Report Overview

  1. Submitted URL

    gitlab.com/not.replies.please/Hall-of-fame387332703270942/uploads/8c28cfc5ae0b8d7abcbcedcd3a66d0fb/exec.zip

  2. IP

    172.65.251.78

    ASN

    #13335 CLOUDFLARENET

  3. Submitted

    2024-04-27 02:11:32

    Access

    public

  4. Website Title

    about:privatebrowsing

  5. Final URL

    about:privatebrowsing

  6. Tags

  7. urlquery detections

    No alerts detected

Detections

  1. urlquery

    0

  2. Network Intrusion Detection

    0

  3. Threat Detection Systems

    1

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
gitlab.com177192004-01-152014-06-062024-04-26

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected


OpenPhish

No alerts detected


PhishTank

No alerts detected


mnemonic secure dns

No alerts detected


Quad9 DNS

No alerts detected


ThreatFox

No alerts detected


Files detected

  1. URL

    gitlab.com/not.replies.please/Hall-of-fame387332703270942/uploads/8c28cfc5ae0b8d7abcbcedcd3a66d0fb/exec.zip

  2. IP

    172.65.251.78

  3. ASN

    #13335 CLOUDFLARENET

  1. File type

    Zip archive data, at least v2.0 to extract, compression method=deflate

    Size

    1.7 kB (1654 bytes)

  2. Hash

    d5c7f2e23b369d358f597bdc815fc951

    325ef75f0e399b134329eb068865d8518d07d54f

  1. Archive (2)

  2. FilenameMd5File type
    exec.bat
    03d24e9e79a2547f069e591999a56a3b
    ASCII text, with CRLF line terminators
    install.ps1
    34d28f0d709d090c80839627e1cc1fe9
    ASCII text, with very long lines (4481), with CRLF line terminators

    Detections

    AnalyzerVerdictAlert
    Public Nextron YARA rulesmalware
    Detects obfuscated PowerShell hacktools

JavaScript (0)

HTTP Transactions (1)

URLIPResponseSize
gitlab.com/not.replies.please/Hall-of-fame387332703270942/uploads/8c28cfc5ae0b8d7abcbcedcd3a66d0fb/exec.zip
172.65.251.78200 OK1.7 kB