Report Overview
Visitedpublic
2024-10-01 19:19:40
Tags
Submit Tags
URL
raw.githubusercontent.com/sesafvr/ayo/refs/heads/main/Client-built.exe
Finishing URL
about:privatebrowsing
IP / ASN
185.199.110.133
#54113 FASTLY
Title
about:privatebrowsing

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
0

Host Summary

HostRankRegisteredFirst SeenLast Seen
r10.o.lencr.org
unknown2020-06-292024-06-06 21:45:112024-09-30 18:12:17
raw.githubusercontent.com
358022014-02-062014-03-01 08:08:082024-09-30 18:18:14
r11.o.lencr.org
unknown2020-06-292024-06-07 07:43:572024-09-30 18:12:04

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules
SeverityIndicatorAlert
mediumraw.githubusercontent.com/sesafvr/ayo/refs/heads/main/Client-built.exeDetects QuasarRAT malware
mediumraw.githubusercontent.com/sesafvr/ayo/refs/heads/main/Client-built.exeIdentify QuasarRAT samples

OpenPhish

No alerts detected


PhishTank

No alerts detected


mnemonic secure dns

No alerts detected


Quad9 DNS

No alerts detected


ThreatFox

No alerts detected


File detected

URL
raw.githubusercontent.com/sesafvr/ayo/refs/heads/main/Client-built.exe
IP / ASN
185.199.109.133
#54113 FASTLY
File Overview
File TypePE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections
Size3.3 MB (3265536 bytes)
MD5dd7a806c734df62ecf4802977fa0b3e9
SHA142eae42e0fcfe9d9a54e493a670adde5241377da

Detections

AnalyzerVerdictAlert
Public Nextron YARA rulesmalware
Detects QuasarRAT malware
YARAhub by abuse.chmalware
Identify QuasarRAT samples
VirusTotalmalicious
VirusTotal - Scan result 53/73

JavaScript (0)

HTTP Transactions (7)

URLIPResponseSize