Report - github.com/UselessGuru/UG-Miner-Binaries/releases/download/EthMiner/ethminer-0.19.0-18-cuda11.6-windows-vs2019-amd64.zip

Report Overview

Submitted URL
github.com/UselessGuru/UG-Miner-Binaries/releases/download/EthMiner/ethminer-0.19.0-18-cuda11.6-windows-vs2019-amd64.zip
IP
140.82.121.3
ASN
#36459 GITHUB
Submitted
2024-03-28 15:20:28
Access
public
Website Title
about:privatebrowsing
Final URL
about:privatebrowsing
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
3

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
github.com	1423	2007-10-09	2016-07-13	2024-03-24	574 B	4.0 kB	140.82.121.3
objects.githubusercontent.com	134060	2014-02-06	2021-11-01	2024-03-28	1.0 kB	1.8 MB	185.199.111.133

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

Files detected

URL
objects.githubusercontent.com/github-production-release-asset-2e65be/736663486/67e9c042-05a6-4c96-a423-e65d0a092d2b?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAVCODYLSA53PQK4ZA%2F20240328%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20240328T152000Z&X-Amz-Expires=300&X-Amz-Signature=b7fe0c470a963486aaf0fad90582042c34618e76662fef9330f8adc6becb3758&X-Amz-SignedHeaders=host&actor_id=0&key_id=0&repo_id=736663486&response-content-disposition=attachment%3B%20filename%3Dethminer-0.19.0-18-cuda11.6-windows-vs2019-amd64.zip&response-content-type=application%2Foctet-stream
IP
185.199.111.133
ASN
#54113 FASTLY

File type
Zip archive data, at least v2.0 to extract, compression method=store
Size
1.8 MB (1782109 bytes)
Hash
eeec65ffd90daa1e651172fefbd94d07
0cc1780317cae929b521dd8f1b88551eb64e79b9
7db171eb5be43ef87d080f1be37dcb3a9f9daf0c39a7a43f12ced29055c64685

Archive (37)

Filename

Md5

File type

ethminer.exe

4664e69da0c76624a8eb816411f980e8

PE32+ executable (console) x86-64, for MS Windows, 8 sections

ethash_baffin_lws128.bin

f8310f8398e757c5d3b2122a4cd4a0c6

ELF 64-bit LSB executable, *unknown arch 0xffffaf5b* version 1 (SYSV)

ethash_baffin_lws128_exit.bin

563db8ea3cc0a1552645660ca81aabc3

ELF 64-bit LSB executable, *unknown arch 0xffffaf5b* version 1 (SYSV)

ethash_baffin_lws256.bin

d09c2de5e74a90623f786f1e94e89eb6

ELF 64-bit LSB executable, *unknown arch 0xffffaf5b* version 1 (SYSV)

ethash_baffin_lws256_exit.bin

bf365207f77a2bb05dc9810d1fa18ca9

ELF 64-bit LSB executable, *unknown arch 0xffffaf5b* version 1 (SYSV)

ethash_baffin_lws64.bin

06006edb456b6a7ab0cb69bbc5032fdd

ELF 64-bit LSB executable, *unknown arch 0xffffaf5b* version 1 (SYSV)

ethash_baffin_lws64_exit.bin

34f6ecbf20a3d750fe0a0e912713ea3a

ELF 64-bit LSB executable, *unknown arch 0xffffaf5b* version 1 (SYSV)

ethash_ellesmere_lws128.bin

cdca75d8b473102c11c8f913a5a2fb7c

ELF 64-bit LSB executable, *unknown arch 0xffffaf5b* version 1 (SYSV)

ethash_ellesmere_lws128_exit.bin

e7b28686431113950bd3e38d0388f4f0

ELF 64-bit LSB executable, *unknown arch 0xffffaf5b* version 1 (SYSV)

ethash_ellesmere_lws256.bin

580bf15a837081cff3a0116fc9ca5a5c

ELF 64-bit LSB executable, *unknown arch 0xffffaf5b* version 1 (SYSV)

ethash_ellesmere_lws256_exit.bin

cdc374f79cfed145746b0b1063e8fb61

ELF 64-bit LSB executable, *unknown arch 0xffffaf5b* version 1 (SYSV)

ethash_ellesmere_lws64.bin

e6c43215bc5c4a154181e28e8f1a0587

ELF 64-bit LSB executable, *unknown arch 0xffffaf5b* version 1 (SYSV)

ethash_ellesmere_lws64_exit.bin

1e802a3057aa50bc7babf05fdc7d4f8d

ELF 64-bit LSB executable, *unknown arch 0xffffaf5b* version 1 (SYSV)

ethash_gfx900_lws128.bin

d9ed6e3ffc7b4b8539d250f3e70e9bd6

ELF 64-bit LSB executable, *unknown arch 0xffffaf5b* version 1 (SYSV)

