Report Overview
Visitedpublic
2024-10-29 22:26:33
Tags
Submit Tags
URL
github.com/Spencer0187/Roblox-Macro-Utilities/releases/download/V2.7.5/suspend.exe
Finishing URL
about:privatebrowsing
IP / ASN
140.82.121.3
#36459 GITHUB
Title
about:privatebrowsing

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
3

Host Summary

HostRankRegisteredFirst SeenLast Seen
objects.githubusercontent.com
1340602014-02-062021-11-012024-10-23
github.com
14232007-10-092016-07-132024-10-23

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules
SeverityIndicatorAlert
mediumobjects.githubusercontent.com/github-production-release-asset-2e65be/856065472/1ecf0ba0-d539-4ac1-9a4d-ee491474c8dd?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=releaseassetproduction%2F20241029%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20241029T222608Z&X-Amz-Expires=300&X-Amz-Signature=b7a4204c3132961d038d8593201c1247e3c49e3d0e5914020b878bab2fbb3736&X-Amz-SignedHeaders=host&response-content-disposition=attachment%3B%20filename%3Dsuspend.exe&response-content-type=application%2Foctet-streampe_detect_tls_callbacks

OpenPhish

No alerts detected


PhishTank

No alerts detected


Mnemonic Secure DNS

No alerts detected


Quad9 DNS

No alerts detected


ThreatFox

No alerts detected


File detected

URL
objects.githubusercontent.com/github-production-release-asset-2e65be/856065472/1ecf0ba0-d539-4ac1-9a4d-ee491474c8dd?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=releaseassetproduction%2F20241029%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20241029T222608Z&X-Amz-Expires=300&X-Amz-Signature=b7a4204c3132961d038d8593201c1247e3c49e3d0e5914020b878bab2fbb3736&X-Amz-SignedHeaders=host&response-content-disposition=attachment%3B%20filename%3Dsuspend.exe&response-content-type=application%2Foctet-stream
IP / ASN
185.199.109.133
#54113 FASTLY
File Overview
File TypePE32+ executable (GUI) x86-64, for MS Windows, 6 sections
Size1.4 MB (1367040 bytes)
MD5e84d3466a14dfa85c39f797835f36bc8
SHA19d941e63989afc30c088e2f4b9427324ae1d9798

Detections

AnalyzerVerdictAlert
YARAhub by abuse.chmalware
pe_detect_tls_callbacks
VirusTotalsuspicious

JavaScript (0)

HTTP Transactions (2)

URLIPResponseSize
GET github.com/Spencer0187/Roblox-Macro-Utilities/releases/download/V2.7.5/suspend.exe
140.82.121.3302 Found0 B
GET objects.githubusercontent.com/github-production-release-asset-2e65be/856065472/1ecf0ba0-d539-4ac1-9a4d-ee491474c8dd?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=releaseassetproduction%2F20241029%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20241029T222608Z&X-Amz-Expires=300&X-Amz-Signature=b7a4204c3132961d038d8593201c1247e3c49e3d0e5914020b878bab2fbb3736&X-Amz-SignedHeaders=host&response-content-disposition=attachment%3B%20filename%3Dsuspend.exe&response-content-type=application%2Foctet-stream
185.199.109.133200 OK1.4 MB