popup
NetWork | ZeroBOX
  1. Home
  2. Result
  3. Report
  4. Detail Analysis

Network Analysis

Download pcap
Hosts 7 DNS 10 TCP 6 UDP 18 HTTP(S) 6 ICMP 0 IRC 0 Suricata Snort
IP Address Status Action
107.187.86.150 Active Moloch
112.121.161.235 Active Moloch
147.255.132.172 Active Moloch
164.124.101.2 Active Moloch
217.70.184.50 Active Moloch
34.102.136.180 Active Moloch
37.123.118.150 Active Moloch
GET 403 http://www.krallechols.quest/scb0/?GzuD=XHAF2WnsVWh3Xtb4trV3Cr1d9KXYf9+Xd4yyhdgFxkN4v728EEpujlORpbln8yXvxRQ7qyh6&AlB=O2MxhlsHi
REQUEST
RESPONSE
BODY 

            

        


    



        
            

    
        GET
        
        301
        http://www.jyh8882.com/scb0/?GzuD=bwd76U6LKZBpNEQppVR7cMNK+MMlT0YfxlJ4bO8ndhDvr8vJL26qIqHfcLJfN8ylP/phNSmM&AlB=O2MxhlsHi
        
    
    


        

            

                
 REQUEST

                

                    
                    
                

            

            

                
 RESPONSE

                

                    
                    
                

            

        


        

            

                 BODY
                
            

            

                

            

        


    



        
            

    
        GET
        
        403
        http://www.fearlessthread.com/scb0/?GzuD=e+prZ6QI+RKMJqROSGOehneQQaNYgX6sD4NIoSlaRQr2yLMWPyCBcsmU1B9QH+Vq/gKOdjUH&AlB=O2MxhlsHi
        
    
    


        

            

                
 REQUEST

                

                    
                    
                

            

            

                
 RESPONSE

                

                    
                    
                

            

        


        

            

                 BODY
                
            

            

                

            

        


    



        
            

    
        GET
        
        404
        http://www.floridawp.com/scb0/?GzuD=9/BqtxNJhSE/jnEmhw/jJ2i6+zR3ejBZmh2LifaRE3cbasx521HSBP9EZz5Y1ayCoextGFjB&AlB=O2MxhlsHi
        
    
    


        

            

                
 REQUEST

                

                    
                    
                

            

            

                
 RESPONSE

                

                    
                    
                

            

        


        

            

                 BODY
                
            

            

                

            

        


    



        
            

    
        GET
        
        404
        http://www.medchemic.com/scb0/?GzuD=rH1WwaW1yHBAvxkBaGNiAvQbWXUrp1RT/W1FLLKV2kI7heGaZanJJSmQIo3vE23qZDCeIbu+&AlB=O2MxhlsHi
        
    
    


        

            

                
 REQUEST

                

                    
                    
                

            

            

                
 RESPONSE

                

                    
                    
                

            

        


        

            

                 BODY
                
            

            

                

            

        


    



        
            

    
        GET
        
        200
        http://www.lafabriqueabeille.com/scb0/?GzuD=Fq2LCo+OmuFI0F6UFf6oGUX4emiKH+nbJ+jp6lKcU3kbPt44QMZnfh9LthJX8Ei6b12Ppx2P&AlB=O2MxhlsHi
        
    
    


        

            

                
 REQUEST

                

                    
                    
                

            

            

                
 RESPONSE

                

                    
                    
                

            

        


        

            

                 BODY
                
            

            

                

            

        


    



        
	




                            
ICMP traffic



No ICMP traffic performed.



                            
IRC traffic



No IRC requests performed.



                            
Suricata Alerts


    

        

            Flow
            SID
            Signature
            Category
        

        
        

            
                TCP
                192.168.56.103:49167 ->
                34.102.136.180:80
            
            2031412
            ET MALWARE FormBook CnC Checkin (GET)
            Malware Command and Control Activity Detected
        

        
        

            
                TCP
                192.168.56.103:49167 ->
                34.102.136.180:80
            
            2031449
            ET MALWARE FormBook CnC Checkin (GET)
            Malware Command and Control Activity Detected
        

        
        

            
                TCP
                192.168.56.103:49167 ->
                34.102.136.180:80
            
            2031453
            ET MALWARE FormBook CnC Checkin (GET)
            Malware Command and Control Activity Detected
        

        
        

            
                TCP
                192.168.56.103:49169 ->
                147.255.132.172:80
            
            2031412
            ET MALWARE FormBook CnC Checkin (GET)
            Malware Command and Control Activity Detected
        

        
        

            
                TCP
                192.168.56.103:49169 ->
                147.255.132.172:80
            
            2031449
            ET MALWARE FormBook CnC Checkin (GET)
            Malware Command and Control Activity Detected
        

        
        

            
                TCP
                192.168.56.103:49169 ->
                147.255.132.172:80
            
            2031453
            ET MALWARE FormBook CnC Checkin (GET)
            Malware Command and Control Activity Detected
        

        
        

            
                TCP
                192.168.56.103:49168 ->
                107.187.86.150:80
            
            2031412
            ET MALWARE FormBook CnC Checkin (GET)
            Malware Command and Control Activity Detected
        

        
        

            
                TCP
                192.168.56.103:49168 ->
                107.187.86.150:80
            
            2031449
            ET MALWARE FormBook CnC Checkin (GET)
            Malware Command and Control Activity Detected
        

        
        

            
                TCP
                192.168.56.103:49168 ->
                107.187.86.150:80
            
            2031453
            ET MALWARE FormBook CnC Checkin (GET)
            Malware Command and Control Activity Detected
        

        
        

            
                TCP
                192.168.56.103:49170 ->
                217.70.184.50:80
            
            2031412
            ET MALWARE FormBook CnC Checkin (GET)
            Malware Command and Control Activity Detected
        

        
        

            
                TCP
                192.168.56.103:49170 ->
                217.70.184.50:80
            
            2031449
            ET MALWARE FormBook CnC Checkin (GET)
            Malware Command and Control Activity Detected
        

        
        

            
                TCP
                192.168.56.103:49170 ->
                217.70.184.50:80
            
            2031453
            ET MALWARE FormBook CnC Checkin (GET)
            Malware Command and Control Activity Detected
        

        
        

            
                TCP
                192.168.56.103:49166 ->
                112.121.161.235:80
            
            2031412
            ET MALWARE FormBook CnC Checkin (GET)
            Malware Command and Control Activity Detected
        

        
        

            
                TCP
                192.168.56.103:49166 ->
                112.121.161.235:80
            
            2031449
            ET MALWARE FormBook CnC Checkin (GET)
            Malware Command and Control Activity Detected
        

        
        

            
                TCP
                192.168.56.103:49166 ->
                112.121.161.235:80
            
            2031453
            ET MALWARE FormBook CnC Checkin (GET)
            Malware Command and Control Activity Detected
        

        
        

            
                TCP
                192.168.56.103:49165 ->
                37.123.118.150:80
            
            2031412
            ET MALWARE FormBook CnC Checkin (GET)
            Malware Command and Control Activity Detected
        

        
        

            
                TCP
                192.168.56.103:49165 ->
                37.123.118.150:80
            
            2031449
            ET MALWARE FormBook CnC Checkin (GET)
            Malware Command and Control Activity Detected
        

        
        

            
                TCP
                192.168.56.103:49165 ->
                37.123.118.150:80
            
            2031453
            ET MALWARE FormBook CnC Checkin (GET)
            Malware Command and Control Activity Detected
        

        
    




Suricata TLS


    
No Suricata TLS




                            
Snort Alerts


    
No Snort Alerts