Report Overview

  1. Visited public
    2025-01-25 00:33:29
    Tags
    Submit Tags
  2. URL

    ftp5.gwdg.de/pub/opensuse/discontinued/distribution/11.0/repo/oss/openSUSE11_0_LOCAL.exe

  3. Finishing URL

    about:privatebrowsing

  4. IP / ASN
    134.76.12.6

    #207592 Gesellschaft fuer wissenschaftliche Datenverarbeitung mbH, Goettingen

    Title
    about:privatebrowsing
Detections
urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
3

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
ftp5.gwdg.de690480unknown2013-04-162024-12-27

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules
SeverityIndicatorAlert
mediumftp5.gwdg.de/pub/opensuse/discontinued/distribution/11.0/repo/oss/openSUSE11_0_LOCAL.exeDetect files is `SliverFox` malware

OpenPhish

No alerts detected


PhishTank

No alerts detected


Quad9 DNS

No alerts detected


ThreatFox

No alerts detected


Files detected

  1. URL

    ftp5.gwdg.de/pub/opensuse/discontinued/distribution/11.0/repo/oss/openSUSE11_0_LOCAL.exe

  2. IP

    134.76.12.6

  3. ASN

    #207592 Gesellschaft fuer wissenschaftliche Datenverarbeitung mbH, Goettingen

  1. File type

    PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive, 5 sections

    Size

    504 kB (504196 bytes)

  2. Hash

    d1fdd8c601c06081ec3977cd57120858

    5f3fb3c7011d6877c37f174f05e569638c615e51

    Detections

    AnalyzerVerdictAlert
    YARAhub by abuse.chmalware
    Detect files is `SliverFox` malware
    VirusTotalsuspicious

JavaScript (0)

HTTP Transactions (1)

URLIPResponseSize
GET ftp5.gwdg.de/pub/opensuse/discontinued/distribution/11.0/repo/oss/openSUSE11_0_LOCAL.exe
134.76.12.6200 OK504 kB