CapTipper Report

CapTipper

Analysis Info

PCAP File	Analysis Time	CapTipper Version	Traffic Time
/opt/Malware-Project/BigDataset/Scenarios/CTU-Malware-Capture-Botnet-192-1//2016-09-30_capture_win12.pcap	09/11/17 16:03:10	0.3 b13	09/11/99 18:39:12

Flow View

Client Details

IP	192.168.1.122
MAC	08:00:27:12:45:de

Conversations

rl.ammyy.com (176.56.184.37:80)

ID

URI

RESPONSE TYPE

FILENAME

RESPONSE CODE

MAGIC

SIZE

TIME

0

/

text/html

0.html

200 OK

TEXT

162.0 B

09/11/99 18:39:12

Download
SHA256	629820f9711d03911971d7dc8af609225fb87eef82e216c698a00d78d8880824
Referer
Magic	Inconclusive. Probably text (TEXT)
Request	POST / HTTP/1.1 Content-Type: application/x-www-form-urlencoded Host: rl.ammyy.com Content-Length: 190 Cache-Control: no-cache v=3.5&d=FeEEEIJnZVBz1IJAZUBoEH5o6OF6WVAe5hAe5hEr6QFfbGEr6Hit6hiq6EEE5REt5qEE6gyr4haw5HEe5EEr5H5t4hIo5hOuEEIEEEE1EGaQPbyFEEEEEEIEEEEr4hEETA2NUGF1OT2IPIBRQqFUOhFFPHWyORBH4S5vPRXK5uPHEEEFEEEEEE
Response Header	HTTP/1.1 200 OK Date: Mon, 26 Sep 2016 13:44:45 GMT Server: Apache/2.2.3 (CentOS) X-Powered-By: PHP/5.1.6 Content-Length: 162 Connection: close Content-Type: text/html
Response Peek (128 B)	RL--FeEEEEEw5tax5HSv5EEz6Qys5RIo5RAr4hIu5hiu6H5mMHEmMHEy5Lqz6Qys5RIo5hOs4hetMhOu5sqy5Gqy5HeqdHey4hIzMGyw4hSwMhOu5sqy5Gqy5HeqdHey...