Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

3

Static

static

1

1944504c03...22.elf

ubuntu-20.04-amd64

3

Analysis

  • max time kernel
    0s
  • max time network
    133s
  • platform
    ubuntu-20.04_amd64
  • resource
    ubuntu2004-amd64-20240221-en
  • resource tags

    arch:amd64arch:i386image:ubuntu2004-amd64-20240221-enkernel:5.4.0-169-genericlocale:en-usos:ubuntu-20.04-amd64system
  • submitted
    08/04/2024, 12:04 UTC

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    1944504c03f869a4410ddbae6de8a122.elf

  • Size

    4.6MB

  • MD5

    1944504c03f869a4410ddbae6de8a122

  • SHA1

    42b2cf93305f0c663190205f139226e90e666ce9

  • SHA256

    a51eb798cb4a79c2ec9a278e43039e4a753d33aa2b4fb90b88ec2316290da169

  • SHA512

    835eefc5f8d51fe34611658da925d1cde3a9f3791f9d8df180b591c27b976c3de27297fe35ebf3e3b2e6d0b34fb7e5274c6c1638c45c5fab1e4fa745e0e56005

  • SSDEEP

    49152:7n/dBkH21ZijK8yIyZ9GNSFgrnVQSGAggT9GXMHXQA6HfTIHeTAieyRK4KJx8Kws:z8W1ZijK8yIi9j8FGzoHeMivRBqqNV2

Score
3/10

Malware Config

Signatures

  • Enumerates kernel/hardware configuration 1 TTPs 1 IoCs

    Reads contents of /sys virtual filesystem to enumerate system information.

Processes

  • /tmp/1944504c03f869a4410ddbae6de8a122.elf
    /tmp/1944504c03f869a4410ddbae6de8a122.elf
    1⤵
    • Enumerates kernel/hardware configuration
    PID:1478

