Report Overview
Visitedpublic
2024-09-01 19:42:14
Tags
Submit Tags
URL
finmastersusa.top/inc/stealc_default2.exe
Finishing URL
about:privatebrowsing
IP / ASN
104.21.71.131
#13335 CLOUDFLARENET
Title
about:privatebrowsing

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
0

Host Summary

HostRankRegisteredFirst SeenLast Seen
finmastersusa.top
unknown2023-12-272023-12-27 18:17:542024-03-01 23:16:45
r11.o.lencr.org
unknown2020-06-292024-06-07 07:43:572024-08-31 18:12:11
r10.o.lencr.org
unknown2020-06-292024-06-06 21:45:112024-08-31 18:12:11

Related reports

Threat Detection Systems

Public InfoSec YARA rules
SeverityIndicatorAlert
mediumfinmastersusa.top/inc/stealc_default2.exedetect_Mars_Stealer

OpenPhish

No alerts detected


PhishTank

No alerts detected


mnemonic secure dns

No alerts detected


Quad9 DNS

No alerts detected


ThreatFox

No alerts detected


File detected

URL
finmastersusa.top/inc/stealc_default2.exe
IP / ASN
104.21.71.131
#13335 CLOUDFLARENET
File Overview
File TypePE32 executable (GUI) Intel 80386, for MS Windows, 4 sections
Size192 kB (192000 bytes)
MD57a02aa17200aeac25a375f290a4b4c95
SHA17cc94ca64268a9a9451fb6b682be42374afc22fd

Detections

AnalyzerVerdictAlert
MALGAMYmalware
detect_Mars_Stealer
VirusTotalmalicious
VirusTotal - Scan result 66/75

JavaScript (0)

HTTP Transactions (9)

URLIPResponseSize