Report Overview

  1. Submitted URL

    gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/40273.zip

  2. IP

    172.65.251.78

    ASN

    #13335 CLOUDFLARENET

  3. Submitted

    2024-05-08 22:20:54

    Access

    public

  4. Website Title

    about:privatebrowsing

  5. Final URL

    about:privatebrowsing

  6. Tags

  7. urlquery detections

    No alerts detected

Detections

  1. urlquery

    0

  2. Network Intrusion Detection

    0

  3. Threat Detection Systems

    5

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
gitlab.com177192004-01-152014-06-062024-05-07

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected


OpenPhish

No alerts detected


PhishTank

No alerts detected


mnemonic secure dns

No alerts detected


Quad9 DNS

No alerts detected


ThreatFox

No alerts detected


Files detected

  1. URL

    gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/40273.zip

  2. IP

    172.65.251.78

  3. ASN

    #13335 CLOUDFLARENET

  1. File type

    Zip archive data, at least v1.0 to extract, compression method=store

    Size

    73 kB (73444 bytes)

  2. Hash

    c5bbdb599617e407636e5276a6c10775

    e0fbbf5f78502c4d69363dc7d66f61d7e466c296

  1. Archive (89)

  2. FilenameMd5File type
    ELCA.cfg
    dd5960849d0e9ae4708014d31e41e2dd
    JSON text data
    ._ELCA.cfg
    358835e24cd237ebadeb24bf70c48a52
    AppleDouble encoded Macintosh file
    eligiblecandidate.py
    8233b379f68d8a67b617a61a2f72afdd
    Python script, ASCII text executable
    ._eligiblecandidate.py
    358835e24cd237ebadeb24bf70c48a52
    AppleDouble encoded Macintosh file
    __init__.py
    719209667fbdba2ddea59d04a1349864
    Python script, ASCII text executable
    .___init__.py
    358835e24cd237ebadeb24bf70c48a52
    AppleDouble encoded Macintosh file
    __init__.py
    4c2948003e7026ea54423cf004928760
    Python script, ASCII text executable
    .___init__.py
    358835e24cd237ebadeb24bf70c48a52
    AppleDouble encoded Macintosh file
    api.py
    f57aaa0a9c739dcdbe84009bc4ecbc89
    Python script, ASCII text executable
    ._api.py
    358835e24cd237ebadeb24bf70c48a52
    AppleDouble encoded Macintosh file
    async.py
    9f8e9b0bb751d7bde109ebfd4b2a2979
    Python script, ASCII text executable
    ._async.py
    358835e24cd237ebadeb24bf70c48a52
    AppleDouble encoded Macintosh file
    auth.py
    d98157d73d0b65c981b4ee6d612226b6
    Python script, ASCII text executable
    ._auth.py
    358835e24cd237ebadeb24bf70c48a52
    AppleDouble encoded Macintosh file
    compat.py
    c7550e517563be60c3028081c6285e2c
    ASCII text
    ._compat.py
    358835e24cd237ebadeb24bf70c48a52
    AppleDouble encoded Macintosh file
    defaults.py
    1f4a060cabe4b84ae315a38cf8f50035
    Python script, ASCII text executable
    ._defaults.py
    358835e24cd237ebadeb24bf70c48a52
    AppleDouble encoded Macintosh file
    exceptions.py
    50062861da3c2fdda0ae5b06fc929b2f
    Python script, ASCII text executable
    ._exceptions.py
    358835e24cd237ebadeb24bf70c48a52
    AppleDouble encoded Macintosh file
    hooks.py
    048dbafcca73e74e81e76fa63750dba1
    Python script, ASCII text executable
    ._hooks.py
    358835e24cd237ebadeb24bf70c48a52
    AppleDouble encoded Macintosh file
    models.py
    5029baeabe8eadd279a085fad03c053d
    Python script, ASCII text executable
