Report Overview

  1. Submitted URL

    w.mane.fun/pnco.zip

  2. IP

    146.190.192.68

    ASN

    #14061 DIGITALOCEAN-ASN

  3. Submitted

    2024-04-24 02:26:16

    Access

    public

  4. Website Title

    about:privatebrowsing

  5. Final URL

    about:privatebrowsing

  6. Tags

  7. urlquery detections

    No alerts detected

Detections

  1. urlquery

    0

  2. Network Intrusion Detection

    0

  3. Threat Detection Systems

    8

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
w.mane.fununknown2023-02-012023-04-182023-11-06

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected


OpenPhish

No alerts detected


PhishTank

No alerts detected


mnemonic secure dns

No alerts detected


Quad9 DNS

No alerts detected


ThreatFox

No alerts detected


Files detected

  1. URL

    w.mane.fun/pnco.zip

  2. IP

    146.190.192.68

  3. ASN

    #14061 DIGITALOCEAN-ASN

  1. File type

    Zip archive data, at least v2.0 to extract, compression method=deflate

    Size

    3.5 MB (3517355 bytes)

  2. Hash

    c07eec20ef21128f0e281e8d60d4ea7a

    ff77a6de91ae23a12775b87ee1ad24a013732476

  1. Archive (1)

  2. FilenameMd5File type
    blue_helper
    eb4cadd564307359965a87ce6687614e
    ELF 64-bit LSB executable, x86-64, version 1 (GNU/Linux)

    Detections

    AnalyzerVerdictAlert
    Public Nextron YARA rulesmalware
    Detects Monero mining software
    Elastic Security YARA Rulesmalware
    Linux.Cryptominer.Camelot
    Elastic Security YARA Rulesmalware
    Linux.Cryptominer.Malxmr
    Elastic Security YARA Rulesmalware
    Linux.Trojan.Pornoasset
    Elastic Security YARA Rulesmalware
    MacOS.Cryptominer.Generic
    Elastic Security YARA Rulesmalware
    MacOS.Cryptominer.Xmrig
    VirusTotalmalicious

JavaScript (0)

HTTP Transactions (1)

URLIPResponseSize
w.mane.fun/pnco.zip
146.190.192.68 3.5 MB