Report Overview

  1. Visited public
    2024-02-17 05:37:32
    Tags
  2. URL

    github.com/J2TEAM/idm-trial-reset/releases/download/v1.0.0/IDM.Trial.Reset.v1.0.0.zip

  3. Finishing URL

    about:privatebrowsing

  4. IP / ASN
    140.82.121.3

    #36459 GITHUB

    Title
    about:privatebrowsing
Detections
urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
3

Domain Summary

Domain / FQDNRankRegisteredFirst SeenLast Seen
github.com14232007-10-092016-07-13 12:28:222024-02-16 17:45:23
objects.githubusercontent.com1340602014-02-062021-11-01 22:34:292024-02-16 08:16:43

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected


OpenPhish

No alerts detected


PhishTank

No alerts detected


mnemonic secure dns

No alerts detected


Quad9 DNS

No alerts detected


ThreatFox

No alerts detected


Files detected

  1. URL

    objects.githubusercontent.com/github-production-release-asset-2e65be/67451626/d90e1664-73f1-11e6-8738-635d4a08c369?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAVCODYLSA53PQK4ZA%2F20240217%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20240217T053707Z&X-Amz-Expires=300&X-Amz-Signature=198821400298a00a44485dd6d4e0d0db497bdef34445f849def82d700e970e9d&X-Amz-SignedHeaders=host&actor_id=0&key_id=0&repo_id=67451626&response-content-disposition=attachment%3B%20filename%3DIDM.Trial.Reset.v1.0.0.zip&response-content-type=application%2Foctet-stream

  2. IP

    185.199.111.133

  3. ASN

    #54113 FASTLY

  1. File type

    Zip archive data, at least v2.0 to extract, compression method=deflate

    Size

    882 kB (882136 bytes)

  2. Hash

    016866100c1beff73c59f5e02323be46

    60aa90998fde73e03ffbe42bf899793b32e2ee65

  1. Archive (1)

  2. FilenameMd5File type
    IDM Trial Reset.exe
    064f82094ae6a6e22c28a6f1ef868a26
    PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed, 3 sections

    Detections

    AnalyzerVerdictAlert
    Public Nextron YARA rulesmalware
    Detects imphash often found in malware samples (Maximum 0,25% hits with search for 'imphash:x p:0' on Virustotal) = 99,75% hits
    VirusTotalsuspicious

JavaScript (0)

HTTP Transactions (2)

URLIPResponseSize
github.com/J2TEAM/idm-trial-reset/releases/download/v1.0.0/IDM.Trial.Reset.v1.0.0.zip
140.82.121.3302 Found0 B
objects.githubusercontent.com/github-production-release-asset-2e65be/67451626/d90e1664-73f1-11e6-8738-635d4a08c369?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAVCODYLSA53PQK4ZA%2F20240217%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20240217T053707Z&X-Amz-Expires=300&X-Amz-Signature=198821400298a00a44485dd6d4e0d0db497bdef34445f849def82d700e970e9d&X-Amz-SignedHeaders=host&actor_id=0&key_id=0&repo_id=67451626&response-content-disposition=attachment%3B%20filename%3DIDM.Trial.Reset.v1.0.0.zip&response-content-type=application%2Foctet-stream
185.199.111.133200 OK882 kB