GET github.com/AlessandroZ/LaZagne/releases/download/v2.4.6/LaZagne.exe
302 Found 0 B URL User Request GET HTTP/2 github.com/AlessandroZ/LaZagne/releases/download/v2.4.6/LaZagne.exe
IP
Certificate IssuerSectigo Limited
Subjectgithub.com
FingerprintE7:03:5B:CC:1C:18:77:1F:79:2F:90:86:6B:6C:1D:F8:DF:AA:BD:C0
ValidityThu, 07 Mar 2024 00:00:00 GMT - Fri, 07 Mar 2025 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /AlessandroZ/LaZagne/releases/download/v2.4.6/LaZagne.exe HTTP/1.1
Host: github.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
server: GitHub.com
date: Wed, 29 Jan 2025 16:42:14 GMT
content-type: text/html; charset=utf-8
vary: X-PJAX, X-PJAX-Container, Turbo-Visit, Turbo-Frame, Accept-Encoding, Accept, X-Requested-With
location: https://objects.githubusercontent.com/github-production-release-asset-2e65be/30870954/39cbd3d6-89c5-417f-a996-b5ed2444e3eb?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=releaseassetproduction%2F20250129%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20250129T164214Z&X-Amz-Expires=300&X-Amz-Signature=29dfa1df458f1235f6869d8106301e44aeb4a1c1441d2b01b6121c004a04e3c9&X-Amz-SignedHeaders=host&response-content-disposition=attachment%3B%20filename%3DLaZagne.exe&response-content-type=application%2Foctet-stream
cache-control: no-cache
strict-transport-security: max-age=31536000; includeSubdomains; preload
x-frame-options: deny
x-content-type-options: nosniff
x-xss-protection: 0
referrer-policy: no-referrer-when-downgrade
content-security-policy: default-src 'none'; base-uri 'self'; child-src github.com/assets-cdn/worker/ github.com/webpack/ github.com/assets/ gist.github.com/assets-cdn/worker/; connect-src 'self' uploads.github.com www.githubstatus.com collector.github.com raw.githubusercontent.com api.github.com github-cloud.s3.amazonaws.com github-production-repository-file-5c1aeb.s3.amazonaws.com github-production-upload-manifest-file-7fdce7.s3.amazonaws.com github-production-user-asset-6210df.s3.amazonaws.com *.rel.tunnels.api.visualstudio.com wss://*.rel.tunnels.api.visualstudio.com objects-origin.githubusercontent.com copilot-proxy.githubusercontent.com proxy.individual.githubcopilot.com proxy.business.githubcopilot.com proxy.enterprise.githubcopilot.com *.actions.githubusercontent.com wss://*.actions.githubusercontent.com productionresultssa0.blob.core.windows.net/ productionresultssa1.blob.core.windows.net/ productionresultssa2.blob.core.windows.net/ productionresultssa3.blob.core.windows.net/ productionresultssa4.blob.core.windows.net/ productionresultssa5.blob.core.windows.net/ productionresultssa6.blob.core.windows.net/ productionresultssa7.blob.core.windows.net/ productionresultssa8.blob.core.windows.net/ productionresultssa9.blob.core.windows.net/ productionresultssa10.blob.core.windows.net/ productionresultssa11.blob.core.windows.net/ productionresultssa12.blob.core.windows.net/ productionresultssa13.blob.core.windows.net/ productionresultssa14.blob.core.windows.net/ productionresultssa15.blob.core.windows.net/ productionresultssa16.blob.core.windows.net/ productionresultssa17.blob.core.windows.net/ productionresultssa18.blob.core.windows.net/ productionresultssa19.blob.core.windows.net/ github-production-repository-image-32fea6.s3.amazonaws.com github-production-release-asset-2e65be.s3.amazonaws.com insights.github.com wss://alive.github.com api.githubcopilot.com api.individual.githubcopilot.com api.business.githubcopilot.com api.enterprise.githubcopilot.com; font-src github.githubassets.com; form-action 'self' github.com gist.github.com copilot-workspace.githubnext.com objects-origin.githubusercontent.com; frame-ancestors 'none'; frame-src viewscreen.githubusercontent.com notebooks.githubusercontent.com; img-src 'self' data: blob: github.githubassets.com media.githubusercontent.com camo.githubusercontent.com identicons.github.com avatars.githubusercontent.com private-avatars.githubusercontent.com github-cloud.s3.amazonaws.com objects.githubusercontent.com