Report Overview
Visitedpublic
2024-08-15 08:31:13
Tags
Submit Tags
URL
n.zelaze.ovh/s/fJHjdbGmoHie84j/download/%D7%A2%D7%99%D7%9E%D7%95%D7%93%20%D7%AA%D7%95%D7%A8%D7%A0%D7%99%20%D7%9E%D7%A7%D7%99%D7%A3%20%D7%9C%D7%95%D7%95%D7%A8%D7%93.exe
Finishing URL
about:privatebrowsing
IP / ASN
38.242.254.125
#51167 Contabo GmbH
Title
about:privatebrowsing

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
0

Host Summary

HostRankRegisteredFirst SeenLast Seen
r11.o.lencr.org
unknown
r10.o.lencr.org
unknown
n.zelaze.ovh
unknown
aus5.mozilla.org
2548

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules
SeverityIndicatorAlert
mediumn.zelaze.ovh/s/fJHjdbGmoHie84j/download/%D7%A2%D7%99%D7%9E%D7%95%D7%93%20%D7%AA%D7%95%D7%A8%D7%A0%D7%99%20%D7%9E%D7%A7%D7%99%D7%A3%20%D7%9C%D7%95%D7%95%D7%A8%D7%93.exeDetects an SFX archive with automatic script execution

OpenPhish

No alerts detected


PhishTank

No alerts detected


mnemonic secure dns

No alerts detected


Quad9 DNS

No alerts detected


ThreatFox

No alerts detected


File detected

URL
n.zelaze.ovh/s/fJHjdbGmoHie84j/download/%D7%A2%D7%99%D7%9E%D7%95%D7%93%20%D7%AA%D7%95%D7%A8%D7%A0%D7%99%20%D7%9E%D7%A7%D7%99%D7%A3%20%D7%9C%D7%95%D7%95%D7%A8%D7%93.exe
IP / ASN
38.242.254.125
#51167 Contabo GmbH
File Overview
File TypePE32 executable (GUI) Intel 80386, for MS Windows, 6 sections
Size992 kB (992096 bytes)
MD555562e9a93222093fb73d8814ddce1a4
SHA106ebe620928f8c8e304605e65209b630caea064f

Detections

AnalyzerVerdictAlert
YARAhub by abuse.chmalware
Detects an SFX archive with automatic script execution
VirusTotalmalicious

JavaScript (0)

HTTP Transactions (11)

URLIPResponseSize