Report Overview

  1. Submitted URL

    github.com/l0cc/Private-Injector/raw/master/L0cc%20Injector.exe

  2. IP

    140.82.121.4

    ASN

    #36459 GITHUB

  3. Submitted

    2024-04-19 13:46:33

    Access

    public

  4. Website Title

    about:privatebrowsing

  5. Final URL

    about:privatebrowsing

  6. Tags

  7. urlquery detections

    No alerts detected

Detections

  1. urlquery

    0

  2. Network Intrusion Detection

    0

  3. Threat Detection Systems

    3

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
github.com14232007-10-092016-07-132024-03-24
raw.githubusercontent.com358022014-02-062014-03-012024-04-18

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules
SeverityIndicatorAlert
mediumraw.githubusercontent.com/l0cc/Private-Injector/master/L0cc%20Injector.exeDetects an executable encrypted with a 4 byte XOR (also used for Derusbi Trojan)

OpenPhish

No alerts detected


PhishTank

No alerts detected


mnemonic secure dns

No alerts detected


Quad9 DNS

No alerts detected


ThreatFox

No alerts detected


Files detected

  1. URL

    raw.githubusercontent.com/l0cc/Private-Injector/master/L0cc%20Injector.exe

  2. IP

    185.199.109.133

  3. ASN

    #54113 FASTLY

  1. File type

    PE32 executable (console) Intel 80386, for MS Windows, 6 sections

    Size

    813 kB (813056 bytes)

  2. Hash

    fdb60c9952209b1d7cf8e1214b968f5e

    709b134d62d4ac555aa5a30a942a5ca301a9f831

    Detections

    AnalyzerVerdictAlert
    Public Nextron YARA rulesmalware
    Detects an executable encrypted with a 4 byte XOR (also used for Derusbi Trojan)
    VirusTotalmalicious

JavaScript (0)

HTTP Transactions (2)

URLIPResponseSize
github.com/l0cc/Private-Injector/raw/master/L0cc%20Injector.exe
140.82.121.4302 Found0 B
raw.githubusercontent.com/l0cc/Private-Injector/master/L0cc%20Injector.exe
185.199.109.133200 OK813 kB