Report Overview

  1. Submitted URL

    github.com/shurlaak/sherlocked/archive/refs/heads/main.zip

  2. IP

    140.82.121.3

    ASN

    #36459 GITHUB

  3. Submitted

    2024-03-28 14:10:32

    Access

    public

  4. Website Title

    about:privatebrowsing

  5. Final URL

    about:privatebrowsing

  6. Tags

  7. urlquery detections

    No alerts detected

Detections

  1. urlquery

    0

  2. Network Intrusion Detection

    0

  3. Threat Detection Systems

    1

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
github.com14232007-10-092016-07-132024-03-24
codeload.github.com623592007-10-092013-04-182024-03-28

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected


OpenPhish

No alerts detected


PhishTank

No alerts detected


mnemonic secure dns

No alerts detected


Quad9 DNS

No alerts detected


ThreatFox

No alerts detected


Files detected

  1. URL

    codeload.github.com/shurlaak/sherlocked/zip/refs/heads/main

  2. IP

    140.82.121.10

  3. ASN

    #36459 GITHUB

  1. File type

    Zip archive data, at least v1.0 to extract, compression method=store

    Size

    106 kB (106526 bytes)

  2. Hash

    908603d2549945f54633d88f62a349f4

    2cba0068a0703aba7338ad9fc93b458056bb16f3

  1. Archive (3)

  2. FilenameMd5File type
    RunHidden.exe
    5c04803180ea60f64ae1cb5b9dc84589
    PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections
    lol.cmd
    8995127da320163c78a265061947c656
    ASCII text, with no line terminators
    stub.pyw
    8918af425148d9e704dfa18b1367cf60
    Python script, ASCII text executable, with very long lines (26111), with CRLF line terminators

    Detections

    AnalyzerVerdictAlert
    YARAhub by abuse.chmalware
    Detect files disabling or modifying Windows Defender, Windows Firewall, or Microsoft Smartscreen

JavaScript (0)

HTTP Transactions (2)

URLIPResponseSize
github.com/shurlaak/sherlocked/archive/refs/heads/main.zip
140.82.121.3302 Found0 B
codeload.github.com/shurlaak/sherlocked/zip/refs/heads/main
140.82.121.10200 OK106 kB