Report Overview

  1. Visited public
    2024-08-01 15:08:37
  2. URL

    raw.githubusercontent.com/system32booster/malwaredatabase/main/trojans/concos_1.6.zip

  3. Finishing URL

    about:privatebrowsing

  4. IP / ASN
    185.199.110.133

    #54113 FASTLY

    Title
    about:privatebrowsing
Detections
urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
2

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
r10.o.lencr.orgunknown2020-06-292024-06-06 21:45:112024-07-31 18:12:05
raw.githubusercontent.com358022014-02-062014-03-01 08:08:082024-07-31 19:04:38

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected


OpenPhish

No alerts detected


PhishTank

No alerts detected


mnemonic secure dns

No alerts detected


Quad9 DNS

No alerts detected


ThreatFox

No alerts detected


Files detected

  1. URL

    raw.githubusercontent.com/system32booster/malwaredatabase/main/trojans/concos_1.6.zip

  2. IP

    185.199.108.133

  3. ASN

    #54113 FASTLY

  1. File type

    Zip archive data, at least v2.0 to extract, compression method=deflate

    Size

    7.7 kB (7665 bytes)

  2. Hash

    ee9822662f6ce916063ec09e8b4e3067

    79f5aaee9b3166637ac7843d232f3ef1720d101b

  1. Archive (1)

  2. FilenameMd5File type
    concos_1.6.exe
    eed739fea0bc483844ddf8ddcce053d0
    PE32 executable (GUI) Intel 80386, for MS Windows, 5 sections

    Detections

    AnalyzerVerdictAlert
    VirusTotalmalicious

JavaScript (0)

HTTP Transactions (7)

URLIPResponseSize
r10.o.lencr.org/
23.36.77.32 504 B
r10.o.lencr.org/
23.36.77.32 504 B
r10.o.lencr.org/
23.36.77.32 504 B
r10.o.lencr.org/
23.36.77.32 504 B
raw.githubusercontent.com/system32booster/malwaredatabase/main/trojans/concos_1.6.zip
185.199.108.133200 OK7.7 kB
r10.o.lencr.org/
23.36.76.226 504 B
r10.o.lencr.org/
23.36.76.226 504 B