Report Overview

  1. Submitted URL

    193.233.132.56/lend/ukca.exe

  2. IP

    193.233.132.56

    ASN

    #216319 Chromis It Ltd

  3. Submitted

    2024-05-04 04:51:05

    Access

    public

  4. Website Title

    about:privatebrowsing

  5. Final URL

    about:privatebrowsing

  6. Tags

  7. urlquery detections

    No alerts detected

Detections

  1. urlquery

    0

  2. Network Intrusion Detection

    0

  3. Threat Detection Systems

    7

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
193.233.132.56unknownunknownNo dataNo data

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules
SeverityIndicatorAlert
medium193.233.132.56/lend/ukca.exedetect_Redline_Stealer_V2

OpenPhish

No alerts detected


PhishTank

No alerts detected


mnemonic secure dns

No alerts detected


Quad9 DNS
SeverityIndicatorAlert
medium193.233.132.56Sinkholed

ThreatFox
SeverityIndicatorAlert
medium193.233.132.56Amadey

Files detected

  1. URL

    193.233.132.56/lend/ukca.exe

  2. IP

    193.233.132.56

  3. ASN

    #216319 Chromis It Ltd

  1. File type

    PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

    Size

    311 kB (311296 bytes)

  2. Hash

    0222f8da926bf2722f6bef4ac243e5fa

    152144479eb94028ec92e356f99b562fa414e980

    Detections

    AnalyzerVerdictAlert
    YARAhub by abuse.chmalware
    detect_Redline_Stealer_V2
    VirusTotalmalicious

JavaScript (0)

HTTP Transactions (1)

URLIPResponseSize
193.233.132.56/lend/ukca.exe
193.233.132.56200 OK311 kB