Report - win98.altervista.org/vizerracom/installers/vizerrasetup120.exe

Report Overview

Visitedpublic

2025-04-30 00:30:08

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Host Summary

Host	Rank	Registered	First Seen	Last Seen	Sent	Received	IP	Fingerprints
win98.altervista.org	unknown	2000-12-22	2014-04-26	2025-04-29	530 B	8.5 MB	5.9.139.125

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

Scan Date	Severity	Indicator	Alert
2025-04-30	medium	win98.altervista.org/vizerracom/installers/vizerrasetup120.exe	Detect files is `SliverFox` malware

OpenPhish

No alerts detected

PhishTank

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

File detected

URL

win98.altervista.org/vizerracom/installers/vizerrasetup120.exe

IP / ASN

5.9.139.125

#24940 Hetzner Online GmbH

File Overview

File TypePE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive, 5 sections

Size8.5 MB (8482250 bytes)

MD5a9311d6004785cecb5d3d85fea9bccc2

SHA103cabfb151c716739295c1d45d07d0d2d077e44b

SHA25659c40910d18324fc70f10793b40395dd1069aebd5f83fec7999913e7f041c7ec

Detections

Analyzer	Verdict	Alert
YARAhub by abuse.ch	malware	Detect files is `SliverFox` malware

JavaScript (0)

HTTP Transactions (1)

URL IP Response Size

GET win98.altervista.org/vizerracom/installers/vizerrasetup120.exe

5.9.139.125

200 OK

8.5 MB

URL

win98.altervista.org/vizerracom/installers/vizerrasetup120.exe

IP / ASN

5.9.139.125

#24940 Hetzner Online GmbH

Requested byN/A

Resource Info

File typePE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive, 5 sections

First Seen2025-04-30

Last Seen2025-04-30

Times Seen1

Size8.5 MB (8482250 bytes)

MD5a9311d6004785cecb5d3d85fea9bccc2

SHA103cabfb151c716739295c1d45d07d0d2d077e44b

SHA25659c40910d18324fc70f10793b40395dd1069aebd5f83fec7999913e7f041c7ec

Certificate Info

IssuerLet's Encrypt

Subjectwin98.altervista.org

FingerprintA9:49:17:05:47:19:D6:B6:18:F0:A2:49:C8:07:39:86:29:AB:B6:9C

ValiditySun, 23 Mar 2025 05:27:58 GMT - Sat, 21 Jun 2025 05:27:57 GMT

Detections

Analyzer	Verdict	Alert
YARAhub by abuse.ch	malware	Detect files is `SliverFox` malware

HTTP Headers

GET /vizerracom/installers/vizerrasetup120.exe HTTP/1.1
Host: win98.altervista.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
last-modified: Fri, 01 May 2020 17:44:23 GMT
etag: "85aabe-5a499bb53cd68"
accept-ranges: bytes
content-length: 8759998
content-type: application/x-msdownload
date: Wed, 30 Apr 2025 00:29:36 GMT
server: Apache
X-Firefox-Spdy: h2