*Date : 2020.09.15 09:48
*Site : http://61.85.2.15
*Title : IIS7
*Info : 61.85.2.15, KR(, Republic of Korea)
*Check url : 6 counts
*Loading time : 1.820876sec
*Reference
  - VIRUSTOTAL : URL Hash not found,  FILE Hash 2017-11-12 01:53:38 47/60
  - Google SafeBrowsing(GSB) : 61.85.2.15 is not found
*Result
 (1) Suspicious script has been detected (VBScript) - 1count
 (2) Suspicious script has been detected (VBS/Ramnit.gen) - 1count
 (3) Input site Registered Malicious url - 1count
 (4) Suspicious url(NULL) - 1count
 (5) (-) MD5 : 97734d0f722a30d7aca1289d232b95b3 / Virustotal : 2017-11-12 01:53:38 47/60 - 1count


Public Link : http://zerocert.org/?code=d12214d9c8ea81815c1efb985e9cdbe3b1c6bed35030573b13ae7a9d49afbaf0

*Latest detected Domain

• 이 사이트는 최근 90일 동안 악성URL 삽입된 적이 없습니다.
• 이 사이트는 최근 90일 동안 악성코드 중개 역할한 적이 없습니다.
• 이 사이트는 최근 90일 동안 악성코드를 유포한 적이 없습니다.
• Relation domain not found
• Relation ip not found
• same IP not found
• same IP bands not found
• same ASN not found

http://61.85.2.15 -> Malware url
    -> (-) MD5 : 97734d0f722a30d7aca1289d232b95b3 / Virustotal : 2017-11-12 01:53:38 47/60
    -> Malware file
    -> Suspicious script has been detected (VBS/Ramnit.gen)
    -> Suspicious script has been detected (VBScript)
  [script] http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd  -> Offline?
  [script] http://www.w3.org/1999/xhtml  -> Offline?
  [script] http://go.microsoft.com/fwlink/?linkid=66138&
    -> Suspicious url(NULL)
    [Location] https://www.iis.net?utm_medium=iis-deployment&=
  [exe] http://61.85.2.15/svchost.exe  -> Offline

*Country
61.85.2.15 (, Republic of Korea)



*Whois
unknown

*Reference
 VIRUSTOTAL : domain | ip | hash url | hash file
 Google SafeBrowsing(GSB) :
 URLVoid : domain
 Malware Domain List : domain
 SCUMWARE : domain | ip
 Project Honey Pot : ip
 Ransomware Tracker : domain
 Threat Crowd : domain | ip | hash file
 ZeroCERT Safeguard : domain | ip

*etc
  Stopbadware | Norton Safe | McAfee siteadvisor | Phish tank | Tcpiputils