Report Overview

  1. Submitted URL

    se.maina-vira.ru:8080/distr/apps/unlocker.exe

  2. IP

    185.25.60.13

    ASN

    #8496 Optibit LLC

  3. Submitted

    2024-05-08 13:47:16

    Access

    public

  4. Website Title

    about:privatebrowsing

  5. Final URL

    about:privatebrowsing

  6. Tags

  7. urlquery detections

    No alerts detected

Detections

  1. urlquery

    0

  2. Network Intrusion Detection

    0

  3. Threat Detection Systems

    3

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
unknown

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules
SeverityIndicatorAlert
mediumse.maina-vira.ru:8080/distr/apps/unlocker.exeDetect files is `SliverFox` malware

OpenPhish

No alerts detected


PhishTank

No alerts detected


mnemonic secure dns

No alerts detected


Quad9 DNS

No alerts detected


ThreatFox

No alerts detected


Files detected

  1. URL

    se.maina-vira.ru:8080/distr/apps/unlocker.exe

  2. IP

    185.25.60.13

  3. ASN

    #8496 Optibit LLC

  1. File type

    PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive, 5 sections

    Size

    403 kB (402911 bytes)

  2. Hash

    33408f35623dc5bb4a3bde09fa45f86b

    73c98f1721958026beb496bfcf15fb9a28b3b7a0

    Detections

    AnalyzerVerdictAlert
    YARAhub by abuse.chmalware
    Detect files is `SliverFox` malware
    VirusTotalmalicious

JavaScript (0)

HTTP Transactions (1)

URLIPResponseSize
se.maina-vira.ru:8080/distr/apps/unlocker.exe
185.25.60.13200 OK403 kB