Network

  • flag-us
    DNS
    connectivity-check.ubuntu.com
    Remote address:
    1.1.1.1:53
    Request
    connectivity-check.ubuntu.com
    IN AAAA
    Response
    connectivity-check.ubuntu.com
    IN AAAA
    2620:2d:4000:1::98
    connectivity-check.ubuntu.com
    IN AAAA
    2001:67c:1562::24
    connectivity-check.ubuntu.com
    IN AAAA
    2001:67c:1562::23
    connectivity-check.ubuntu.com
    IN AAAA
    2620:2d:4002:1::197
    connectivity-check.ubuntu.com
    IN AAAA
    2620:2d:4000:1::2b
    connectivity-check.ubuntu.com
    IN AAAA
    2620:2d:4002:1::198
    connectivity-check.ubuntu.com
    IN AAAA
    2620:2d:4000:1::2a
    connectivity-check.ubuntu.com
    IN AAAA
    2620:2d:4002:1::196
    connectivity-check.ubuntu.com
    IN AAAA
    2620:2d:4000:1::23
    connectivity-check.ubuntu.com
    IN AAAA
    2620:2d:4000:1::97
    connectivity-check.ubuntu.com
    IN AAAA
    2620:2d:4000:1::96
    connectivity-check.ubuntu.com
    IN AAAA
    2620:2d:4000:1::22
  • flag-us
    DNS
    _http._tcp.security.ubuntu.com
    Remote address:
    1.1.1.1:53
    Request
    _http._tcp.security.ubuntu.com
    IN SRV
    Response
  • flag-us
    DNS
    _http._tcp.security.ubuntu.com
    Remote address:
    1.1.1.1:53
    Request
    _http._tcp.security.ubuntu.com
    IN SRV
    Response
  • flag-us
    DNS
    _https._tcp.deb.nodesource.com
    Remote address:
    1.1.1.1:53
    Request
    _https._tcp.deb.nodesource.com
    IN SRV
    Response
  • flag-us
    DNS
    _https._tcp.deb.nodesource.com
    Remote address:
    1.1.1.1:53
    Request
    _https._tcp.deb.nodesource.com
    IN SRV
    Response
  • flag-us
    DNS
    _http._tcp.nl.archive.ubuntu.com
    Remote address:
    1.1.1.1:53
    Request
    _http._tcp.nl.archive.ubuntu.com
    IN SRV
    Response
  • flag-us
    DNS
    _http._tcp.nl.archive.ubuntu.com
    Remote address:
    1.1.1.1:53
    Request
    _http._tcp.nl.archive.ubuntu.com
    IN SRV
    Response
  • flag-us
    DNS
    cdn.fwupd.org
    Remote address:
    1.1.1.1:53
    Request
    cdn.fwupd.org
    IN A
    Response
    cdn.fwupd.org
    IN CNAME
    dualstack.p2.shared.global.fastly.net
    dualstack.p2.shared.global.fastly.net
    IN A
    151.101.194.49
    dualstack.p2.shared.global.fastly.net
    IN A
    151.101.130.49
    dualstack.p2.shared.global.fastly.net
    IN A
    151.101.66.49
    dualstack.p2.shared.global.fastly.net
    IN A
    151.101.2.49
  • flag-us
    DNS
    cdn.fwupd.org
    Remote address:
    1.1.1.1:53
    Request
    cdn.fwupd.org
    IN AAAA
    Response
    cdn.fwupd.org
    IN CNAME
    dualstack.p2.shared.global.fastly.net
    dualstack.p2.shared.global.fastly.net
    IN AAAA
    2a04:4e42::561
    dualstack.p2.shared.global.fastly.net
    IN AAAA
    2a04:4e42:400::561
    dualstack.p2.shared.global.fastly.net
    IN AAAA
    2a04:4e42:200::561
    dualstack.p2.shared.global.fastly.net
    IN AAAA
    2a04:4e42:600::561
  • flag-us
    DNS
    security.ubuntu.com
    Remote address:
    1.1.1.1:53
    Request
    security.ubuntu.com
    IN A
    Response
    security.ubuntu.com
    IN A
    185.125.190.36
    security.ubuntu.com
    IN A
    91.189.91.81
    security.ubuntu.com
    IN A
    91.189.91.83
    security.ubuntu.com
    IN A
    91.189.91.82
    security.ubuntu.com
    IN A
    185.125.190.39
  • flag-us
    DNS
    security.ubuntu.com
    Remote address:
    1.1.1.1:53
    Request
    security.ubuntu.com
    IN AAAA
    Response
    security.ubuntu.com
    IN AAAA
    2620:2d:4002:1::102
    security.ubuntu.com
    IN AAAA
    2620:2d:4002:1::101
    security.ubuntu.com
    IN AAAA
    2620:2d:4000:1::16
    security.ubuntu.com
    IN AAAA
    2620:2d:4002:1::103
