Report - cyberlock.tech/downloads/InstallCyberLock.exe

Report Overview

Visitedpublic

2025-05-17 17:53:49

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Host Summary

Host	Rank	Registered	First Seen	Last Seen	Sent	Received	IP	Fingerprints
cyberlock.tech	unknown	2025-05-02	2025-05-09	2025-05-09	513 B	21 MB	104.192.169.154

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

Scan Date	Severity	Indicator	Alert
2025-05-17	medium	cyberlock.tech/downloads/InstallCyberLock.exe	Detect pe file that no import table

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

File detected

URL

cyberlock.tech/downloads/InstallCyberLock.exe

IP / ASN

104.192.169.154

#19969 JOESDATACENTER

File Overview

File TypePE32 executable (GUI) Intel 80386, for MS Windows, 10 sections

Size21 MB (20761880 bytes)

MD5d40b9995c85b14ca2e8041a3b0d3c1e0

SHA1a518793c178fe3799ed2e08836ad9978b650ecad

SHA25675266bd6787a53806dfe1785b21a8dc6a84814ff37e840f17b1fed2b30ede667

Detections

Analyzer	Verdict	Alert
YARAhub by abuse.ch	malware	Detect pe file that no import table

JavaScript (0)

HTTP Transactions (1)

URL IP Response Size

GET cyberlock.tech/downloads/InstallCyberLock.exe

104.192.169.154

200 OK

21 MB

URL User Request GET HTTPS

cyberlock.tech/downloads/InstallCyberLock.exe

IP / ASN

104.192.169.154

#19969 JOESDATACENTER

Requested byN/A

Resource Info

File typePE32 executable (GUI) Intel 80386, for MS Windows, 10 sections

First Seen2025-05-07

Last Seen2025-05-17

Times Seen5

Size21 MB (20761880 bytes)

MD5d40b9995c85b14ca2e8041a3b0d3c1e0

SHA1a518793c178fe3799ed2e08836ad9978b650ecad

SHA25675266bd6787a53806dfe1785b21a8dc6a84814ff37e840f17b1fed2b30ede667

Certificate Info

IssuerLet's Encrypt

Subjectcyberlock.global

Fingerprint90:23:73:C7:D3:8E:60:BF:68:85:E9:7C:1D:58:9F:BB:D9:47:99:A3

ValidityTue, 06 May 2025 03:23:26 GMT - Mon, 04 Aug 2025 03:23:25 GMT

Detections

Analyzer	Verdict	Alert
YARAhub by abuse.ch	malware	Detect pe file that no import table

HTTP Headers

GET /downloads/InstallCyberLock.exe HTTP/1.1
Host: cyberlock.tech
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: application/octet-stream
last-modified: Tue, 29 Apr 2025 16:11:31 GMT
accept-ranges: bytes
etag: "eec8f75e21b9db1:0"
server: Microsoft-IIS/10.0
x-powered-by: ASP.NET
date: Sat, 17 May 2025 17:51:47 GMT
content-length: 20761880
X-Firefox-Spdy: h2