Network Analysis
| Name | Response | Post-Analysis Lookup |
|---|---|---|
| pastebin.com | 172.67.19.24 |
GET
200
https://pastebin.com/raw/YpJeSRBC
REQUEST
RESPONSE
BODY
| : | GET /raw/YpJeSRBC HTTP/1.1 |
| Host: | pastebin.com |
| Connection: | Keep-Alive |
| : | HTTP/1.1 200 OK |
| Date: | Mon, 27 Jan 2025 07 |
| Content-Type: | text/plain; charset=utf-8 |
| Transfer-Encoding: | chunked |
| Connection: | keep-alive |
| x-frame-options: | DENY |
| x-content-type-options: | nosniff |
| x-xss-protection: | 1;mode=block |
| cache-control: | public, max-age=1801 |
| CF-Cache-Status: | EXPIRED |
| Last-Modified: | Mon, 27 Jan 2025 07 |
| Server: | cloudflare |
| CF-RAY: | 908719922fa129e0-FUK |
GET
200
http://185.215.113.51/xmrig.exe
REQUEST
RESPONSE
BODY
| : | GET /xmrig.exe HTTP/1.1 |
| Host: | 185.215.113.51 |
| Connection: | Keep-Alive |
| : | HTTP/1.1 200 OK |
| Server: | nginx/1.18.0 (Ubuntu) |
| Date: | Mon, 27 Jan 2025 07 |
| Content-Type: | application/octet-stream |
| Content-Length: | 8251392 |
| Last-Modified: | Wed, 15 Jan 2025 19 |
| Connection: | keep-alive |
| ETag: | "678808cd-7de800" |
| Accept-Ranges: | bytes |
GET
200
http://185.215.113.51/WinRing0x64.sys
REQUEST
RESPONSE
BODY
| : | GET /WinRing0x64.sys HTTP/1.1 |
| Host: | 185.215.113.51 |
| Connection: | Keep-Alive |
| : | HTTP/1.1 200 OK |
| Server: | nginx/1.18.0 (Ubuntu) |
| Date: | Mon, 27 Jan 2025 07 |
| Content-Type: | application/octet-stream |
| Content-Length: | 14544 |
| Last-Modified: | Wed, 15 Jan 2025 19 |
| Connection: | keep-alive |
| ETag: | "678808cc-38d0" |
| Accept-Ranges: | bytes |
ICMP traffic
No ICMP traffic performed.
IRC traffic
No IRC requests performed.
Suricata Alerts
No Suricata Alerts
Suricata TLS
No Suricata TLS
Snort Alerts
No Snort Alerts
