| r10.o.lencr.org/ |  23.36.76.226 | | 504 B |
IP / ASN 23.36.76.226 #20940 Akamai International B.V. Resource Info File typedata First Seen2024-06-30 Last Seen2024-08-21 Times Seen46537 Size504 B (504 bytes) MD5b7dbdd91e33b4b40b990affe38907ed8 SHA18c1dc814dfd071e0c4dcfc0f5429eb7c221d609a SHA256842512e65717b866647d52bc726c962cc42c7e2027c53a2b5b79d7b86d2e50fc POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "842512E65717B866647D52BC726C962CC42C7E2027C53A2B5B79D7B86D2E50FC"
Last-Modified: Sun, 30 Jun 2024 13:53:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13291
Expires: Tue, 02 Jul 2024 22:31:02 GMT
Date: Tue, 02 Jul 2024 18:49:31 GMT
Connection: keep-alive
|
|
| r10.o.lencr.org/ | 23.36.76.226 | | 504 B |
IP / ASN 23.36.76.226 #20940 Akamai International B.V. Resource Info File typedata First Seen2024-07-02 Last Seen2024-08-19 Times Seen54016 Size504 B (504 bytes) MD5b8ee6ca153df6819132dd5d8a6ba5c76 SHA10ed0f0f631777272bd71ba23719e71695c9d95e1 SHA256bdca7ce7bb6febd6a6afb56a828cf4422c1a8971524484e8128cafad8e6b3367 POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "BDCA7CE7BB6FEBD6A6AFB56A828CF4422C1A8971524484E8128CAFAD8E6B3367"
Last-Modified: Tue, 02 Jul 2024 11:47:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2916
Expires: Tue, 02 Jul 2024 19:38:07 GMT
Date: Tue, 02 Jul 2024 18:49:31 GMT
Connection: keep-alive
|
|
| r10.o.lencr.org/ | 23.36.76.226 | | 504 B |
IP / ASN 23.36.76.226 #20940 Akamai International B.V. Resource Info File typedata First Seen2024-07-02 Last Seen2024-08-19 Times Seen21711 Size504 B (504 bytes) MD56809014b6f52128eea64522a888ef559 SHA1c5403c0900fff6604a4f58e3cd83a67d587c7ac2 SHA256c6035fcd2c47b60fecbb2f86f67249e4fe21736a75c6cf000f5e9212f88c154d POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "C6035FCD2C47B60FECBB2F86F67249E4FE21736A75C6CF000F5E9212F88C154D"
Last-Modified: Tue, 02 Jul 2024 04:18:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3141
Expires: Tue, 02 Jul 2024 19:41:52 GMT
Date: Tue, 02 Jul 2024 18:49:31 GMT
Connection: keep-alive
|
|
| GET github.com/Mybay1/hellminer-win64/raw/main/verus-solver.exe |  140.82.121.3 | 302 Found | 0 B |
URL User Request GET HTTPS github.com/Mybay1/hellminer-win64/raw/main/verus-solver.exe IP / ASN 140.82.121.3 #36459 GITHUB Resource Info File typeN/A First Seen0001-01-01 Last Seen2025-08-08 Times Seen5720727 Size0 B (0 bytes) MD5d41d8cd98f00b204e9800998ecf8427e SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709 SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Certificate Info IssuerSectigo Limited Subjectgithub.com FingerprintE7:03:5B:CC:1C:18:77:1F:79:2F:90:86:6B:6C:1D:F8:DF:AA:BD:C0 ValidityThu, 07 Mar 2024 00:00:00 GMT - Fri, 07 Mar 2025 23:59:59 GMT GET /Mybay1/hellminer-win64/raw/main/verus-solver.exe HTTP/1.1
Host: github.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: GitHub.com
date: Tue, 02 Jul 2024 18:49:33 GMT
content-type: text/html; charset=utf-8
vary: X-PJAX, X-PJAX-Container, Turbo-Visit, Turbo-Frame, Accept-Encoding, Accept, X-Requested-With
access-control-allow-origin:
location: https://raw.githubusercontent.com/Mybay1/hellminer-win64/main/verus-solver.exe
cache-control: no-cache
strict-transport-security: max-age=31536000; includeSubdomains; preload
x-frame-options: deny
x-content-type-options: nosniff
x-xss-protection: 0
referrer-policy: no-referrer-when-downgrade