ethash_gfx900_lws128_exit.bin

7f9678880c7bfcb0f09a808e482c608c

ELF 64-bit LSB executable, *unknown arch 0xffffaf5b* version 1 (SYSV)

ethash_gfx900_lws256.bin

c667a4260eebd5da0a88798fe5f8e24d

ELF 64-bit LSB executable, *unknown arch 0xffffaf5b* version 1 (SYSV)

ethash_gfx900_lws256_exit.bin

43ff455613cc6df9b8c8ffde421391a4

ELF 64-bit LSB executable, *unknown arch 0xffffaf5b* version 1 (SYSV)

ethash_gfx900_lws64.bin

894099a6d2810e65f188ed2d4078d73f

ELF 64-bit LSB executable, *unknown arch 0xffffaf5b* version 1 (SYSV)

ethash_gfx900_lws64_exit.bin

0ff93a9492fcad933894d99e1a6419ef

ELF 64-bit LSB executable, *unknown arch 0xffffaf5b* version 1 (SYSV)

ethash_gfx901_lws128.bin

c7c48e45e1ca6ea2586833015554a626

ELF 64-bit LSB executable, *unknown arch 0xffffaf5b* version 1 (SYSV)

ethash_gfx901_lws128_exit.bin

db48c9c373b5ff6388b9547fa5aa87c4

ELF 64-bit LSB executable, *unknown arch 0xffffaf5b* version 1 (SYSV)

ethash_gfx901_lws256.bin

9ecc4e98e6e61fad145c2e72fcc09e32

ELF 64-bit LSB executable, *unknown arch 0xffffaf5b* version 1 (SYSV)

ethash_gfx901_lws256_exit.bin

182f2e9e242ca5072119bedf01c7908e

ELF 64-bit LSB executable, *unknown arch 0xffffaf5b* version 1 (SYSV)

ethash_gfx901_lws64.bin

9fce5ce76695b7ba7dc5e141ac8644fc

ELF 64-bit LSB executable, *unknown arch 0xffffaf5b* version 1 (SYSV)

ethash_gfx901_lws64_exit.bin

6a96ac33de86a369df2fb6933a1e35f7

ELF 64-bit LSB executable, *unknown arch 0xffffaf5b* version 1 (SYSV)

ethash_gfx906_lws128.bin

7546a14a2eb3630eb6c862649d7fb670

ELF 64-bit LSB executable, *unknown arch 0xffffaf5b* version 1 (SYSV)

ethash_gfx906_lws128_exit.bin

348ef0d5fc16d8ae14a0b948c16cba27

ELF 64-bit LSB executable, *unknown arch 0xffffaf5b* version 1 (SYSV)

ethash_gfx906_lws256.bin

af1bf5aba75ffebb0e4a00d2225749a2

ELF 64-bit LSB executable, *unknown arch 0xffffaf5b* version 1 (SYSV)

ethash_gfx906_lws256_exit.bin

dc0671171cf8d883f85fbc9d1a310c73

ELF 64-bit LSB executable, *unknown arch 0xffffaf5b* version 1 (SYSV)

ethash_gfx906_lws64.bin

a62a940dd8e299e4a27a77b735919c80

ELF 64-bit LSB executable, *unknown arch 0xffffaf5b* version 1 (SYSV)

ethash_gfx906_lws64_exit.bin

eb52cd59ca55d02b117c63de4f0d899d

ELF 64-bit LSB executable, *unknown arch 0xffffaf5b* version 1 (SYSV)

ethash_tonga_lws128.bin

2ec7b5160a0a6d78caced3b8e496afcc

ELF 64-bit LSB executable, *unknown arch 0xffffaf5b* version 1 (SYSV)

ethash_tonga_lws128_exit.bin

6a52fa5ba61fe743e18895805768ceba

ELF 64-bit LSB executable, *unknown arch 0xffffaf5b* version 1 (SYSV)

ethash_tonga_lws256.bin

b08dc9eb7364bb659e6c9f7f4cb37c88

ELF 64-bit LSB executable, *unknown arch 0xffffaf5b* version 1 (SYSV)

ethash_tonga_lws256_exit.bin

b1fa4e71a0d70c13010ebc7539635724

ELF 64-bit LSB executable, *unknown arch 0xffffaf5b* version 1 (SYSV)

ethash_tonga_lws64.bin

966f8b73fd73300d0be352f6550afd2f

ELF 64-bit LSB executable, *unknown arch 0xffffaf5b* version 1 (SYSV)

ethash_tonga_lws64_exit.bin

4132161adfb9f53333fcddc6671dd69b

ELF 64-bit LSB executable, *unknown arch 0xffffaf5b* version 1 (SYSV)