    security.ubuntu.com
    IN AAAA
    2620:2d:4000:1::19
  • flag-us
    DNS
    deb.nodesource.com
    Remote address:
    1.1.1.1:53
    Request
    deb.nodesource.com
    IN A
    Response
    deb.nodesource.com
    IN CNAME
    deb.nodesource.com.cdn.cloudflare.net
    deb.nodesource.com.cdn.cloudflare.net
    IN A
    104.22.5.26
    deb.nodesource.com.cdn.cloudflare.net
    IN A
    104.22.4.26
    deb.nodesource.com.cdn.cloudflare.net
    IN A
    172.67.10.205
  • flag-us
    DNS
    deb.nodesource.com
    Remote address:
    1.1.1.1:53
    Request
    deb.nodesource.com
    IN AAAA
    Response
    deb.nodesource.com
    IN CNAME
    deb.nodesource.com.cdn.cloudflare.net
    deb.nodesource.com.cdn.cloudflare.net
    IN AAAA
    2606:4700:10::6816:41a
    deb.nodesource.com.cdn.cloudflare.net
    IN AAAA
    2606:4700:10::6816:51a
    deb.nodesource.com.cdn.cloudflare.net
    IN AAAA
    2606:4700:10::ac43:acd
  • flag-us
    DNS
    nl.archive.ubuntu.com
    Remote address:
    1.1.1.1:53
    Request
    nl.archive.ubuntu.com
    IN A
    Response
    nl.archive.ubuntu.com
    IN CNAME
    ubuntuarchive.bit.nl
    ubuntuarchive.bit.nl
    IN CNAME
    ftp.bit.nl
    ftp.bit.nl
    IN A
    213.136.12.213
  • flag-us
    DNS
    nl.archive.ubuntu.com
    Remote address:
    1.1.1.1:53
    Request
    nl.archive.ubuntu.com
    IN AAAA
    Response
    nl.archive.ubuntu.com
    IN CNAME
    ubuntuarchive.bit.nl
    ubuntuarchive.bit.nl
    IN CNAME
    ftp.bit.nl
    ftp.bit.nl
    IN AAAA
    2001:7b8:3:37::21:3
  • flag-gb
    GET
    http://security.ubuntu.com/ubuntu/dists/focal-security/InRelease
    Remote address:
    185.125.190.36:80
    Request
    GET /ubuntu/dists/focal-security/InRelease HTTP/1.1
    Host: security.ubuntu.com
    Cache-Control: max-age=0
    Accept: text/*
    If-Modified-Since: Tue, 20 Feb 2024 21:08:46 GMT
    User-Agent: Debian APT-HTTP/1.3 (2.0.10) non-interactive
    Response
    HTTP/1.1 200 OK
    Date: Mon, 08 Apr 2024 12:04:30 GMT
    Server: Apache/2.4.29 (Ubuntu)
    Last-Modified: Fri, 05 Apr 2024 11:54:49 GMT
    ETag: "1bcaa-615581f7ef40f"
    Accept-Ranges: bytes
    Content-Length: 113834
    Cache-Control: max-age=0, s-maxage=3300, proxy-revalidate
    Expires: Mon, 08 Apr 2024 12:04:30 GMT
  • flag-gb
    GET
    http://security.ubuntu.com/ubuntu/dists/focal-security/main/binary-amd64/by-hash/SHA256/f6bf9235e1e3cdb6316f26f9808cea32e5809f68921d6b0ab9c3afd2e68b55f4
    Remote address:
    185.125.190.36:80
    Request
    GET /ubuntu/dists/focal-security/main/binary-amd64/by-hash/SHA256/f6bf9235e1e3cdb6316f26f9808cea32e5809f68921d6b0ab9c3afd2e68b55f4 HTTP/1.1
    Host: security.ubuntu.com
    Cache-Control: max-age=0
    Accept: text/*
    User-Agent: Debian APT-HTTP/1.3 (2.0.10) non-interactive
    Response
    HTTP/1.1 200 OK
    Date: Mon, 08 Apr 2024 12:04:31 GMT
    Server: Apache/2.4.29 (Ubuntu)
    Last-Modified: Thu, 04 Apr 2024 19:15:34 GMT
    ETag: "2b0a28-6154a29dc9c03"
    Accept-Ranges: bytes
    Content-Length: 2820648
  • flag-nl
    GET
    http://nl.archive.ubuntu.com/ubuntu/dists/focal/InRelease
    Remote address:
    213.136.12.213:80
    Request
    GET /ubuntu/dists/focal/InRelease HTTP/1.1
    Host: nl.archive.ubuntu.com
    Cache-Control: max-age=0
    Accept: text/*
    If-Modified-Since: Thu, 23 Apr 2020 17:34:17 GMT
    User-Agent: Debian APT-HTTP/1.3 (2.0.10) non-interactive
    Response
    HTTP/1.1 304 Not Modified
    Date: Mon, 08 Apr 2024 12:04:30 GMT
    Server: Apache/2.4.52 (Ubuntu)
    Last-Modified: Thu, 23 Apr 2020 17:34:17 GMT
    ETag: "40abc-5a3f8a874d840"
    Accept-Ranges: bytes
    Connection: close
  • flag-nl
    GET
    http://nl.archive.ubuntu.com/ubuntu/dists/focal-updates/InRelease
