Report - the.earth.li/~sgtatham/putty/0.68/w32/putty.exe

Report Overview

Visitedpublic

2023-11-17 07:43:23

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Host Summary

Host	Rank	Registered	First Seen	Last Seen	Sent	Received	IP	Fingerprints
the.earth.li	249742	unknown	2012-10-27 15:46:20	2023-11-16 22:07:00	503 B	714 kB	93.93.131.124

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

Scan Date	Severity	Indicator	Alert
2023-11-17	medium	the.earth.li/~sgtatham/putty/0.68/w32/putty.exe	meth_get_eip

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

File detected

URL

the.earth.li/~sgtatham/putty/0.68/w32/putty.exe

IP / ASN

93.93.131.124

#44684 Mythic Beasts Ltd

File Overview

File TypePE32 executable (GUI) Intel 80386, for MS Windows\012- data

Size714 kB (713592 bytes)

MD5725f4c6c672958b86989731308e70e1e

SHA17150b3fba3437736ec6aa0affc142b36d9f63f83

SHA2561a0d4fe1b3758b1e8a66fb1aabc92590acfc543d66e5efe6779206c426b412e1

Detections

Analyzer	Verdict	Alert
YARAhub by abuse.ch	malware	meth_get_eip
VirusTotal	suspicious	VirusTotal - Scan result 1/72

JavaScript (0)

HTTP Transactions (1)

URL IP Response Size

GET the.earth.li/~sgtatham/putty/0.68/w32/putty.exe

93.93.131.124

200 OK

714 kB

URL

the.earth.li/~sgtatham/putty/0.68/w32/putty.exe

IP / ASN

93.93.131.124

#44684 Mythic Beasts Ltd

Requested byN/A

Resource Info

File typePE32 executable (GUI) Intel 80386, for MS Windows\012- data

First Seen2023-07-06

Last Seen2025-05-07

Times Seen100

Size714 kB (713592 bytes)

MD5725f4c6c672958b86989731308e70e1e

SHA17150b3fba3437736ec6aa0affc142b36d9f63f83

SHA2561a0d4fe1b3758b1e8a66fb1aabc92590acfc543d66e5efe6779206c426b412e1

Certificate Info

IssuerLet's Encrypt

Subjectthe.earth.li

FingerprintDB:BA:87:17:38:98:71:49:7C:B0:6F:5C:71:E6:55:64:E4:CA:63:2C

ValiditySat, 11 Nov 2023 01:15:27 GMT - Fri, 09 Feb 2024 01:15:26 GMT

Detections

Analyzer	Verdict	Alert
YARAhub by abuse.ch	malware	meth_get_eip
VirusTotal	suspicious	VirusTotal - Scan result 1/72

HTTP Headers

GET /~sgtatham/putty/0.68/w32/putty.exe HTTP/1.1
Host: the.earth.li
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Fri, 17 Nov 2023 07:43:06 GMT
Server: Apache
Last-Modified: Sat, 18 Feb 2017 17:15:02 GMT
ETag: "ae378-548d12bbed1a8"
Accept-Ranges: bytes
Content-Length: 713592
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: application/x-msdos-program