content-security-policy: default-src 'none'; base-uri 'self'; child-src github.com/assets-cdn/worker/ gist.github.com/assets-cdn/worker/; connect-src 'self' uploads.github.com www.githubstatus.com collector.github.com raw.githubusercontent.com api.github.com github-cloud.s3.amazonaws.com github-production-repository-file-5c1aeb.s3.amazonaws.com github-production-upload-manifest-file-7fdce7.s3.amazonaws.com github-production-user-asset-6210df.s3.amazonaws.com api.githubcopilot.com objects-origin.githubusercontent.com copilot-proxy.githubusercontent.com/v1/engines/github-completion/completions *.actions.githubusercontent.com wss://*.actions.githubusercontent.com productionresultssa0.blob.core.windows.net/ productionresultssa1.blob.core.windows.net/ productionresultssa2.blob.core.windows.net/ productionresultssa3.blob.core.windows.net/ productionresultssa4.blob.core.windows.net/ productionresultssa5.blob.core.windows.net/ productionresultssa6.blob.core.windows.net/ productionresultssa7.blob.core.windows.net/ productionresultssa8.blob.core.windows.net/ productionresultssa9.blob.core.windows.net/ productionresultssa10.blob.core.windows.net/ productionresultssa11.blob.core.windows.net/ productionresultssa12.blob.core.windows.net/ productionresultssa13.blob.core.windows.net/ productionresultssa14.blob.core.windows.net/ productionresultssa15.blob.core.windows.net/ productionresultssa16.blob.core.windows.net/ productionresultssa17.blob.core.windows.net/ productionresultssa18.blob.core.windows.net/ productionresultssa19.blob.core.windows.net/ github-production-repository-image-32fea6.s3.amazonaws.com github-production-release-asset-2e65be.s3.amazonaws.com insights.github.com wss://alive.github.com; font-src github.githubassets.com; form-action 'self' github.com gist.github.com copilot-workspace.githubnext.com objects-origin.githubusercontent.com; frame-ancestors 'none'; frame-src viewscreen.githubusercontent.com notebooks.githubusercontent.com; img-src 'self' data: blob: github.githubassets.com media.githubusercontent.com camo.githubusercontent.com identicons.github.com avatars.githubusercontent.com github-cloud.s3.amazonaws.com objects.githubusercontent.com secured-user-images.githubusercontent.com/ user-images.githubusercontent.com/ private-user-images.githubusercontent.com opengraph.githubassets.com github-production-user-asset-6210df.s3.amazonaws.com customer-stories-feed.github.com spotlights-feed.github.com objects-origin.githubusercontent.com *.githubusercontent.com; manifest-src 'self'; media-src github.com user-images.githubusercontent.com/ secured-user-images.githubusercontent.com/ private-user-images.githubusercontent.com github-production-user-asset-6210df.s3.amazonaws.com gist.github.com; script-src github.githubassets.com; style-src 'unsafe-inline' github.githubassets.com; upgrade-insecure-requests; worker-src github.com/assets-cdn/worker/ gist.github.com/assets-cdn/worker/
content-length: 0
x-github-request-id: D42D:A0C83:2FFD49:30F0D0:66844BBC
X-Firefox-Spdy: h2
|
|
| r10.o.lencr.org/ | 23.36.76.226 | | 504 B |
IP / ASN 23.36.76.226 #20940 Akamai International B.V. Resource Info File typedata First Seen2024-06-30 Last Seen2024-08-19 Times Seen48203 Size504 B (504 bytes) MD5c4b71305103f33b56dd398fb1f3fa9fe SHA16237cf96ced2a5d69a73769180ae8250221727ea SHA2564120fbb0536a3608210c487750025bea2ff87804924732c527207e00add13a34 POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "4120FBB0536A3608210C487750025BEA2FF87804924732C527207E00ADD13A34"
Last-Modified: Sun, 30 Jun 2024 17:32:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9959
Expires: Tue, 02 Jul 2024 21:35:32 GMT
Date: Tue, 02 Jul 2024 18:49:33 GMT
Connection: keep-alive
|
|
| r10.o.lencr.org/ | 23.36.76.226 | | 504 B |
