Report Overview
Visitedpublic
2025-05-09 23:43:33
Tags
Submit Tags
URL
local5.yesmessenger.com/messenger/workset/update/3606/setup-3606-v4.exe
Finishing URL
about:privatebrowsing
IP / ASN
163.172.244.138
#12876 Scaleway S.a.s.
Title
about:privatebrowsing

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
0

Host Summary

HostRankRegisteredFirst SeenLast Seen
local5.yesmessenger.com
unknown2007-03-122012-08-132025-05-09

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules
SeverityIndicatorAlert
mediumlocal5.yesmessenger.com/messenger/workset/update/3606/setup-3606-v4.exeDetect files is `SliverFox` malware

OpenPhish

No alerts detected


PhishTank

No alerts detected


Quad9 DNS

No alerts detected


ThreatFox

No alerts detected


File detected

URL
local5.yesmessenger.com/messenger/workset/update/3606/setup-3606-v4.exe
IP / ASN
163.172.244.138
#12876 Scaleway S.a.s.
File Overview
File TypePE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive, 5 sections
Size7.5 MB (7527872 bytes)
MD58d72828a1642d572f776c0965e6d1f20
SHA1dc46697534b7a07f52d5769c91dc5ccdb402df54

Detections

AnalyzerVerdictAlert
YARAhub by abuse.chmalware
Detect files is `SliverFox` malware
VirusTotalsuspicious

JavaScript (0)

HTTP Transactions (1)

URLIPResponseSize