CapTipper

Analysis Info

PCAP File Analysis Time CapTipper Version Traffic Time
/opt/Malware-Project/BigDataset/Scenarios/CTU-Malware-Capture-Botnet-238-1//2017-3-30_win6.pcap 03/30/17 18:06:22 0.2 b10 09/18/80 10:15:40

Flow View

checkip.amazonaws.comgrandstand.temp.swtest.ruwww.download.windowsupdate.commyexternalip.comClient

Client Details

IP192.168.1.116
MAC08:00:27:5e:a3:27
USER-AGENTXmaker

Conversations

myexternalip.com    (78.47.139.102:80)
IDURIRESPONSE TYPEFILENAMERESPONSE CODEMAGICSIZETIME
0/rawtext/plainraw200 OKTEXT13.0 B09/18/80 10:15:40

www.download.windowsupdate.com    (8.253.143.249:80)
IDURIRESPONSE TYPEFILENAMERESPONSE CODEMAGICSIZETIME
1/msdownload/update/v3/static/trustedr/en/authrootstl.cabapplication/octet-streamauthrootstl.cab200 OKCAB49.7 KB06/17/89 19:39:26

grandstand.temp.swtest.ru    (77.222.56.178:80)
IDURIRESPONSE TYPEFILENAMERESPONSE CODEMAGICSIZETIME
2/316.binapplication/octet-stream316.bin200 OKBINARY403.2 KB01/26/18 05:20:19
4/317.binapplication/octet-stream317.bin200 OKBINARY404.7 KB08/16/02 16:57:40
5/318.binapplication/octet-stream318.bin200 OKBINARY401.2 KB01/20/49 03:26:37
6/319.binapplication/octet-stream319.bin200 OKBINARY430.2 KB08/28/53 01:57:48

checkip.amazonaws.com    (50.19.97.123:80)
IDURIRESPONSE TYPEFILENAMERESPONSE CODEMAGICSIZETIME
3/3.html200 OKTEXT13.0 B02/03/18 12:23:26