Report - silentspider049.github.io/Game.zip

Report Overview

Submitted URL
silentspider049.github.io/Game.zip
IP
185.199.108.153
ASN
#54113 FASTLY
Submitted
2024-04-24 18:04:22
Access
public
Website Title
about:privatebrowsing
Final URL
about:privatebrowsing
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
1

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
silentspider049.github.io	unknown	unknown	No data	No data	488 B	15 MB	185.199.111.153

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

Files detected

URL
silentspider049.github.io/Game.zip
IP
185.199.111.153
ASN
#54113 FASTLY

File type
Zip archive data, at least v2.0 to extract, compression method=deflate
Size
15 MB (15215629 bytes)
Hash
c8e0bcdb9e59219b49c21716b5688905
8dd4386c031f7c92c7fb0b9406f680b16fc8e217
306d71dd932fd0b0e9537568fc6ac2876a9c4431a74ae7bf8b9c840d7a23e62d

Archive (9)

Filename

Md5

File type

Enemy_Laugh.wav

deeada7231de57f9aef31630d84d105a

RIFF (little-endian) data, WAVE audio, Microsoft PCM, 16 bit, stereo 44100 Hz

Ghost.png

fbc76a1254d87ac55e87ff421a595e0b

PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced

Ground.png

a434883a0e94b48846e4b1fd4dd93563

PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced

Player_Dead.png

6370d3ed505e18957f28315f5b033373

PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced

Player_Jump.png

87b20549cd1a2e71f34999ab44747243

PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced

Walk_1.png

312263a1749d1161000a16b8e7b2e601

PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced

Walk_2.png

98f13691172a0a845cca238b4f9dc6d4

PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced

Walk_3.png

29cd650a70cbc53086d96f6ba7ae089d

PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced

Game.exe

720382a0703110acca913e840391caf8

PE32+ executable (GUI) x86-64, for MS Windows, 7 sections

Detections

Analyzer	Verdict	Alert
Public InfoSec YARA rules	malware	Identifies executable converted using PyInstaller.

JavaScript (0)

HTTP Transactions (1)

URL IP Response Size

silentspider049.github.io/Game.zip

185.199.111.153

200 OK

15 MB

URL User Request GET HTTP/2
silentspider049.github.io/Game.zip
IP
185.199.111.153:443
ASN
#54113 FASTLY

Certificate
IssuerDigiCert Inc
Subject*.github.io
Fingerprint97:D8:C5:70:0F:12:24:6C:88:BC:FA:06:7E:8C:A7:4D:A8:62:67:28
ValidityFri, 15 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
Zip archive data, at least v2.0 to extract, compression method=deflate
Size
15 MB (15215629 bytes)
Hash
c8e0bcdb9e59219b49c21716b5688905
8dd4386c031f7c92c7fb0b9406f680b16fc8e217
306d71dd932fd0b0e9537568fc6ac2876a9c4431a74ae7bf8b9c840d7a23e62d

HTTP Headers

GET /Game.zip HTTP/1.1
Host: silentspider049.github.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
server: GitHub.com
content-type: application/zip
permissions-policy: interest-cohort=()
last-modified: Tue, 12 Dec 2023 20:00:27 GMT
access-control-allow-origin: *
strict-transport-security: max-age=31556952
etag: "6578bbdb-e82c0d"
expires: Wed, 24 Apr 2024 18:13:53 GMT
cache-control: max-age=600
x-proxy-cache: MISS
x-github-request-id: 4B78:0E60:699591:6B9649:66294989
accept-ranges: bytes
age: 1
date: Wed, 24 Apr 2024 18:03:55 GMT
via: 1.1 varnish
x-served-by: cache-hel1410022-HEL
x-cache: MISS
x-cache-hits: 0
x-timer: S1713981834.880262,VS0,VE1256
vary: Accept-Encoding
x-fastly-request-id: 6be258d69c585ccb6b1b3e25b33cd1208823cd80
content-length: 15215629
X-Firefox-Spdy: h2