Report Overview
Visitedpublic
2025-05-04 19:20:06
Tags
Submit Tags
URL
wiki.vrpirates.club/downloads/rookie/rookie_2.34.1_portable.zip
Finishing URL
about:privatebrowsing
IP / ASN
185.247.224.87
#200651 FlokiNET ehf
Title
about:privatebrowsing

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
0

Host Summary

HostRankRegisteredFirst SeenLast Seen
wiki.vrpirates.club
unknown2020-07-222021-10-262025-05-01

Related reports

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected


OpenPhish

No alerts detected


PhishTank

No alerts detected


Quad9 DNS

No alerts detected


ThreatFox

No alerts detected


File detected

URL
wiki.vrpirates.club/downloads/rookie/rookie_2.34.1_portable.zip
IP / ASN
185.247.224.87
#200651 FlokiNET ehf
File Overview
File TypeZip archive data, at least v2.0 to extract, compression method=deflate
Size1.2 MB (1239996 bytes)
MD5f036fcdb20b031d103ddc48a7d4e3fde
SHA11122163c4df062887a6943826ed5213242200306
Archive (4)
FilenameMD5File type
Rookie Offline.cmd83b85f3a19c77666117db1dfbbfd782bASCII text, with CRLF line terminators
AddDefenderExceptions.ps1598164f06f8abd143a91d20c0562eb93ASCII text, with CRLF line terminators
CleanupInstall.cmd9ae44cebbde4f44c27801bbf93494c1dDOS batch file, ASCII text, with CRLF line terminators
AndroidSideloader.exe552e9c39473ca27a5de66ab0c87aceaaPE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

Detections

AnalyzerVerdictAlert
YARAhub by abuse.chmalware
Detect files disabling or modifying Windows Defender, Windows Firewall, or Microsoft Smartscreen
VirusTotalmalicious

JavaScript (0)

HTTP Transactions (1)

URLIPResponseSize