    Remote address:
    213.136.12.213:80
    Request
    GET /ubuntu/dists/focal-updates/InRelease HTTP/1.1
    Host: nl.archive.ubuntu.com
    Cache-Control: max-age=0
    Accept: text/*
    If-Modified-Since: Wed, 21 Feb 2024 09:34:49 GMT
    User-Agent: Debian APT-HTTP/1.3 (2.0.10) non-interactive
    Response
    HTTP/1.1 200 OK
    Date: Mon, 08 Apr 2024 12:04:30 GMT
    Server: Apache/2.4.52 (Ubuntu)
    Last-Modified: Mon, 08 Apr 2024 08:30:45 GMT
    ETag: "1bca8-615919f2a15ff"
    Accept-Ranges: bytes
    Content-Length: 113832
    Connection: close
  • flag-us
    DNS
    _https._tcp.motd.ubuntu.com
    Remote address:
    1.1.1.1:53
    Request
    _https._tcp.motd.ubuntu.com
    IN SRV
    Response
  • flag-us
    DNS
    _https._tcp.motd.ubuntu.com
    Remote address:
    1.1.1.1:53
    Request
    _https._tcp.motd.ubuntu.com
    IN SRV
    Response
  • flag-us
    DNS
    motd.ubuntu.com
    Remote address:
    1.1.1.1:53
    Request
    motd.ubuntu.com
    IN A
    Response
    motd.ubuntu.com
    IN A
    54.217.10.153
    motd.ubuntu.com
    IN A
    54.171.230.55
    motd.ubuntu.com
    IN A
    34.254.182.186
    motd.ubuntu.com
    IN A
    54.247.62.1
    motd.ubuntu.com
    IN A
    34.243.160.129
  • flag-us
    DNS
    motd.ubuntu.com
    Remote address:
    1.1.1.1:53
    Request
    motd.ubuntu.com
    IN AAAA
    Response
    motd.ubuntu.com
    IN AAAA
    2a05:d018:91c:3200:2846:99fb:81b6:1e11
    motd.ubuntu.com
    IN AAAA
    2a05:d018:91c:3200:5e0d:21a9:26ca:90b5
    motd.ubuntu.com
    IN AAAA
    2a05:d018:91c:3200:c8f:1a06:a2dd:450f
    motd.ubuntu.com
    IN AAAA
    2a05:d018:91c:3200:d8b6:37bc:63f9:703c
    motd.ubuntu.com
    IN AAAA
    2a05:d018:91c:3200:c887:2f22:290f:a7c
  • flag-nl
    GET
    http://nl.archive.ubuntu.com/ubuntu/dists/focal-backports/InRelease
    Remote address:
    213.136.12.213:80
    Request
    GET /ubuntu/dists/focal-backports/InRelease HTTP/1.1
    Host: nl.archive.ubuntu.com
    Cache-Control: max-age=0
    Accept: text/*
    If-Modified-Since: Mon, 13 Nov 2023 00:36:11 GMT
    User-Agent: Debian APT-HTTP/1.3 (2.0.10) non-interactive
    Response
    HTTP/1.1 304 Not Modified
    Date: Mon, 08 Apr 2024 12:04:31 GMT
    Server: Apache/2.4.52 (Ubuntu)
    Last-Modified: Mon, 13 Nov 2023 00:36:11 GMT
    ETag: "1a79f-609fddb59b8f1"
    Accept-Ranges: bytes
    Connection: close
  • flag-us
    DNS
    _https._tcp.esm.ubuntu.com
    Remote address:
    1.1.1.1:53
    Request
    _https._tcp.esm.ubuntu.com
    IN SRV
    Response
  • flag-us
    DNS
    _https._tcp.esm.ubuntu.com
    Remote address:
    1.1.1.1:53
    Request
    _https._tcp.esm.ubuntu.com
    IN SRV
    Response
  • flag-us
    DNS
    esm.ubuntu.com
    Remote address:
    1.1.1.1:53
    Request
    esm.ubuntu.com
    IN A
    Response
    esm.ubuntu.com
    IN A
    185.125.190.75
    esm.ubuntu.com
    IN A
    91.189.91.46
    esm.ubuntu.com
    IN A
    185.125.190.23
    esm.ubuntu.com
    IN A
    91.189.91.47
    esm.ubuntu.com
    IN A
    185.125.190.24
  • flag-us
    DNS
    esm.ubuntu.com
    Remote address:
    1.1.1.1:53
    Request
    esm.ubuntu.com
    IN AAAA
    Response
    esm.ubuntu.com
    IN AAAA
    2620:2d:4000:1::30
    esm.ubuntu.com
    IN AAAA
    2620:2d:4000:1::2f
    esm.ubuntu.com
    IN AAAA
    2001:67c:1562::21
    esm.ubuntu.com
    IN AAAA
    2001:67c:1562::22
    esm.ubuntu.com
    IN AAAA
    2620:2d:4000:1::2e
  • flag-gb
    GET
    http://security.ubuntu.com/ubuntu/dists/focal-security/multiverse/binary-amd64/by-hash/SHA256/5b3f58234035b2e6b31c418a569b477ce4dc087ac52b49df3fe3a8106d374617
    Remote address:
    185.125.190.36:80
    Request
