Report Overview
Submitted URL
www.mclaneco.com/content/dam/mclane/landing/agee64.msi
IP
198.160.58.148
ASN
#18961 MCLANECO
Submitted
2024-04-24 16:59:43
Access
public
Website Title
about:privatebrowsing
Final URL
about:privatebrowsing
Tags
urlquery detections
No alerts detected
Detections
urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
3
Domain Summary
Domain / FQDN | Rank | Registered | First Seen | Last Seen | Sent | Received | IP |
---|---|---|---|---|---|---|---|
www.mclaneco.com | 470305 | 1996-03-14 | 2014-02-18 | 2024-03-01 | 1.0 kB | 19 MB | 198.160.58.148 |
Related reports
Network Intrusion Detection Systems
Suricata /w Emerging Threats Pro
Threat Detection Systems
Public InfoSec YARA rules
Scan Date | Severity | Indicator | Alert |
---|---|---|---|
2024-04-24 | medium | www.mclaneco.com/content/dam/mclane/landing/agee64.msi | Detect files is `SliverFox` malware |
OpenPhish
No alerts detected
PhishTank
No alerts detected
mnemonic secure dns
No alerts detected
Quad9 DNS
No alerts detected
ThreatFox
No alerts detected
Files detected
URL
www.mclaneco.com/content/dam/mclane/landing/agee64.msi
IP
198.160.58.148
ASN
#18961 MCLANECO
File type
Composite Document File V2 Document, Little Endian, Os: Windows, Version 10.0, MSI Installer, Code page: 1252, Title: Installation Database, Subject: Citrix Secure Access, Author: Citrix Systems, Inc., Keywords: Installer, Comments: This installer database contains the logic and data required to install Citrix Secure Access., Template: x64;0, Revision Number: {B45C4037-665E-47F2-BFB9-2768304A4786}, Create Time/Date: Wed Oct 18 11:40:32 2023, Last Saved Time/Date: Wed Oct 18 11:40:32 2023, Number of Pages: 200, Number of Words: 2, Name of Creating Application: Windows Installer XML Toolset (3.11.1.2318), Security: 2
Size
19 MB (19193856 bytes)
Hash
67e27fac83017bfe7be1cffa7d1dc94e
f9fc1f3e5fd8f0033302e195b92772de605b9125
Detections
Analyzer | Verdict | Alert |
---|---|---|
YARAhub by abuse.ch | malware | Detect files is `SliverFox` malware |
VirusTotal | suspicious |
JavaScript (1)
Size | First Seen | Last Seen | ||
---|---|---|---|---|
#1 Eval - d41d8cd98f00b204e9800998ecf8427e | 0 B | 2023-03-07 | 2024-05-06 | |
Pretty
Loading... | ||||
HTTP Transactions (2)
URL | IP | Response | Size | ||||||||||
---|---|---|---|---|---|---|---|---|---|---|---|---|---|
www.mclaneco.com/content/dam/mclane/landing/agee64.msi | 198.160.58.148 | 200 OK | 0 B | ||||||||||
HTTP Headers
| |||||||||||||
www.mclaneco.com/content/dam/mclane/landing/agee64.msi | 198.160.58.148 | 200 OK | 19 MB | ||||||||||
Detections
HTTP Headers
| |||||||||||||