 Jan 2023 14:07:55 GMT
ETag: "1400-5f15c981f8630"
Accept-Ranges: bytes