Detections

Analyzer	Verdict	Alert
Elastic Security YARA Rules	malware	MacOS.Cryptominer.Generic
VirusTotal	malicious	VirusTotal - Scan result 17/59

JavaScript (0)

HTTP Transactions (2)

URL IP Response Size

github.com/UselessGuru/UG-Miner-Binaries/releases/download/EthMiner/ethminer-0.19.0-18-cuda11.6-windows-vs2019-amd64.zip

140.82.121.3

302 Found

0 B

URL User Request GET HTTP/2
github.com/UselessGuru/UG-Miner-Binaries/releases/download/EthMiner/ethminer-0.19.0-18-cuda11.6-windows-vs2019-amd64.zip
IP
140.82.121.3:443
ASN
#36459 GITHUB

Certificate
IssuerSectigo Limited
Subjectgithub.com
FingerprintE7:03:5B:CC:1C:18:77:1F:79:2F:90:86:6B:6C:1D:F8:DF:AA:BD:C0
ValidityThu, 07 Mar 2024 00:00:00 GMT - Fri, 07 Mar 2025 23:59:59 GMT

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /UselessGuru/UG-Miner-Binaries/releases/download/EthMiner/ethminer-0.19.0-18-cuda11.6-windows-vs2019-amd64.zip HTTP/1.1
Host: github.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 302 Found
server: GitHub.com
date: Thu, 28 Mar 2024 15:20:00 GMT
content-type: text/html; charset=utf-8
vary: X-PJAX, X-PJAX-Container, Turbo-Visit, Turbo-Frame, Accept-Encoding, Accept, X-Requested-With
location: https://objects.githubusercontent.com/github-production-release-asset-2e65be/736663486/67e9c042-05a6-4c96-a423-e65d0a092d2b?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAVCODYLSA53PQK4ZA%2F20240328%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20240328T152000Z&X-Amz-Expires=300&X-Amz-Signature=b7fe0c470a963486aaf0fad90582042c34618e76662fef9330f8adc6becb3758&X-Amz-SignedHeaders=host&actor_id=0&key_id=0&repo_id=736663486&response-content-disposition=attachment%3B%20filename%3Dethminer-0.19.0-18-cuda11.6-windows-vs2019-amd64.zip&response-content-type=application%2Foctet-stream
cache-control: no-cache
strict-transport-security: max-age=31536000; includeSubdomains; preload
x-frame-options: deny
x-content-type-options: nosniff
x-xss-protection: 0
referrer-policy: no-referrer-when-downgrade
content-security-policy: default-src 'none'; base-uri 'self'; child-src github.com/assets-cdn/worker/ gist.github.com/assets-cdn/worker/; connect-src 'self' uploads.github.com www.githubstatus.com collector.github.com raw.githubusercontent.com api.github.com github-cloud.s3.amazonaws.com github-production-repository-file-5c1aeb.s3.amazonaws.com github-production-upload-manifest-file-7fdce7.s3.amazonaws.com github-production-user-asset-6210df.s3.amazonaws.com api.githubcopilot.com objects-origin.githubusercontent.com *.actions.githubusercontent.com wss://*.actions.githubusercontent.com productionresultssa0.blob.core.windows.net/ productionresultssa1.blob.core.windows.net/ productionresultssa2.blob.core.windows.net/ productionresultssa3.blob.core.windows.net/ productionresultssa4.blob.core.windows.net/ productionresultssa5.blob.core.windows.net/ productionresultssa6.blob.core.windows.net/ productionresultssa7.blob.core.windows.net/ productionresultssa8.blob.core.windows.net/ productionresultssa9.blob.core.windows.net/ productionresultssa10.blob.core.windows.net/ productionresultssa11.blob.core.windows.net/ productionresultssa12.blob.core.windows.net/ productionresultssa13.blob.core.windows.net/ productionresultssa14.blob.core.windows.net/ productionresultssa15.blob.core.windows.net/ productionresultssa16.blob.core.windows.net/ productionresultssa17.blob.core.windows.net/ productionresultssa18.blob.core.windows.net/ productionresultssa19.blob.core.windows.net/ github-production-repository-image-32fea6.s3.amazonaws.com github-production-release-asset-2e65be.s3.amazonaws.com insights.github.com wss://alive.github.com; font-src github.githubassets.com; form-action 'self' github.com gist.github.com copilot-workspace.githubnext.com objects-origin.githubusercontent.com; frame-ancestors 'none'; frame-src viewscreen.githubusercontent.com notebooks.githubusercontent.com; img-src 'self' data: github.githubassets.com media.githubusercontent.com camo.githubusercontent.com identicons.github.com avatars.githubusercontent.com github-cloud.s3.amazonaws.com objects.githubusercontent.com secured-user-images.githubusercontent.com/ user-images.githubusercontent.com/ private-user-images.githubusercontent.com opengraph.githubassets.com github-production-user-asset-6210df.s3.amazonaws.com customer-stories-feed.github.com spotlights-feed.github.com objects-origin.githubusercontent.com *.githubusercontent.com; manifest-src 'self'; media-src github.com user-images.githubusercontent.com/ secured-user-images.githubusercontent.com/ private-user-images.githubusercontent.com github-production-user-asset-6210df.s3.amazonaws.com gist.github.com; script-src github.githubassets.com; style-src 'unsafe-inline' github.githubassets.com; upgrade-insecure-requests; worker-src github.com/assets-cdn/worker/ gist.github.com/assets-cdn/worker/
content-length: 0
x-github-request-id: FFB5:2876E6:1119C3A:114053A:66058AA0
X-Firefox-Spdy: h2