    GET /ubuntu/dists/focal-security/multiverse/binary-amd64/by-hash/SHA256/5b3f58234035b2e6b31c418a569b477ce4dc087ac52b49df3fe3a8106d374617 HTTP/1.1
    Host: security.ubuntu.com
    Cache-Control: max-age=0
    Accept: text/*
    User-Agent: Debian APT-HTTP/1.3 (2.0.10) non-interactive
    Response
    HTTP/1.1 200 OK
    Date: Mon, 08 Apr 2024 12:04:33 GMT
    Server: Apache/2.4.29 (Ubuntu)
    Last-Modified: Tue, 27 Feb 2024 15:04:32 GMT
    ETag: "5d3c-6125e57fce723"
    Accept-Ranges: bytes
    Content-Length: 23868
  • flag-nl
    GET
    http://nl.archive.ubuntu.com/ubuntu/dists/focal-updates/main/binary-amd64/by-hash/SHA256/a294b0f6104d8f1b331e3ea3a33bb5feb8548759bb5fa8848d624b35cdaf6626
    Remote address:
    213.136.12.213:80
    Request
    GET /ubuntu/dists/focal-updates/main/binary-amd64/by-hash/SHA256/a294b0f6104d8f1b331e3ea3a33bb5feb8548759bb5fa8848d624b35cdaf6626 HTTP/1.1
    Host: nl.archive.ubuntu.com
    Cache-Control: max-age=0
    Accept: text/*
    User-Agent: Debian APT-HTTP/1.3 (2.0.10) non-interactive
    Response
    HTTP/1.1 200 OK
    Date: Mon, 08 Apr 2024 12:04:33 GMT
    Server: Apache/2.4.52 (Ubuntu)
    Last-Modified: Mon, 08 Apr 2024 04:57:23 GMT
    ETag: "318b58-6158ea41b7f70"
    Accept-Ranges: bytes
    Content-Length: 3246936
    Connection: close
  • flag-nl
    GET
    http://nl.archive.ubuntu.com/ubuntu/dists/focal-updates/main/binary-i386/by-hash/SHA256/50870ea1dc6a7c4b10205228012c54ddf9d73fea8427b3ffefa0fefd30aedb9c
    Remote address:
    213.136.12.213:80
    Request
    GET /ubuntu/dists/focal-updates/main/binary-i386/by-hash/SHA256/50870ea1dc6a7c4b10205228012c54ddf9d73fea8427b3ffefa0fefd30aedb9c HTTP/1.1
    Host: nl.archive.ubuntu.com
    Cache-Control: max-age=0
    Accept: text/*
    User-Agent: Debian APT-HTTP/1.3 (2.0.10) non-interactive
    Response
    HTTP/1.1 200 OK
    Date: Mon, 08 Apr 2024 12:04:43 GMT
    Server: Apache/2.4.52 (Ubuntu)
    Last-Modified: Mon, 08 Apr 2024 04:57:23 GMT
    ETag: "ea388-6158ea41b7f70"
    Accept-Ranges: bytes
    Content-Length: 959368
    Connection: close
  • flag-nl
    GET
    http://nl.archive.ubuntu.com/ubuntu/dists/focal-updates/main/i18n/by-hash/SHA256/e32908298b032e67e638ae0befd7b31c85adb4627705bea5c84699dbaba918bc
    Remote address:
    213.136.12.213:80
    Request
    GET /ubuntu/dists/focal-updates/main/i18n/by-hash/SHA256/e32908298b032e67e638ae0befd7b31c85adb4627705bea5c84699dbaba918bc HTTP/1.1
    Host: nl.archive.ubuntu.com
    Cache-Control: max-age=0
    Accept: text/*
    User-Agent: Debian APT-HTTP/1.3 (2.0.10) non-interactive
    Response
    HTTP/1.1 200 OK
    Date: Mon, 08 Apr 2024 12:04:45 GMT
    Server: Apache/2.4.52 (Ubuntu)
    Last-Modified: Mon, 08 Apr 2024 04:57:23 GMT
    ETag: "7d424-6158ea41b7f70"
    Accept-Ranges: bytes
    Content-Length: 513060
    Connection: close
  • flag-nl
    GET
    http://nl.archive.ubuntu.com/ubuntu/dists/focal-updates/restricted/binary-amd64/by-hash/SHA256/ace6e0e3e6ebc75a1620cc6f576e77597fe557afdec957a9a75351c4168d21b3
    Remote address:
    213.136.12.213:80
    Request
    GET /ubuntu/dists/focal-updates/restricted/binary-amd64/by-hash/SHA256/ace6e0e3e6ebc75a1620cc6f576e77597fe557afdec957a9a75351c4168d21b3 HTTP/1.1
    Host: nl.archive.ubuntu.com
    Cache-Control: max-age=0
    Accept: text/*
    User-Agent: Debian APT-HTTP/1.3 (2.0.10) non-interactive
    Response
    HTTP/1.1 200 OK
    Date: Mon, 08 Apr 2024 12:04:46 GMT
    Server: Apache/2.4.52 (Ubuntu)
    Last-Modified: Mon, 08 Apr 2024 04:57:23 GMT
    ETag: "2b5d6c-6158ea41b7f70"
    Accept-Ranges: bytes
    Content-Length: 2841964
    Connection: close
  • flag-nl
    GET
    http://nl.archive.ubuntu.com/ubuntu/dists/focal-updates/restricted/binary-i386/by-hash/SHA256/860fa2b125d7b56a6744088ea8a290fdd34f8f69dbebe506bcd06266118a7a90
