Analysis

Category Package Started Completed Duration Log
PCAP 2020-03-11 22:02:52 2020-03-11 22:02:52 0 seconds Show Log

    

MalScore

0.0

Benign


Signatures

No signatures

Hosts

Direct IP Country Name
Y 86.59.21.38 [VT] Austria

DNS

No domains contacted.


Hosts

Direct IP Country Name
Y 86.59.21.38 [VT] Austria

TCP

Source Source Port Destination Destination Port
10.41.34.112 63322 86.59.21.38 443
10.41.34.112 63327 86.59.21.38 443
10.41.34.112 63332 86.59.21.38 443

UDP

No UDP connections recorded.

DNS

No domains contacted.

HTTP Requests

No HTTP requests performed.

SMTP traffic

No SMTP traffic performed.

IRC traffic

No IRC requests performed.

ICMP traffic

No ICMP traffic performed.

CIF Results

No CIF Results

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

Suricata HTTP

No Suricata HTTP

Sorry! No dropped Suricata Extracted files.

JA3

No JA3 hashes found.

Sorry! No dropped files.
Sorry! No CAPE files.
Sorry! No process dumps.

Comments



No comments posted

Processing ( 0.043 seconds )

  • 0.02 CAPE
  • 0.015 NetworkAnalysis
  • 0.007 AnalysisInfo
  • 0.001 Debug

Signatures ( 0.094 seconds )

  • 0.015 ransomware_files
  • 0.011 antiav_detectreg
  • 0.006 persistence_autorun
  • 0.006 infostealer_ftp
  • 0.006 ransomware_extensions
  • 0.004 antiav_detectfile
  • 0.004 infostealer_im
  • 0.003 browser_security
  • 0.003 disables_browser_warn
  • 0.003 infostealer_bitcoin
  • 0.003 infostealer_mail
  • 0.002 tinba_behavior
  • 0.002 rat_nanocore
  • 0.002 cerber_behavior
  • 0.002 antianalysis_detectfile
  • 0.002 antianalysis_detectreg
  • 0.002 antivm_vbox_files
  • 0.002 geodo_banking_trojan
  • 0.002 ie_martian_children
  • 0.002 masquerade_process_name
  • 0.001 betabot_behavior
  • 0.001 antivm_vbox_keys
  • 0.001 antivm_vmware_keys
  • 0.001 banker_zeus_mutex
  • 0.001 bot_drive
  • 0.001 bot_drive2
  • 0.001 browser_addon
  • 0.001 disables_system_restore
  • 0.001 modify_security_center_warnings
  • 0.001 modify_uac_prompt
  • 0.001 persistence_shim_database
  • 0.001 stealth_hiddenreg

Reporting ( 0.0 seconds )

Task ID 130419
Mongo ID 5e69600fd987211e5cf23f86
Cuckoo release 1.3-CAPE
Delete