objects.githubusercontent.com/github-production-release-asset-2e65be/736663486/67e9c042-05a6-4c96-a423-e65d0a092d2b?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAVCODYLSA53PQK4ZA%2F20240328%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20240328T152000Z&X-Amz-Expires=300&X-Amz-Signature=b7fe0c470a963486aaf0fad90582042c34618e76662fef9330f8adc6becb3758&X-Amz-SignedHeaders=host&actor_id=0&key_id=0&repo_id=736663486&response-content-disposition=attachment%3B%20filename%3Dethminer-0.19.0-18-cuda11.6-windows-vs2019-amd64.zip&response-content-type=application%2Foctet-stream

185.199.111.133

200 OK

1.8 MB

URL User Request GET HTTP/2
objects.githubusercontent.com/github-production-release-asset-2e65be/736663486/67e9c042-05a6-4c96-a423-e65d0a092d2b?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAVCODYLSA53PQK4ZA%2F20240328%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20240328T152000Z&X-Amz-Expires=300&X-Amz-Signature=b7fe0c470a963486aaf0fad90582042c34618e76662fef9330f8adc6becb3758&X-Amz-SignedHeaders=host&actor_id=0&key_id=0&repo_id=736663486&response-content-disposition=attachment%3B%20filename%3Dethminer-0.19.0-18-cuda11.6-windows-vs2019-amd64.zip&response-content-type=application%2Foctet-stream
IP
185.199.111.133:443
ASN
#54113 FASTLY

Certificate
IssuerDigiCert Inc
Subject*.github.io
Fingerprint97:D8:C5:70:0F:12:24:6C:88:BC:FA:06:7E:8C:A7:4D:A8:62:67:28
ValidityFri, 15 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

File type
Zip archive data, at least v2.0 to extract, compression method=store
Size
1.8 MB (1782109 bytes)
Hash
eeec65ffd90daa1e651172fefbd94d07
0cc1780317cae929b521dd8f1b88551eb64e79b9
7db171eb5be43ef87d080f1be37dcb3a9f9daf0c39a7a43f12ced29055c64685

Detections

Analyzer	Verdict	Alert
VirusTotal	malicious	VirusTotal - Scan result 17/59

HTTP Headers

GET /github-production-release-asset-2e65be/736663486/67e9c042-05a6-4c96-a423-e65d0a092d2b?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAVCODYLSA53PQK4ZA%2F20240328%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20240328T152000Z&X-Amz-Expires=300&X-Amz-Signature=b7fe0c470a963486aaf0fad90582042c34618e76662fef9330f8adc6becb3758&X-Amz-SignedHeaders=host&actor_id=0&key_id=0&repo_id=736663486&response-content-disposition=attachment%3B%20filename%3Dethminer-0.19.0-18-cuda11.6-windows-vs2019-amd64.zip&response-content-type=application%2Foctet-stream HTTP/1.1
Host: objects.githubusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: application/octet-stream
content-md5: 7uxl/9kNqh5lEXL++9lNBw==
last-modified: Thu, 28 Dec 2023 15:30:53 GMT
etag: "0x8DC07B9FAB203F7"
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: ebdd58e3-301e-0053-4f23-81c261000000
x-ms-version: 2020-10-02
x-ms-creation-time: Thu, 28 Dec 2023 15:30:53 GMT
x-ms-lease-status: unlocked
x-ms-lease-state: available
x-ms-blob-type: BlockBlob
content-disposition: attachment; filename=ethminer-0.19.0-18-cuda11.6-windows-vs2019-amd64.zip
x-ms-server-encrypted: true
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Thu, 28 Mar 2024 15:20:01 GMT
age: 0
x-served-by: cache-iad-kjyo7100156-IAD, cache-hel1410022-HEL
x-cache: HIT, MISS
x-cache-hits: 4, 0
x-timer: S1711639201.622401,VS0,VE490
content-length: 1782109
X-Firefox-Spdy: h2