Report - raw.githubusercontent.com/pankoza2-pl/kapi2.0peys-malwares/main/png.exe

Report Overview

Visitedpublic

2024-08-07 04:39:43

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Host Summary

Host	Rank	Registered	First Seen	Last Seen	Sent	Received	IP	Fingerprints
raw.githubusercontent.com	35802				525 B	516 kB	185.199.108.133
r10.o.lencr.org	unknown				2.3 kB	6.2 kB	23.36.77.32

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

File detected

URL

raw.githubusercontent.com/pankoza2-pl/kapi2.0peys-malwares/main/png.exe

IP / ASN

185.199.108.133

#54113 FASTLY

File Overview

File TypePE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

Size515 kB (514560 bytes)

MD593b879a5817788358a28e6f615c89970

SHA11f9dd30bd0f91cd47a6aa456401e3fc4e12f6e28

SHA2565901f42666b910e070c4289dcfd3724aab224e4b8a28a46aa6aa11bee0a3bcad

Detections

Analyzer	Verdict	Alert
VirusTotal	malicious	VirusTotal - Scan result 52/71

JavaScript (0)

HTTP Transactions (8)

URL IP Response Size

r10.o.lencr.org/

23.36.77.32

504 B

URL HTTP

r10.o.lencr.org/

IP / ASN

23.36.77.32

#20940 Akamai International B.V.

Requested byN/A

Resource Info

File typedata

First Seen2024-08-06

Last Seen2024-08-19

Times Seen29584

Size504 B (504 bytes)

MD5a4b0d33ac49c96c71e39bb632bda5673

SHA1f4a1b2c6888fbf71cf9f3a36170c0968463df973

SHA256b28c45ed35b17a62f81e5aa81541f61740e5dfb5d5c1baa572feed4a4e2db9c5

HTTP Headers

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "B28C45ED35B17A62F81E5AA81541F61740E5DFB5D5C1BAA572FEED4A4E2DB9C5"
Last-Modified: Tue, 06 Aug 2024 06:28:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10684
Expires: Wed, 07 Aug 2024 07:37:21 GMT
Date: Wed, 07 Aug 2024 04:39:17 GMT
Connection: keep-alive

r10.o.lencr.org/

23.36.77.32

504 B

URL HTTP

r10.o.lencr.org/

IP / ASN

23.36.77.32

#20940 Akamai International B.V.

Requested byN/A

Resource Info

File typedata

First Seen2024-08-06

Last Seen2024-08-19

Times Seen21501

Size504 B (504 bytes)

MD5364e0d4e7956b61b144a82620b9fee26

SHA18d45d1cf6f1805ae7308ae92b1676839bcc84dc2

SHA256167eb76ed650b4d8ed7747252181955a5803628ec02ca02edfe509b1b403786b

HTTP Headers

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "167EB76ED650B4D8ED7747252181955A5803628EC02CA02EDFE509B1B403786B"
Last-Modified: Tue, 06 Aug 2024 06:58:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7532
Expires: Wed, 07 Aug 2024 06:44:49 GMT
Date: Wed, 07 Aug 2024 04:39:17 GMT
Connection: keep-alive

r10.o.lencr.org/

23.36.77.32

504 B

URL HTTP

r10.o.lencr.org/

IP / ASN

23.36.77.32

#20940 Akamai International B.V.

Requested byN/A

Resource Info

File typedata

First Seen2024-08-06

Last Seen2024-08-19

Times Seen21072

Size504 B (504 bytes)

MD59a041998a7f05a3597d12c78ad418ec6

SHA147926457fcb7a088f9c31d2873ef6d0fcad216e9

SHA2561b7a83f4e52229b23ed8f2831f0b93cfe270359192b0efb4fefde3225c1c844b

HTTP Headers

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "1B7A83F4E52229B23ED8F2831F0B93CFE270359192B0EFB4FEFDE3225C1C844B"
Last-Modified: Tue, 06 Aug 2024 06:58:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7470
Expires: Wed, 07 Aug 2024 06:43:47 GMT
Date: Wed, 07 Aug 2024 04:39:17 GMT
Connection: keep-alive

r10.o.lencr.org/

23.36.77.32

504 B

URL HTTP

r10.o.lencr.org/

IP / ASN

23.36.77.32

#20940 Akamai International B.V.

Requested byN/A

Resource Info

File typedata

First Seen2024-08-06

Last Seen2024-08-19

Times Seen28445

Size504 B (504 bytes)

MD5ad08a2764470070a728a228f5cca3296

SHA13e8d448130fe3c6ad6e88a0ff3dd170855740e6f

SHA256c508461997b3781963d5494bb2517544c6ad0b2a8029d1a1009a6bb3ff6b0fd7

HTTP Headers

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "C508461997B3781963D5494BB2517544C6AD0B2A8029D1A1009A6BB3FF6B0FD7"
Last-Modified: Tue, 06 Aug 2024 06:27:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3849
Expires: Wed, 07 Aug 2024 05:43:26 GMT
Date: Wed, 07 Aug 2024 04:39:17 GMT
Connection: keep-alive

