ZeroCERT Team

Report

Result
Link
Whois
Reference

*Date : 2023.04.13 07:50
*Site : https://172.81.61.224/
*Title : Index of /
*Info : 172.81.61.224, US(Albuquerque, United States)
*Check url : 5 counts
*Loading time : 6.458292sec
*Reference
- VIRUSTOTAL : URL Hash 2023-04-12 14:48:27 1/89, FILE Hash not found
- Google SafeBrowsing(GSB) : 172.81.61.224 is not found
*Result
(1) Suspicious file (Virustotal detection ratio) - 3count
(2) EXE File Signatures - 3count
(3) Suspicious script has been detected (PowerShell) - 1count
(4) Directory Listing - Security vulnerabilities - 1count
(5) Input site Registered Malicious url - 1count
(6) (-) MD5 : e7465dd41c7a0fae866744b86c78f80a / Virustotal : 2023-04-12 18:30:09 39/69 - 1count
(7) (+) MD5 : dsync.exe (cbffe8bea10e64e86ede27ab60f61038) - 1count
(8) (+) MD5 : cdump.exe (6799f43f598169aebc476455c624f014) - 1count

Public Link : http://zerocert.org/?code=61176f119c17df1cb526fd36ef1d07c91a6aa12bb8de0c9c50381071d6546fa3

*Latest detected Domain

이 사이트는 최근 90일 동안 악성URL 삽입된 적이 없습니다.
이 사이트는 최근 90일 동안 악성코드 중개 역할한 적이 없습니다.
이 사이트는 최근 90일 동안 악성코드를 유포한 적이 없습니다.
Relation domain not found
Relation ip not found
same IP not found
same IP bands not found
same ASN not found

https://172.81.61.224/ -> Malware url
    -> Directory Listing - Security vulnerabilities
  [exe] https://172.81.61.224/alph.exe
    -> (-) MD5 : e7465dd41c7a0fae866744b86c78f80a / Virustotal : 2023-04-12 18:30:09 39/69
    -> Malware file
    -> Suspicious file (Virustotal detection ratio)
    -> EXE File Signatures
    -> Suspicious script has been detected (PowerShell)
    [exe] https://172.81.61.224/

*Country

172.81.61.224 (Albuquerque, United States)

*Whois
unknown

Website Check

Report