    Remote address:
    213.136.12.213:80
    Request
    GET /ubuntu/dists/focal-updates/restricted/binary-i386/by-hash/SHA256/860fa2b125d7b56a6744088ea8a290fdd34f8f69dbebe506bcd06266118a7a90 HTTP/1.1
    Host: nl.archive.ubuntu.com
    Cache-Control: max-age=0
    Accept: text/*
    User-Agent: Debian APT-HTTP/1.3 (2.0.10) non-interactive
    Response
    HTTP/1.1 200 OK
    Date: Mon, 08 Apr 2024 12:04:54 GMT
    Server: Apache/2.4.52 (Ubuntu)
    Last-Modified: Thu, 04 Apr 2024 14:44:31 GMT
    ETag: "9158-615466084ac46"
    Accept-Ranges: bytes
    Content-Length: 37208
    Connection: close
  • flag-nl
    GET
    http://nl.archive.ubuntu.com/ubuntu/dists/focal-updates/restricted/i18n/by-hash/SHA256/b9e11dd4b4180a31d40d3129ef5b14c30a59de9a968d9635a863401b8b74bde6
    Remote address:
    213.136.12.213:80
    Request
    GET /ubuntu/dists/focal-updates/restricted/i18n/by-hash/SHA256/b9e11dd4b4180a31d40d3129ef5b14c30a59de9a968d9635a863401b8b74bde6 HTTP/1.1
    Host: nl.archive.ubuntu.com
    Cache-Control: max-age=0
    Accept: text/*
    User-Agent: Debian APT-HTTP/1.3 (2.0.10) non-interactive
    Response
    HTTP/1.1 200 OK
    Date: Mon, 08 Apr 2024 12:04:54 GMT
    Server: Apache/2.4.52 (Ubuntu)
    Last-Modified: Mon, 08 Apr 2024 04:57:23 GMT
    ETag: "60e1c-6158ea41b7f70"
    Accept-Ranges: bytes
    Content-Length: 396828
    Connection: close
  • flag-nl
    GET
    http://nl.archive.ubuntu.com/ubuntu/dists/focal-updates/universe/binary-i386/by-hash/SHA256/d0cb883686ab6aacef0d790ef74d98ea3b8c0b9e3affb91733872b3b1c861d67
    Remote address:
    213.136.12.213:80
    Request
    GET /ubuntu/dists/focal-updates/universe/binary-i386/by-hash/SHA256/d0cb883686ab6aacef0d790ef74d98ea3b8c0b9e3affb91733872b3b1c861d67 HTTP/1.1
    Host: nl.archive.ubuntu.com
    Cache-Control: max-age=0
    Accept: text/*
    User-Agent: Debian APT-HTTP/1.3 (2.0.10) non-interactive
    Response
    HTTP/1.1 200 OK
    Date: Mon, 08 Apr 2024 12:04:56 GMT
    Server: Apache/2.4.52 (Ubuntu)
    Last-Modified: Thu, 04 Apr 2024 21:06:30 GMT
    ETag: "bea38-6154bb69616fc"
    Accept-Ranges: bytes
    Content-Length: 780856
    Connection: close
  • flag-nl
    GET
    http://nl.archive.ubuntu.com/ubuntu/dists/focal-updates/universe/binary-amd64/by-hash/SHA256/ff8de24c138de586271ec36901f24194be64c7561788c524b0fa0e368c524842
    Remote address:
    213.136.12.213:80
    Request
    GET /ubuntu/dists/focal-updates/universe/binary-amd64/by-hash/SHA256/ff8de24c138de586271ec36901f24194be64c7561788c524b0fa0e368c524842 HTTP/1.1
    Host: nl.archive.ubuntu.com
    Cache-Control: max-age=0
    Accept: text/*
    User-Agent: Debian APT-HTTP/1.3 (2.0.10) non-interactive
    Response
    HTTP/1.1 200 OK
    Date: Mon, 08 Apr 2024 12:05:00 GMT
    Server: Apache/2.4.52 (Ubuntu)
    Last-Modified: Thu, 04 Apr 2024 21:06:30 GMT
    ETag: "11f4f4-6154bb69616fc"
    Accept-Ranges: bytes
    Content-Length: 1176820
    Connection: close
  • flag-nl
    GET
    http://nl.archive.ubuntu.com/ubuntu/dists/focal-updates/universe/i18n/by-hash/SHA256/b566216fd57c4469444634a39f951b836b6742b79bfa1518275782b5d635beed
    Remote address:
    213.136.12.213:80
    Request
    GET /ubuntu/dists/focal-updates/universe/i18n/by-hash/SHA256/b566216fd57c4469444634a39f951b836b6742b79bfa1518275782b5d635beed HTTP/1.1
    Host: nl.archive.ubuntu.com
    Cache-Control: max-age=0
    Accept: text/*
    User-Agent: Debian APT-HTTP/1.3 (2.0.10) non-interactive
    Response
    HTTP/1.1 200 OK
    Date: Mon, 08 Apr 2024 12:05:04 GMT
    Server: Apache/2.4.52 (Ubuntu)
    Last-Modified: Thu, 28 Mar 2024 00:10:10 GMT
    ETag: "44dbc-614ad58b3a7f8"
