Home
Result
Report
Detail Analysis

Network Analysis

Download pcap

Hosts 2 DNS 1 TCP 3 UDP 10 HTTP(S) 3 ICMP 0 IRC 0 Suricata Snort

IP Address	Status	Action
164.124.101.2	Active	Moloch
185.212.131.111	Active	Moloch

Name	Response	Post-Analysis Lookup
gccorps.com	A 5.2.75.32 A 185.212.131.111	5.2.75.32

TCP Requests

UDP Requests

POST 404 http://gccorps.com/chief/kev/fre.php

REQUEST

POST /chief/kev/fre.php HTTP/1.0 User-Agent: Mozilla/4.08 (Charon; Inferno) Host: gccorps.com Accept: */* Content-Type: application/octet-stream Content-Encoding: binary Content-Key: 9F6DDFBE Content-Length: 186 Connection: close

RESPONSE

HTTP/1.1 404 Not Found Server: nginx Date: Tue, 13 Apr 2021 07:18:20 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 15 Connection: close Status: 404 Not Found

BODY

request response

plaintext hex

16 bytes 32 bytes 48 bytes 64 bytes

POST 404 http://gccorps.com/chief/kev/fre.php

REQUEST

RESPONSE

HTTP/1.1 404 Not Found Server: nginx Date: Tue, 13 Apr 2021 07:18:21 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 15 Connection: close Status: 404 Not Found

BODY

request response

plaintext hex

16 bytes 32 bytes 48 bytes 64 bytes

POST 404 http://gccorps.com/chief/kev/fre.php

REQUEST

RESPONSE

HTTP/1.1 404 Not Found Server: nginx Date: Tue, 13 Apr 2021 07:18:22 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 23 Connection: close Status: 404 Not Found

BODY

request response

plaintext hex

16 bytes 32 bytes 48 bytes 64 bytes

ICMP traffic

No ICMP traffic performed.

IRC traffic

No IRC requests performed.

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

Snort Alerts

No Snort Alerts