Report - raw.githubusercontent.com/AnonAm93/1/refs/heads/main/1.zip

Report Overview

Visited public
2024-09-21 05:29:35
Tags
URL
raw.githubusercontent.com/AnonAm93/1/refs/heads/main/1.zip
Finishing URL
about:privatebrowsing
IP / ASN
185.199.108.133
#54113 FASTLY
Title
about:privatebrowsing

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
raw.githubusercontent.com	35802	2014-02-06	2014-03-01 08:08:08	2024-09-21 01:44:15	512 B	1.5 kB	185.199.109.133
r10.o.lencr.org	unknown	2020-06-29	2024-06-06 21:45:11	2024-09-21 01:59:55	327 B	888 B	23.33.119.27

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

Files detected

URL
raw.githubusercontent.com/AnonAm93/1/refs/heads/main/1.zip
IP
185.199.109.133
ASN
#54113 FASTLY

File type
Zip archive data, at least v2.0 to extract, compression method=deflate
Size
658 B (658 bytes)
Hash
26153bc0c7b6d19dc8689a8d08213320
b0a354496b0bc9633cad7084d1f7a61bd57099aa
385cb29f559753d7d98e2fbedc2287f8bcb192c0a4a7e91b47c98ae6c1b8b289

Archive (2)

Filename

Md5

File type

1.bat

66eb03d6d173ad66ebf26ef8fd1ae878

DOS batch file, ASCII text, with CRLF line terminators

2.bat

cdb8a5fcca6c6b2ac156c95610dd62b0

DOS batch file, ASCII text, with CRLF line terminators

Detections

Analyzer	Verdict	Alert
YARAhub by abuse.ch	malware	Detect files disabling or modifying Windows Defender, Windows Firewall, or Microsoft Smartscreen

JavaScript (0)

HTTP Transactions (2)

	URL	IP	Response	Size
	r10.o.lencr.org/	23.33.119.27		504 B
URL r10.o.lencr.org/ IP 23.33.119.27:0 ASN #20940 Akamai International B.V. File type data Size 504 B (504 bytes) Hash 81c5a77a040440a9394b2bada97c3fc3 83315d75851202154b276ecea5fdf7410a8b44f8 331d889a1604cf5e388cec6315c3d72ecaa48adfdc90d8bbfb15bfc0529eb022 HTTP Headers `POST / HTTP/1.1 Host: r10.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache` `HTTP/1.1 200 OK Server: nginx Content-Type: application/ocsp-response Content-Length: 504 ETag: "331D889A1604CF5E388CEC6315C3D72ECAA48ADFDC90D8BBFB15BFC0529EB022" Last-Modified: Fri, 20 Sep 2024 19:45:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=17257 Expires: Sat, 21 Sep 2024 10:16:47 GMT Date: Sat, 21 Sep 2024 05:29:10 GMT Connection: keep-alive`

	raw.githubusercontent.com/AnonAm93/1/refs/heads/main/1.zip	185.199.109.133	200 OK	658 B
URL User Request GET HTTP/2 raw.githubusercontent.com/AnonAm93/1/refs/heads/main/1.zip IP 185.199.109.133:443 ASN #54113 FASTLY Certificate IssuerDigiCert Inc Subject.github.io Fingerprint97:D8:C5:70:0F:12:24:6C:88:BC:FA:06:7E:8C:A7:4D:A8:62:67:28 ValidityFri, 15 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT File type Zip archive data, at least v2.0 to extract, compression method=deflate Size 658 B (658 bytes) Hash 26153bc0c7b6d19dc8689a8d08213320 b0a354496b0bc9633cad7084d1f7a61bd57099aa 385cb29f559753d7d98e2fbedc2287f8bcb192c0a4a7e91b47c98ae6c1b8b289 HTTP Headers `GET /AnonAm93/1/refs/heads/main/1.zip HTTP/1.1 Host: raw.githubusercontent.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br DNT: 1 Upgrade-Insecure-Requests: 1 Connection: keep-alive Sec-Fetch-Dest: document Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache` HTTP/2 200 OK cache-control: max-age=300 content-security-policy: default-src 'none'; style-src 'unsafe-inline'; sandbox content-type: application/zip etag: W/"51d5c08fba3155443d9cff8b7b603dbf1012757575df7452c361e8a526b7ab7f" strict-transport-security: max-age=31536000 x-content-type-options: nosniff x-frame-options: deny x-xss-protection: 1; mode=block x-github-request-id: 37CB:0E72:CE5664:D8C34C:66EE59A4 accept-ranges: bytes date: Sat, 21 Sep 2024 05:29:10 GMT via: 1.1 varnish x-served-by: cache-hel1410023-HEL x-cache: HIT x-cache-hits: 1 x-timer: S1726896551.814671,VS0,VE1 vary: Authorization,Accept-Encoding,Origin access-control-allow-origin: cross-origin-resource-policy: cross-origin x-fastly-request-id: 416359c49b1bb6556c84fbac55708328da186af0 expires: Sat, 21 Sep 2024 05:34:10 GMT source-age: 2 content-length: 658 X-Firefox-Spdy: h2

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

Files detected

URL

IP

ASN

File type

Size

Hash

Archive (2)

Detections

JavaScript (0)

HTTP Transactions (2)

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL User Request GET HTTP/2

IP

ASN

Certificate

File type

Size

Hash

HTTP Headers