Contacted IPs
Network Port Distribution
| Name | IP | Country | ASN | ASN Name | Trigger Process Type |
|---|---|---|---|---|---|
| 8.8.4.4 | 15169 | Google LLC | Malware Process | ||
| 8.8.8.8 | United States | 15169 | Google LLC | Malware Process | |
| 23.200.3.7 | 20940 | Akamai Technologies, Inc. | Malware Process | ||
| Malware Process |
HTTP Packets
| Host | Port | Method | Version | User Agent | Count | Call Time During Execution(Sec) |
|---|
DNS Queries/Answers
| Request | Type |
|---|---|
| 5isohu.com | A |
| www.msftncsi.com | A |
TCP Packets
| Call Time During Execution(sec) | Source IP | Dest IP | Dest Port |
|---|
UDP Packets
| Call Time During Execution(sec) | Source IP | Dest IP | Dest Port |
|---|---|---|---|
| 3.24916386604 | Sandbox | 224.0.0.252 | 5355 |
| 3.25141382217 | Sandbox | 224.0.0.252 | 5355 |
| 3.25689601898 | Sandbox | 239.255.255.250 | 3702 |
| 3.31956887245 | Sandbox | 192.168.56.255 | 137 |
| 4.26933193207 | Sandbox | 224.0.0.252 | 5355 |
| 5.99251198769 | Sandbox | 224.0.0.252 | 5355 |
| 6.08753395081 | Sandbox | 224.0.0.252 | 5355 |
| 7.19613695145 | Sandbox | 8.8.4.4 | 53 |
| 8.19415998459 | Sandbox | 8.8.8.8 | 53 |
| 8.72635889053 | Sandbox | 8.8.4.4 | 53 |
| 9.72626495361 | Sandbox | 8.8.8.8 | 53 |