IP / ASN 23.36.76.226 #20940 Akamai International B.V. Resource Info File typedata First Seen2024-06-30 Last Seen2024-08-19 Times Seen48203 Size504 B (504 bytes) MD5c4b71305103f33b56dd398fb1f3fa9fe SHA16237cf96ced2a5d69a73769180ae8250221727ea SHA2564120fbb0536a3608210c487750025bea2ff87804924732c527207e00add13a34 POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "4120FBB0536A3608210C487750025BEA2FF87804924732C527207E00ADD13A34"
Last-Modified: Sun, 30 Jun 2024 17:32:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9959
Expires: Tue, 02 Jul 2024 21:35:32 GMT
Date: Tue, 02 Jul 2024 18:49:33 GMT
Connection: keep-alive
|
|
| r10.o.lencr.org/ | 23.36.76.226 | | 504 B |
IP / ASN 23.36.76.226 #20940 Akamai International B.V. Resource Info File typedata First Seen2024-06-30 Last Seen2024-08-19 Times Seen48203 Size504 B (504 bytes) MD5c4b71305103f33b56dd398fb1f3fa9fe SHA16237cf96ced2a5d69a73769180ae8250221727ea SHA2564120fbb0536a3608210c487750025bea2ff87804924732c527207e00add13a34 POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "4120FBB0536A3608210C487750025BEA2FF87804924732C527207E00ADD13A34"
Last-Modified: Sun, 30 Jun 2024 17:32:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9959
Expires: Tue, 02 Jul 2024 21:35:32 GMT
Date: Tue, 02 Jul 2024 18:49:33 GMT
Connection: keep-alive
|
|
| r10.o.lencr.org/ | 23.36.76.226 | | 504 B |
IP / ASN 23.36.76.226 #20940 Akamai International B.V. Resource Info File typedata First Seen2024-06-30 Last Seen2024-08-19 Times Seen48203 Size504 B (504 bytes) MD5c4b71305103f33b56dd398fb1f3fa9fe SHA16237cf96ced2a5d69a73769180ae8250221727ea SHA2564120fbb0536a3608210c487750025bea2ff87804924732c527207e00add13a34 POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "4120FBB0536A3608210C487750025BEA2FF87804924732C527207E00ADD13A34"
Last-Modified: Sun, 30 Jun 2024 17:32:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9959
Expires: Tue, 02 Jul 2024 21:35:32 GMT
Date: Tue, 02 Jul 2024 18:49:33 GMT
Connection: keep-alive
|
|
| GET raw.githubusercontent.com/Mybay1/hellminer-win64/main/verus-solver.exe |  185.199.111.133 | 200 OK | 442 kB |
URL User Request GET HTTPS raw.githubusercontent.com/Mybay1/hellminer-win64/main/verus-solver.exe IP / ASN 185.199.111.133 #54113 FASTLY Resource Info File typePE32+ executable (console) x86-64, for MS Windows, 7 sections First Seen2024-04-05 Last Seen2024-10-04 Times Seen61 Size442 kB (442368 bytes) MD5409a8395747cebaefa1e1981c4eef62e SHA1987ae8b6741df673b230df04e349228b06bf1207 SHA25662262e9b886df554547c1645a2048a2ee57d406718d89036b1f2c600eacde7cc Certificate Info IssuerDigiCert Inc Subject*.github.io Fingerprint97:D8:C5:70:0F:12:24:6C:88:BC:FA:06:7E:8C:A7:4D:A8:62:67:28 ValidityFri, 15 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT | Analyzer | Verdict | Alert |
|---|
| YARAhub by abuse.ch | malware | files - file ~tmp01925d3f.exe | | VirusTotal | malicious | |
GET /Mybay1/hellminer-win64/main/verus-solver.exe HTTP/1.1
Host: raw.githubusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
cache-control: max-age=300
content-security-policy: default-src 'none'; style-src 'unsafe-inline'; sandbox
content-type: application/octet-stream
etag: W/"9cedd9e2a6ad237e451e327758a60c6eab3fc0754e9c9a2560927c61affff553"
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
x-frame-options: deny
x-xss-protection: 1; mode=block
x-github-request-id: 3F7D:27ACBA:3BA1760:3EB38E9:66844BBD
accept-ranges: bytes
date: Tue, 02 Jul 2024 18:49:33 GMT
via: 1.1 varnish
x-served-by: cache-hel1410023-HEL
x-cache: HIT
x-cache-hits: 1
x-timer: S1719946174.644144,VS0,VE104
vary: Authorization,Accept-Encoding,Origin
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
x-fastly-request-id: eaff586fdd55f0421e06b0d38934d060273983ec
expires: Tue, 02 Jul 2024 18:54:33 GMT
source-age: 0
content-length: 442368
X-Firefox-Spdy: h2
|
|