Report Overview
Visitedpublic
2024-08-01 15:07:24
Tags
Submit Tags
URL
raw.githubusercontent.com/zusyaku/malware-collection-part-2/main/dobrota_clean.exe
Finishing URL
about:privatebrowsing
IP / ASN
185.199.111.133
#54113 FASTLY
Title
about:privatebrowsing

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
0

Host Summary

HostRankRegisteredFirst SeenLast Seen
r10.o.lencr.org
unknown2020-06-292024-06-06 21:45:112024-07-31 18:12:05
raw.githubusercontent.com
358022014-02-062014-03-01 08:08:082024-07-31 19:04:38

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules
SeverityIndicatorAlert
mediumraw.githubusercontent.com/zusyaku/malware-collection-part-2/main/dobrota_clean.exeDetects an SFX archive with automatic script execution

OpenPhish

No alerts detected


PhishTank

No alerts detected


mnemonic secure dns

No alerts detected


Quad9 DNS

No alerts detected


ThreatFox

No alerts detected


File detected

URL
raw.githubusercontent.com/zusyaku/malware-collection-part-2/main/dobrota_clean.exe
IP / ASN
185.199.109.133
#54113 FASTLY
File Overview
File TypePE32 executable (GUI) Intel 80386, for MS Windows, 6 sections
Size8.1 MB (8118243 bytes)
MD5c8b999419a3c103270290e99189f794c
SHA190148745b61d2c77c1694e43f11faaa9a3d05a0a

Detections

AnalyzerVerdictAlert
YARAhub by abuse.chmalware
Detects an SFX archive with automatic script execution
VirusTotalmalicious

JavaScript (0)

HTTP Transactions (8)

URLIPResponseSize