    Accept-Ranges: bytes
    Content-Length: 282044
    Connection: close
  • flag-nl
    GET
    http://nl.archive.ubuntu.com/ubuntu/dists/focal-updates/multiverse/binary-i386/by-hash/SHA256/2159d7968c1f2157691ae2125bba8101aac1f6c5d62b258501fac523114dbe06
    Remote address:
    213.136.12.213:80
    Request
    GET /ubuntu/dists/focal-updates/multiverse/binary-i386/by-hash/SHA256/2159d7968c1f2157691ae2125bba8101aac1f6c5d62b258501fac523114dbe06 HTTP/1.1
    Host: nl.archive.ubuntu.com
    Cache-Control: max-age=0
    Accept: text/*
    User-Agent: Debian APT-HTTP/1.3 (2.0.10) non-interactive
    Response
    HTTP/1.1 200 OK
    Date: Mon, 08 Apr 2024 12:05:05 GMT
    Server: Apache/2.4.52 (Ubuntu)
    Last-Modified: Tue, 27 Feb 2024 13:25:28 GMT
    ETag: "20fc-6125cf5b1e104"
    Accept-Ranges: bytes
    Content-Length: 8444
    Connection: close
  • flag-nl
    GET
    http://nl.archive.ubuntu.com/ubuntu/dists/focal-updates/multiverse/binary-amd64/by-hash/SHA256/0a62abb55d7b3ce28662b06064af34112db12f73e48911160703e9e877a771da
    Remote address:
    213.136.12.213:80
    Request
    GET /ubuntu/dists/focal-updates/multiverse/binary-amd64/by-hash/SHA256/0a62abb55d7b3ce28662b06064af34112db12f73e48911160703e9e877a771da HTTP/1.1
    Host: nl.archive.ubuntu.com
    Cache-Control: max-age=0
    Accept: text/*
    User-Agent: Debian APT-HTTP/1.3 (2.0.10) non-interactive
    Response
    HTTP/1.1 200 OK
    Date: Mon, 08 Apr 2024 12:05:05 GMT
    Server: Apache/2.4.52 (Ubuntu)
    Last-Modified: Thu, 04 Apr 2024 14:44:31 GMT
    ETag: "662c-615466084ac46"
    Accept-Ranges: bytes
    Content-Length: 26156
    Connection: close
  • flag-nl
    GET
    http://nl.archive.ubuntu.com/ubuntu/dists/focal-updates/multiverse/i18n/by-hash/SHA256/0def9e05629ac6d06af2c54b27bcb997d2aa86bd10d9e3b99817566c62f2cfa3
    Remote address:
    213.136.12.213:80
    Request
    GET /ubuntu/dists/focal-updates/multiverse/i18n/by-hash/SHA256/0def9e05629ac6d06af2c54b27bcb997d2aa86bd10d9e3b99817566c62f2cfa3 HTTP/1.1
    Host: nl.archive.ubuntu.com
    Cache-Control: max-age=0
    Accept: text/*
    User-Agent: Debian APT-HTTP/1.3 (2.0.10) non-interactive
    Response
    HTTP/1.1 200 OK
    Date: Mon, 08 Apr 2024 12:05:05 GMT
    Server: Apache/2.4.52 (Ubuntu)
    Last-Modified: Thu, 04 Apr 2024 14:44:31 GMT
    ETag: "1ec8-615466084ac46"
    Accept-Ranges: bytes
    Content-Length: 7880
    Connection: close
  • flag-us
    DNS
    connectivity-check.ubuntu.com
    Remote address:
    1.1.1.1:53
    Request
    connectivity-check.ubuntu.com
    IN AAAA
    Response
    connectivity-check.ubuntu.com
    IN AAAA
    2620:2d:4000:1::2b
    connectivity-check.ubuntu.com
    IN AAAA
    2620:2d:4000:1::22
    connectivity-check.ubuntu.com
    IN AAAA
    2620:2d:4002:1::196
    connectivity-check.ubuntu.com
    IN AAAA
    2620:2d:4000:1::96
    connectivity-check.ubuntu.com
    IN AAAA
    2620:2d:4000:1::23
    connectivity-check.ubuntu.com
    IN AAAA
    2620:2d:4002:1::198
    connectivity-check.ubuntu.com
    IN AAAA
    2001:67c:1562::24
    connectivity-check.ubuntu.com
    IN AAAA
    2001:67c:1562::23
    connectivity-check.ubuntu.com
    IN AAAA
    2620:2d:4000:1::2a
    connectivity-check.ubuntu.com
    IN AAAA
    2620:2d:4000:1::98
    connectivity-check.ubuntu.com
    IN AAAA
    2620:2d:4000:1::97
    connectivity-check.ubuntu.com
    IN AAAA
    2620:2d:4002:1::197
  • 151.101.2.49:443
    cdn.fwupd.org
    tls
    1.8kB
     8.6kB
     20
    22
  • 185.125.190.36:80
    http://security.ubuntu.com/ubuntu/dists/focal-security/main/binary-amd64/by-hash/SHA256/f6bf9235e1e3cdb6316f26f9808cea32e5809f68921d6b0ab9c3afd2e68b55f4
    http
    50.0kB
     3.3MB
     697
    2403

