Report Overview
Submitted URL
raw.githubusercontent.com/asmtron/rdpwrap/master/autoupdate_v1.2.zip
IP
185.199.111.133
ASN
#54113 FASTLY
Submitted
2024-04-23 11:45:09
Access
public
Website Title
about:privatebrowsing
Final URL
about:privatebrowsing
Tags
urlquery detections
No alerts detected
Detections
urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
3
Domain Summary
Domain / FQDN | Rank | Registered | First Seen | Last Seen | Sent | Received | IP |
---|---|---|---|---|---|---|---|
raw.githubusercontent.com | 35802 | 2014-02-06 | 2014-03-01 | 2024-04-22 | 522 B | 7.3 kB | 185.199.110.133 |
Related reports
Network Intrusion Detection Systems
Suricata /w Emerging Threats Pro
Threat Detection Systems
Public InfoSec YARA rules
No alerts detected
Files detected
URL
raw.githubusercontent.com/asmtron/rdpwrap/master/autoupdate_v1.2.zip
IP
185.199.110.133
ASN
#54113 FASTLY
File type
Zip archive data, at least v2.0 to extract, compression method=deflate
Size
6.4 kB (6394 bytes)
Hash
1df3dc2ca538ca37a47369325457df1b
8fa90bc52a2049c8249f2b49db7bd03ce50b69c8
Archive (4)
Filename | Md5 | File type | |||
---|---|---|---|---|---|
autoupdate.bat | 099268c6ccb11db81e4a455ab3e20002
| exported SGML document, ASCII text, with CRLF line terminators | |||
autoupdate__disable_autorun_on_startup.bat | 7fb1e6efe1e8608dab3b1eea43549890 | DOS batch file, ASCII text, with CRLF line terminators | |||
autoupdate__enable_autorun_on_startup.bat | 24d9715c7b22e358957d3d5a4a9d71a0 | DOS batch file, ASCII text, with CRLF line terminators | |||
autoupdate__info.txt | 27b8fdc42018cdf5848617ed4e7ee23c
| ASCII text, with CRLF line terminators |
Detections
Analyzer | Verdict | Alert |
---|---|---|
Public InfoSec YARA rules | malware | Identifies RDP Wrapper, sometimes used by attackers to maintain persistence. |
Public InfoSec YARA rules | malware | Identifies RDP Wrapper, sometimes used by attackers to maintain persistence. |
VirusTotal | suspicious |
JavaScript (0)
HTTP Transactions (1)
URL | IP | Response | Size | |||||||
---|---|---|---|---|---|---|---|---|---|---|
raw.githubusercontent.com/asmtron/rdpwrap/master/autoupdate_v1.2.zip | 185.199.110.133 | 6.4 kB | ||||||||
Detections
HTTP Headers
| ||||||||||