Report Overview
Visitedpublic
2024-06-21 04:50:59
Tags
Submit Tags
URL
files.getgrass.io/file/grass-extension-upgrades/extension-latest/grass-community-node-windows-4.20.2.zip
Finishing URL
about:privatebrowsing
IP / ASN
18.239.18.30
Title
about:privatebrowsing
Detections
urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
0
Host Summary
| Host | Rank | Registered | First Seen | Last Seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
r10.o.lencr.org | unknown | 2020-06-29 | 2024-06-06 21:45:11 | 2024-06-20 18:12:07 | 2.0 kB | 5.3 kB |  23.36.76.226 | |
files.getgrass.io 1 alert(s) on this Host | unknown | unknown | No data | No data | 558 B | 3.6 MB | 18.239.18.18 |
Related reports
Threat Detection Systems
Public InfoSec YARA rules
No alerts detected
OpenPhish
No alerts detected
PhishTank
No alerts detected
mnemonic secure dns
No alerts detected
Quad9 DNS
No alerts detected
ThreatFox
No alerts detected
File detected
URL
files.getgrass.io/file/grass-extension-upgrades/extension-latest/grass-community-node-windows-4.20.2.zip
IP / ASN
18.239.18.18
File Overview
File TypeZip archive data, at least v2.0 to extract, compression method=deflate
Size3.6 MB (3575235 bytes)
MD51674a2ae128424a054a3ae681dd22d3d
SHA1c387826322fed08f1a57a9d079d089b1a64a462f
Archive (2)
| Filename | MD5 | File type |
|---|---|---|
| grass_config.exe | cf2090913e8d4a1d955ad19253f2a883 | PE32+ executable (GUI) x86-64, for MS Windows, 6 sections |
| grass-4.20.2.crx | e605c71e74f83d68da363994dc57a67e | Google Chrome extension, version 3 |
Detections
| Analyzer | Verdict | Alert |
|---|---|---|
| YARAhub by abuse.ch | malware | detect_Redline_Stealer |
| VirusTotal | suspicious |
JavaScript (0)
No JavaScripts
HTTP Transactions (7)
| URL | IP | Response | Size |
|---|