Report Overview
Visitedpublic
2024-10-24 06:37:43
Tags
Submit Tags
URL
raw.githubusercontent.com/wcrddn/wcrddn.github.io/refs/heads/main/1023v6/JJSploit_8.10.9_x64_en-US.msi
Finishing URL
about:privatebrowsing
IP / ASN
185.199.111.133
Title
about:privatebrowsing
Detections
urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
0
Host Summary
| Host | Rank | Registered | First Seen | Last Seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
raw.githubusercontent.com 1 alert(s) on this Domain | 35802 | 2014-02-06 | 2014-03-01 | 2024-10-23 | 556 B | 5.2 MB | 185.199.111.133 |
Related reports
Network Intrusion Detection Systems
Suricata /w Emerging Threats Pro
No alerts detected
Threat Detection Systems
Public InfoSec YARA rules
| Scan Date | Severity | Indicator | Alert |
|---|---|---|---|
| 2024-10-24 | medium | raw.githubusercontent.com/wcrddn/wcrddn.github.io/refs/heads/main/1023v6/JJSploit_8.10.9_x64_en-US.msi | Detect files is `SliverFox` malware |
OpenPhish
No alerts detected
PhishTank
No alerts detected
Mnemonic Secure DNS
No alerts detected
Quad9 DNS
No alerts detected
ThreatFox
No alerts detected
File detected
URL
raw.githubusercontent.com/wcrddn/wcrddn.github.io/refs/heads/main/1023v6/JJSploit_8.10.9_x64_en-US.msi
IP / ASN
185.199.111.133
File Overview
File TypeComposite Document File V2 Document, Little Endian, Os: Windows, Version 6.2, MSI Installer, Code page: 1252, Title: Installation Database, Subject: JJSploit, Author: wearedevs, Keywords: Installer, Comments: This installer database contains the logic and data required to install JJSploit., Template: x64;0, Revision Number: {2A1446A1-6A2A-419C-9B39-617BA28832C6}, Create Time/Date: Wed Oct 23 23:07:44 2024, Last Saved Time/Date: Wed Oct 23 23:07:44 2024, Number of Pages: 450, Number of Words: 2, Name of Creating Application: Windows Installer XML Toolset (3.14.1.8722), Security: 2
Size5.2 MB (5214208 bytes)
MD5fb873fe31c5fb34baf91c449b48f0649
SHA149f04f5c59d65b3c12815c570e3c193ec70a9549
Detections
| Analyzer | Verdict | Alert |
|---|---|---|
| YARAhub by abuse.ch | malware | Detect files is `SliverFox` malware |
JavaScript (0)
No JavaScripts
HTTP Transactions (1)
| URL | IP | Response | Size |
|---|