secured-user-images.githubusercontent.com/ user-images.githubusercontent.com/ private-user-images.githubusercontent.com opengraph.githubassets.com github-production-user-asset-6210df.s3.amazonaws.com customer-stories-feed.github.com spotlights-feed.github.com objects-origin.githubusercontent.com *.githubusercontent.com; manifest-src 'self'; media-src github.com user-images.githubusercontent.com/ secured-user-images.githubusercontent.com/ private-user-images.githubusercontent.com github-production-user-asset-6210df.s3.amazonaws.com gist.github.com; script-src github.githubassets.com; style-src 'unsafe-inline' github.githubassets.com; upgrade-insecure-requests; worker-src github.com/assets-cdn/worker/ github.com/webpack/ github.com/assets/ gist.github.com/assets-cdn/worker/
content-length: 0
x-github-request-id: BCC8:D4396:195360C:19DC742:679A5A66
X-Firefox-Spdy: h2
GET objects.githubusercontent.com/github-production-release-asset-2e65be/30870954/39cbd3d6-89c5-417f-a996-b5ed2444e3eb?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=releaseassetproduction%2F20250129%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20250129T164214Z&X-Amz-Expires=300&X-Amz-Signature=29dfa1df458f1235f6869d8106301e44aeb4a1c1441d2b01b6121c004a04e3c9&X-Amz-SignedHeaders=host&response-content-disposition=attachment%3B%20filename%3DLaZagne.exe&response-content-type=application%2Foctet-stream
200 OK 10 MB URL User Request GET HTTP/2 objects.githubusercontent.com/github-production-release-asset-2e65be/30870954/39cbd3d6-89c5-417f-a996-b5ed2444e3eb?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=releaseassetproduction%2F20250129%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20250129T164214Z&X-Amz-Expires=300&X-Amz-Signature=29dfa1df458f1235f6869d8106301e44aeb4a1c1441d2b01b6121c004a04e3c9&X-Amz-SignedHeaders=host&response-content-disposition=attachment%3B%20filename%3DLaZagne.exe&response-content-type=application%2Foctet-stream
IP
Certificate IssuerDigiCert Inc
Subject*.github.io
Fingerprint97:D8:C5:70:0F:12:24:6C:88:BC:FA:06:7E:8C:A7:4D:A8:62:67:28
ValidityFri, 15 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT
File type PE32+ executable (console) x86-64, for MS Windows, 7 sections
Size 10 MB (10132516 bytes)
Hash 5075f994390f9738e8e69f4de09debe6
a3fad01a0c10fde5b38267188860ea1da649697d
467e49f1f795c1b08245ae621c59cdf06df630fc1631dc0059da9a032858a486
Analyzer Verdict Alert Public Nextron YARA rules malware Detects Lazagne password extractor hacktool
Public InfoSec YARA rules malware Identifies LaZagne, credentials recovery project.
Public InfoSec YARA rules malware Identifies executable converted using PyInstaller.
VirusTotal malicious
GET /github-production-release-asset-2e65be/30870954/39cbd3d6-89c5-417f-a996-b5ed2444e3eb?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=releaseassetproduction%2F20250129%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20250129T164214Z&X-Amz-Expires=300&X-Amz-Signature=29dfa1df458f1235f6869d8106301e44aeb4a1c1441d2b01b6121c004a04e3c9&X-Amz-SignedHeaders=host&response-content-disposition=attachment%3B%20filename%3DLaZagne.exe&response-content-type=application%2Foctet-stream HTTP/1.1
Host: objects.githubusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/octet-stream
last-modified: Tue, 11 Jun 2024 13:39:26 GMT
etag: "0x8DC8A1BE964772C"
server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0
x-ms-request-id: 3cac3153-701e-006d-4177-53551e000000
x-ms-version: 2024-11-04
x-ms-creation-time: Tue, 11 Jun 2024 13:39:26 GMT
x-ms-lease-status: unlocked
x-ms-lease-state: available
x-ms-blob-type: BlockBlob
content-disposition: attachment; filename=LaZagne.exe
x-ms-server-encrypted: true
via: 1.1 varnish, 1.1 varnish
fastly-restarts: 1
accept-ranges: bytes
date: Wed, 29 Jan 2025 16:42:15 GMT
age: 1953
x-served-by: cache-iad-kiad7000052-IAD, cache-hel1410034-HEL
x-cache: HIT, HIT
x-cache-hits: 275, 1
x-timer: S1738168935.096941,VS0,VE115
content-length: 10132516
X-Firefox-Spdy: h2
140.82.121.3
185.199.111.133