    ._models.py
    358835e24cd237ebadeb24bf70c48a52
    AppleDouble encoded Macintosh file
    __init__.py
    e3a61528df2720827a83ae17b37074ae
    Python script, ASCII text executable
    .___init__.py
    358835e24cd237ebadeb24bf70c48a52
    AppleDouble encoded Macintosh file
    __init__.py
    7de68ab89f555c1a767f87b3aa9c3193
    Python script, ASCII text executable
    .___init__.py
    358835e24cd237ebadeb24bf70c48a52
    AppleDouble encoded Macintosh file
    core.py
    67507688595d15ad5c3ba76dd8b21f84
    Python script, ASCII text executable
    ._core.py
    358835e24cd237ebadeb24bf70c48a52
    AppleDouble encoded Macintosh file
    monkeys.py
    c1ef57ab758c326771c23c8f413814f5
    Python script, ASCII text executable
    ._monkeys.py
    358835e24cd237ebadeb24bf70c48a52
    AppleDouble encoded Macintosh file
    structures.py
    b453098639211ee3991dba174867fc92
    Python script, ASCII text executable
    ._structures.py
    358835e24cd237ebadeb24bf70c48a52
    AppleDouble encoded Macintosh file
    ._oreos
    358835e24cd237ebadeb24bf70c48a52
    AppleDouble encoded Macintosh file
    __init__.py
    9674ef0622f4e0737cb79277d46f72e8
    Python script, ASCII text executable
    .___init__.py
    358835e24cd237ebadeb24bf70c48a52
    AppleDouble encoded Macintosh file
    _collections.py
    ca7fa90625c1241a06723b4da84887c2
    Python script, ASCII text executable
    .__collections.py
    358835e24cd237ebadeb24bf70c48a52
    AppleDouble encoded Macintosh file
    connectionpool.py
    492e9f119ec51bcc1ff85651b31f2bc3
    Python script, ASCII text executable
    ._connectionpool.py
    358835e24cd237ebadeb24bf70c48a52
    AppleDouble encoded Macintosh file
    exceptions.py
    69fdbc18451e87b732430a549fb9907a
    Python script, ASCII text executable
    ._exceptions.py
    358835e24cd237ebadeb24bf70c48a52
    AppleDouble encoded Macintosh file
    filepost.py
    d352d472c48685f6beb0fce8cce474d7
    Python script, ASCII text executable
    ._filepost.py
    358835e24cd237ebadeb24bf70c48a52
    AppleDouble encoded Macintosh file
    __init__.py
    9ff999f275483e0669aa22417e3a374f
    Python script, ASCII text executable
    .___init__.py
    358835e24cd237ebadeb24bf70c48a52
    AppleDouble encoded Macintosh file
    __init__.py
    8fb189128ba89f9668b9a544b9bd7671
    Python script, ASCII text executable
    .___init__.py
    358835e24cd237ebadeb24bf70c48a52
    AppleDouble encoded Macintosh file
    ._mimetools_choose_boundary
    358835e24cd237ebadeb24bf70c48a52
    AppleDouble encoded Macintosh file
    six.py
    19b5579cd4a5e777b9b7b728c1612bfe
    Python script, ASCII text executable
    ._six.py
    358835e24cd237ebadeb24bf70c48a52
    AppleDouble encoded Macintosh file
    __init__.py
    f40101734fd68497d4d231128e29b8a1
    Python script, ASCII text executable
    .___init__.py
    358835e24cd237ebadeb24bf70c48a52
    AppleDouble encoded Macintosh file
    ._ssl_match_hostname
    358835e24cd237ebadeb24bf70c48a52
    AppleDouble encoded Macintosh file
    ._packages
    358835e24cd237ebadeb24bf70c48a52
    AppleDouble encoded Macintosh file
    poolmanager.py
    76fc209eac16983a2f59b24f71e9d333
    Python script, ASCII text executable
    ._poolmanager.py
    358835e24cd237ebadeb24bf70c48a52
    AppleDouble encoded Macintosh file
    request.py
    487141150de52d117a8c351b82dce748
