Report - memtest.org/download/v7.20/mt86plus

Report Overview

Visitedpublic

2024-12-22 05:11:12

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Host Summary

Host	Rank	Registered	First Seen	Last Seen	Sent	Received	IP	Fingerprints
memtest.org	unknown	2003-12-21	2012-07-08	2024-12-22	507 B	355 kB	212.129.20.209

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

File detected

URL

memtest.org/download/v7.20/mt86plus_7.20.binaries.zip

IP / ASN

212.129.20.209

#12876 Scaleway S.a.s.

File Overview

File TypeZip archive data, at least v2.0 to extract, compression method=deflate

Size354 kB (354419 bytes)

MD59093f3d499da15253b862c74769a974a

SHA1bb770c26f54ccd6ae644d4c647b452e71d40ef47

SHA2568aa81b2ac218f4848af4c1a6cff1c1a8a6cdfa884f37c426b8185894b65f09c3

Archive (5)

Modified	Filename	Size	MD5	File type
2024-11-11 18:00	memtest32.bin	151 kB	ece4cd120ace6b209fc5cdbcc0d5dfc7	Linux kernel x86 boot executable bzImage, version Memtest86+ v7.20, RW-rootFS,
2024-11-11 18:00	memtest32.efi	152 kB	56ef6b02771538914ebff983840a1485	Linux kernel x86 boot executable bzImage, version Memtest86+ v7.20, RW-rootFS,
2024-11-11 18:00	memtest64.bin	156 kB	41949af8fed9c640f400dda35f42d9d1	Linux kernel x86 boot executable bzImage, version Memtest86+ v7.20, RW-rootFS,
2024-11-11 18:00	memtest64.efi	157 kB	92b7a4f04fc9940af221b26cf077736b	Linux kernel x86 boot executable bzImage, version Memtest86+ v7.20, RW-rootFS,
2024-11-11 18:09	memtestla64.efi	135 kB	6ee951ed41bb2a54482111a26a0d93a1	PE32+ executable (EFI application) LoongArch 64-bit (stripped to external PDB), for MS Windows, 3 sections

Detections

Analyzer	Verdict	Alert
YARAhub by abuse.ch	malware	Detect pe file that no import table
YARAhub by abuse.ch	malware	Detect pe file that no import table
YARAhub by abuse.ch	malware	Detect pe file that no import table
VirusTotal	suspicious	VirusTotal - Scan result 1/67

JavaScript (0)

HTTP Transactions (1)

URL IP Response Size

GET memtest.org/download/v7.20/mt86plus_7.20.binaries.zip

212.129.20.209

200 OK

354 kB

URL

memtest.org/download/v7.20/mt86plus_7.20.binaries.zip

IP / ASN

212.129.20.209

#12876 Scaleway S.a.s.

Requested byN/A

Resource Info

File typeZip archive data, at least v2.0 to extract, compression method=deflate

First Seen2024-12-01

Last Seen2025-04-30

Times Seen6

Size354 kB (354419 bytes)

MD59093f3d499da15253b862c74769a974a

SHA1bb770c26f54ccd6ae644d4c647b452e71d40ef47

SHA2568aa81b2ac218f4848af4c1a6cff1c1a8a6cdfa884f37c426b8185894b65f09c3

Certificate Info

IssuerLet's Encrypt

Subjectmemtest.org

Fingerprint76:7B:66:96:8A:54:6D:69:3A:E1:1E:9F:BA:49:4B:E3:C2:9E:B0:57

ValidityThu, 24 Oct 2024 02:44:26 GMT - Wed, 22 Jan 2025 02:44:25 GMT

Detections

Analyzer	Verdict	Alert
VirusTotal	suspicious	VirusTotal - Scan result 1/67

HTTP Headers

GET /download/v7.20/mt86plus_7.20.binaries.zip HTTP/1.1
Host: memtest.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Sun, 22 Dec 2024 05:10:47 GMT
Server: Apache/2.4.62 (Debian)
Last-Modified: Mon, 11 Nov 2024 18:20:13 GMT
ETag: "56873-626a726e00b04"
Accept-Ranges: bytes
Content-Length: 354419
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: application/zip