GET raw.githubusercontent.com/pankoza2-pl/kapi2.0peys-malwares/main/png.exe

185.199.108.133

200 OK

515 kB

URL User Request GET HTTPS

raw.githubusercontent.com/pankoza2-pl/kapi2.0peys-malwares/main/png.exe

IP / ASN

185.199.108.133

#54113 FASTLY

Requested byN/A

Resource Info

File typePE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections

First Seen2023-12-06

Last Seen2025-05-15

Times Seen41

Size515 kB (514560 bytes)

MD593b879a5817788358a28e6f615c89970

SHA11f9dd30bd0f91cd47a6aa456401e3fc4e12f6e28

SHA2565901f42666b910e070c4289dcfd3724aab224e4b8a28a46aa6aa11bee0a3bcad

Certificate Info

IssuerDigiCert Inc

Subject*.github.io

Fingerprint97:D8:C5:70:0F:12:24:6C:88:BC:FA:06:7E:8C:A7:4D:A8:62:67:28

ValidityFri, 15 Mar 2024 00:00:00 GMT - Fri, 14 Mar 2025 23:59:59 GMT

Detections

Analyzer	Verdict	Alert
VirusTotal	malicious	VirusTotal - Scan result 52/71

HTTP Headers

GET /pankoza2-pl/kapi2.0peys-malwares/main/png.exe HTTP/1.1
Host: raw.githubusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
cache-control: max-age=300
content-security-policy: default-src 'none'; style-src 'unsafe-inline'; sandbox
content-type: application/octet-stream
etag: W/"3c54d85dca663691da67c58c1dec3b5c6b0584771d8dde3ad1547688f3d85104"
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
x-frame-options: deny
x-xss-protection: 1; mode=block
x-github-request-id: 2969:36237E:2A3AB5F:2C650AC:66B2FA75
accept-ranges: bytes
date: Wed, 07 Aug 2024 04:39:18 GMT
via: 1.1 varnish
x-served-by: cache-hel1410022-HEL
x-cache: MISS
x-cache-hits: 0
x-timer: S1723005558.051206,VS0,VE246
vary: Authorization,Accept-Encoding,Origin
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
x-fastly-request-id: d1760875efb1f7e4dddb6a9cdf5ea28249229fd8
expires: Wed, 07 Aug 2024 04:44:18 GMT
source-age: 0
content-length: 514560
X-Firefox-Spdy: h2

r10.o.lencr.org/

23.36.76.226

504 B

URL HTTP

r10.o.lencr.org/

IP / ASN

23.36.76.226

#20940 Akamai International B.V.

Requested byN/A

Resource Info

File typedata

First Seen2024-08-06

Last Seen2024-08-19

Times Seen30072

Size504 B (504 bytes)

MD5460334cc4e5b7d0e9bae1a2db2ad27cd

SHA1b0a331b5252d61b68e687dc25581842a360aac4f

SHA2568e85f0944ea44f26c441f73cd791e0cf50936b0278733f5af7305e594372df58

HTTP Headers

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "8E85F0944EA44F26C441F73CD791E0CF50936B0278733F5AF7305E594372DF58"
Last-Modified: Tue, 06 Aug 2024 06:58:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8172
Expires: Wed, 07 Aug 2024 06:55:31 GMT
Date: Wed, 07 Aug 2024 04:39:19 GMT
Connection: keep-alive

r10.o.lencr.org/

23.36.76.226

504 B

URL HTTP

r10.o.lencr.org/

IP / ASN

23.36.76.226

#20940 Akamai International B.V.

Requested byN/A

Resource Info

File typedata

First Seen2024-08-06

Last Seen2024-08-19

Times Seen30072

Size504 B (504 bytes)

MD5460334cc4e5b7d0e9bae1a2db2ad27cd

SHA1b0a331b5252d61b68e687dc25581842a360aac4f

SHA2568e85f0944ea44f26c441f73cd791e0cf50936b0278733f5af7305e594372df58

HTTP Headers

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "8E85F0944EA44F26C441F73CD791E0CF50936B0278733F5AF7305E594372DF58"
Last-Modified: Tue, 06 Aug 2024 06:58:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8172
Expires: Wed, 07 Aug 2024 06:55:31 GMT
Date: Wed, 07 Aug 2024 04:39:19 GMT
Connection: keep-alive

r10.o.lencr.org/

23.36.76.226

504 B

URL HTTP

r10.o.lencr.org/

IP / ASN

23.36.76.226

#20940 Akamai International B.V.

Requested byN/A

Resource Info

File typedata

First Seen2024-08-06

Last Seen2024-08-19

Times Seen30072

Size504 B (504 bytes)

MD5460334cc4e5b7d0e9bae1a2db2ad27cd

SHA1b0a331b5252d61b68e687dc25581842a360aac4f

SHA2568e85f0944ea44f26c441f73cd791e0cf50936b0278733f5af7305e594372df58

HTTP Headers

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "8E85F0944EA44F26C441F73CD791E0CF50936B0278733F5AF7305E594372DF58"
Last-Modified: Tue, 06 Aug 2024 06:58:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8172
Expires: Wed, 07 Aug 2024 06:55:31 GMT
Date: Wed, 07 Aug 2024 04:39:19 GMT
Connection: keep-alive