    Python script, ASCII text executable
    ._request.py
    358835e24cd237ebadeb24bf70c48a52
    AppleDouble encoded Macintosh file
    response.py
    7bb15c9fa1a8269f7256bfa55c4d96a1
    Python script, ASCII text executable
    ._response.py
    358835e24cd237ebadeb24bf70c48a52
    AppleDouble encoded Macintosh file
    util.py
    6865e2c15dd2a1bb17fb95ead709d09c
    Python script, ASCII text executable
    ._util.py
    358835e24cd237ebadeb24bf70c48a52
    AppleDouble encoded Macintosh file
    ._urllib3
    358835e24cd237ebadeb24bf70c48a52
    AppleDouble encoded Macintosh file
    ._packages
    358835e24cd237ebadeb24bf70c48a52
    AppleDouble encoded Macintosh file
    sessions.py
    2264e384b9ee4f993fc8086f45885d7f
    Python script, ASCII text executable
    ._sessions.py
    358835e24cd237ebadeb24bf70c48a52
    AppleDouble encoded Macintosh file
    status_codes.py
    b8918f5cd4e6e9dfd287179694f1a53d
    Python script, ASCII text executable
    ._status_codes.py
    358835e24cd237ebadeb24bf70c48a52
    AppleDouble encoded Macintosh file
    structures.py
    2424c8aed729f6f301df86901ef13adc
    Python script, ASCII text executable
    ._structures.py
    358835e24cd237ebadeb24bf70c48a52
    AppleDouble encoded Macintosh file
    utils.py
    8abfb557490139dddb73776bf9a9e1cc
    Python script, ASCII text executable
    ._utils.py
    358835e24cd237ebadeb24bf70c48a52
    AppleDouble encoded Macintosh file
    ._requests
    358835e24cd237ebadeb24bf70c48a52
    AppleDouble encoded Macintosh file
    ._fosho
    358835e24cd237ebadeb24bf70c48a52
    AppleDouble encoded Macintosh file
    setlog
    2f17458f7ba54429bacfe622ad1b0837
    ELF 32-bit LSB executable, Intel 80386, version 1 (SYSV)
    ._setlog
    358835e24cd237ebadeb24bf70c48a52
    AppleDouble encoded Macintosh file
    ._setlog
    358835e24cd237ebadeb24bf70c48a52
    AppleDouble encoded Macintosh file
    stager.sh
    c00a49f821a264523fbf632301b75c34
    POSIX shell script, ASCII text executable
    ._stager.sh
    358835e24cd237ebadeb24bf70c48a52
    AppleDouble encoded Macintosh file
    tiny-exec
    49eed555717ffff5cc882ce753fc4ed6
    ELF 32-bit LSB executable, Intel 80386, version 1 (SYSV)
    ._tiny-exec
    358835e24cd237ebadeb24bf70c48a52
    AppleDouble encoded Macintosh file
    ._tiny-exec
    358835e24cd237ebadeb24bf70c48a52
    AppleDouble encoded Macintosh file
    ._stage
    358835e24cd237ebadeb24bf70c48a52
    AppleDouble encoded Macintosh file
    ._ELCA
    358835e24cd237ebadeb24bf70c48a52
    AppleDouble encoded Macintosh file
    notes.txt
    6e66b8d364e201c73fd2665938703488
    ASCII text
    ._notes.txt
    358835e24cd237ebadeb24bf70c48a52
    AppleDouble encoded Macintosh file
    ._40273
    358835e24cd237ebadeb24bf70c48a52
    AppleDouble encoded Macintosh file

    Detections

    AnalyzerVerdictAlert
    Public Nextron YARA rulesmalware
    EQGRP Toolset Firewall - file eligiblecandidate.py
    Public Nextron YARA rulesmalware
    EQGRP Toolset Firewall - Unique strings
    YARAhub by abuse.chmalware
    meth_get_eip
    Public Nextron YARA rulesmalware
    EQGRP Toolset Firewall - from files tinyexec
    VirusTotalmalicious

JavaScript (0)

HTTP Transactions (1)

URLIPResponseSize
gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/40273.zip
172.65.251.78200 OK73 kB