| the.earth.li/~sgtatham/putty/latest/x86/plink.exe |  93.93.131.124 | 302 Found | 304 B |
URL User Request GET HTTP/1.1the.earth.li/~sgtatham/putty/latest/x86/plink.exe IP93.93.131.124:443 ASN#44684 Mythic Beasts Ltd
CertificateIssuerLet's Encrypt Subjectthe.earth.li FingerprintE6:6F:3C:24:94:CC:32:C1:62:2F:3D:43:E9:8D:95:9D:0C:09:08:1D ValidityMon, 11 Nov 2024 01:17:14 GMT - Sun, 09 Feb 2025 01:17:13 GMT
File typeHTML document, ASCII text Hashc0179305675809ad3a097b4304edc7f6 e244aaa457c9570a69dbe9c06ba7b6c0ab4aa0c0 b08fd01007f4e3ca1a110a26869fe2ba3e14778eb415a5f4171bbda30a73d02b
GET /~sgtatham/putty/latest/x86/plink.exe HTTP/1.1
Host: the.earth.li
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Date: Wed, 01 Jan 2025 11:17:53 GMT
Server: Apache
Location: https://the.earth.li/~sgtatham/putty/latest/w32/plink.exe
Content-Length: 304
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
|
| the.earth.li/~sgtatham/putty/latest/w32/plink.exe | 93.93.131.124 | 302 Found | 302 B |
URL User Request GET HTTP/1.1the.earth.li/~sgtatham/putty/latest/w32/plink.exe IP93.93.131.124:443 ASN#44684 Mythic Beasts Ltd
CertificateIssuerLet's Encrypt Subjectthe.earth.li FingerprintE6:6F:3C:24:94:CC:32:C1:62:2F:3D:43:E9:8D:95:9D:0C:09:08:1D ValidityMon, 11 Nov 2024 01:17:14 GMT - Sun, 09 Feb 2025 01:17:13 GMT
File typeHTML document, ASCII text Hash45874d4107a49ad6f10df6951c20b16b f8b4ec8ef7145fe7f324e4e9dff3e6fa529359f7 5d143cbfd0311714e11f82cf15f496b39225d4d81a64de0481ef7ac3de79e07f
GET /~sgtatham/putty/latest/w32/plink.exe HTTP/1.1
Host: the.earth.li
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Date: Wed, 01 Jan 2025 11:17:53 GMT
Server: Apache
Location: https://the.earth.li/~sgtatham/putty/0.82/w32/plink.exe
Content-Length: 302
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
|
| the.earth.li/~sgtatham/putty/0.82/w32/plink.exe | 93.93.131.124 | 200 OK | 857 kB |
URL User Request GET HTTP/1.1the.earth.li/~sgtatham/putty/0.82/w32/plink.exe IP93.93.131.124:443 ASN#44684 Mythic Beasts Ltd
CertificateIssuerLet's Encrypt Subjectthe.earth.li FingerprintE6:6F:3C:24:94:CC:32:C1:62:2F:3D:43:E9:8D:95:9D:0C:09:08:1D ValidityMon, 11 Nov 2024 01:17:14 GMT - Sun, 09 Feb 2025 01:17:13 GMT
File typePE32 executable (console) Intel 80386, for MS Windows, 7 sections Size857 kB (856688 bytes) Hash10a74574ef6e34e783b72c3bc9a5754f 2046170c3340f564a5fef3ea4b1719b756175c8b a86180e9a7ac473ad52fbab2842a1554581c536dd6e112fae9c824dd1041af20
| Analyzer | Verdict | Alert |
|---|
| YARAhub by abuse.ch | malware | files - file ~tmp01925d3f.exe | | VirusTotal | suspicious | | | ClamAV | malicious | Win.Packed.Razy-10038528-0 |
GET /~sgtatham/putty/0.82/w32/plink.exe HTTP/1.1
Host: the.earth.li
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 01 Jan 2025 11:17:53 GMT
Server: Apache
Last-Modified: Mon, 25 Nov 2024 20:03:19 GMT
ETag: "d1270-627c23959374c"
Accept-Ranges: bytes
Content-Length: 856688
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: application/x-msdos-program
|