Network Analysis
| Name | Response | Post-Analysis Lookup |
|---|---|---|
| No hosts contacted. | ||
- TCP Requests
POST
200
http://45.9.74.80/0bjdn2Z/index.php
REQUEST
RESPONSE
BODY
POST /0bjdn2Z/index.php HTTP/1.1
Content-Type: application/x-www-form-urlencoded
Host: 45.9.74.80
Content-Length: 90
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Tue, 01 Aug 2023 07:16:03 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
GET
200
http://45.9.74.80/setup.exe
REQUEST
RESPONSE
BODY
GET /setup.exe HTTP/1.1
Host: 45.9.74.80
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Tue, 01 Aug 2023 07:16:03 GMT
Content-Type: application/octet-stream
Content-Length: 304640
Last-Modified: Sun, 30 Jul 2023 19:48:19 GMT
Connection: keep-alive
ETag: "64c6be83-4a600"
Accept-Ranges: bytes
POST
200
http://45.9.74.80/0bjdn2Z/index.php
REQUEST
RESPONSE
BODY
POST /0bjdn2Z/index.php HTTP/1.1
Content-Type: application/x-www-form-urlencoded
Host: 45.9.74.80
Content-Length: 31
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Tue, 01 Aug 2023 07:16:05 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
GET
200
http://45.9.74.80/toolspub2.exe
REQUEST
RESPONSE
BODY
GET /toolspub2.exe HTTP/1.1
Host: 45.9.74.80
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Tue, 01 Aug 2023 07:16:05 GMT
Content-Type: application/octet-stream
Content-Length: 235008
Last-Modified: Sun, 30 Jul 2023 19:48:26 GMT
Connection: keep-alive
ETag: "64c6be8a-39600"
Accept-Ranges: bytes
POST
200
http://45.9.74.80/0bjdn2Z/index.php
REQUEST
RESPONSE
BODY
POST /0bjdn2Z/index.php HTTP/1.1
Content-Type: application/x-www-form-urlencoded
Host: 45.9.74.80
Content-Length: 31
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Tue, 01 Aug 2023 07:16:07 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
GET
200
http://45.9.74.80/2cba948feb9c53fce4409f0079aec61c.exe
REQUEST
RESPONSE
BODY
GET /2cba948feb9c53fce4409f0079aec61c.exe HTTP/1.1
Host: 45.9.74.80
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Tue, 01 Aug 2023 07:16:07 GMT
Content-Type: application/octet-stream
Content-Length: 4410744
Last-Modified: Sun, 30 Jul 2023 19:42:19 GMT
Connection: keep-alive
ETag: "64c6bd1b-434d78"
Accept-Ranges: bytes
POST
200
http://45.9.74.80/0bjdn2Z/index.php
REQUEST
RESPONSE
BODY
POST /0bjdn2Z/index.php HTTP/1.1
Content-Type: application/x-www-form-urlencoded
Host: 45.9.74.80
Content-Length: 31
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Tue, 01 Aug 2023 07:16:17 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
ICMP traffic
No ICMP traffic performed.
IRC traffic
No IRC requests performed.
Suricata Alerts
Suricata TLS
No Suricata TLS
Snort Alerts
No Snort Alerts