Report Overview

  1. Submitted URL

    www.hacienda.go.cr/docs/InstaladorSolidario2023.zip

  2. IP

    23.218.92.218

    ASN

    #20940 Akamai International B.V.

  3. Submitted

    2024-05-10 15:47:43

    Access

    public

  4. Website Title

    about:privatebrowsing

  5. Final URL

    about:privatebrowsing

  6. Tags

  7. urlquery detections

    No alerts detected

Detections

  1. urlquery

    0

  2. Network Intrusion Detection

    0

  3. Threat Detection Systems

    3

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
www.hacienda.go.cr3287731997-09-192013-02-082023-12-05

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules
SeverityIndicatorAlert
mediumwww.hacienda.go.cr/docs/InstaladorSolidario2023.zipdetect_Redline_Stealer

OpenPhish

No alerts detected


PhishTank

No alerts detected


mnemonic secure dns

No alerts detected


Quad9 DNS

No alerts detected


ThreatFox

No alerts detected


Files detected

  1. URL

    www.hacienda.go.cr/docs/InstaladorSolidario2023.zip

  2. IP

    23.218.92.218

  3. ASN

    #20940 Akamai International B.V.

  1. File type

    Zip archive data, at least v2.0 to extract, compression method=store

    Size

    21 MB (20832069 bytes)

  2. Hash

    da68668a72050d89d22c04922ae4cb5a

    c93d6bf87925cb67f84a5ed2effbce82226e2028

  1. Archive (1)

  2. FilenameMd5File type
    SOLIDARIO_2023.exe
    fcaf48fdd0dfb13b166cc1fcfb5046e6
    PE32 executable (GUI) Intel 80386, for MS Windows, 5 sections

    Detections

    AnalyzerVerdictAlert
    YARAhub by abuse.chmalware
    detect_Redline_Stealer
    YARAhub by abuse.chmalware
    detect_Redline_Stealer

JavaScript (0)

HTTP Transactions (1)

URLIPResponseSize
www.hacienda.go.cr/docs/InstaladorSolidario2023.zip
23.218.92.218200 OK21 MB