    HTTP Request

    GET http://security.ubuntu.com/ubuntu/dists/focal-security/InRelease

    HTTP Response

    200

    HTTP Request

    GET http://security.ubuntu.com/ubuntu/dists/focal-security/main/binary-amd64/by-hash/SHA256/f6bf9235e1e3cdb6316f26f9808cea32e5809f68921d6b0ab9c3afd2e68b55f4

    HTTP Response

    200
  • 172.67.10.205:443
    deb.nodesource.com
    tls
    1.2kB
     4.2kB
     9
    9
  • 213.136.12.213:80
    http://nl.archive.ubuntu.com/ubuntu/dists/focal/InRelease
    http
    545 B
     482 B
     6
    5

    HTTP Request

    GET http://nl.archive.ubuntu.com/ubuntu/dists/focal/InRelease

    HTTP Response

    304
  • 213.136.12.213:80
    http://nl.archive.ubuntu.com/ubuntu/dists/focal-updates/InRelease
    http
    3.0kB
     118.6kB
     51
    88

    HTTP Request

    GET http://nl.archive.ubuntu.com/ubuntu/dists/focal-updates/InRelease

    HTTP Response

    200
  • 151.101.2.49:443
    cdn.fwupd.org
    tls
    13.9kB
     960.0kB
     227
    705
  • 54.217.10.153:443
    motd.ubuntu.com
    tls
    3.4kB
     4.6kB
     18
    10
  • 213.136.12.213:80
    http://nl.archive.ubuntu.com/ubuntu/dists/focal-backports/InRelease
    http
    503 B
     482 B
     5
    5

    HTTP Request

    GET http://nl.archive.ubuntu.com/ubuntu/dists/focal-backports/InRelease

    HTTP Response

    304
  • 185.125.190.75:443
    esm.ubuntu.com
    tls
    1.7kB
     20.4kB
     15
    20
  • 54.171.230.55:443
    motd.ubuntu.com
    60 B
     1
  • 34.254.182.186:443
    motd.ubuntu.com
    60 B
     1
  • 185.125.190.36:80
    http://security.ubuntu.com/ubuntu/dists/focal-security/multiverse/binary-amd64/by-hash/SHA256/5b3f58234035b2e6b31c418a569b477ce4dc087ac52b49df3fe3a8106d374617
    http
    1.3kB
     25.3kB
     19
    23

    HTTP Request

    GET http://security.ubuntu.com/ubuntu/dists/focal-security/multiverse/binary-amd64/by-hash/SHA256/5b3f58234035b2e6b31c418a569b477ce4dc087ac52b49df3fe3a8106d374617

    HTTP Response

    200
  • 34.243.160.129:443
    motd.ubuntu.com
    60 B
     1
  • 213.136.12.213:80
    http://nl.archive.ubuntu.com/ubuntu/dists/focal-updates/main/binary-amd64/by-hash/SHA256/a294b0f6104d8f1b331e3ea3a33bb5feb8548759bb5fa8848d624b35cdaf6626
    http
    44.6kB
     3.4MB
     780
    2418

    HTTP Request

    GET http://nl.archive.ubuntu.com/ubuntu/dists/focal-updates/main/binary-amd64/by-hash/SHA256/a294b0f6104d8f1b331e3ea3a33bb5feb8548759bb5fa8848d624b35cdaf6626

    HTTP Response

    200
  • 213.136.12.213:80
    http://nl.archive.ubuntu.com/ubuntu/dists/focal-updates/main/binary-i386/by-hash/SHA256/50870ea1dc6a7c4b10205228012c54ddf9d73fea8427b3ffefa0fefd30aedb9c
    http
    12.6kB
     996.9kB
     226
    717

    HTTP Request

    GET http://nl.archive.ubuntu.com/ubuntu/dists/focal-updates/main/binary-i386/by-hash/SHA256/50870ea1dc6a7c4b10205228012c54ddf9d73fea8427b3ffefa0fefd30aedb9c

    HTTP Response

    200
  • 213.136.12.213:80
    http://nl.archive.ubuntu.com/ubuntu/dists/focal-updates/main/i18n/by-hash/SHA256/e32908298b032e67e638ae0befd7b31c85adb4627705bea5c84699dbaba918bc
    http
    4.8kB
     533.5kB
     88
    388

    HTTP Request

    GET http://nl.archive.ubuntu.com/ubuntu/dists/focal-updates/main/i18n/by-hash/SHA256/e32908298b032e67e638ae0befd7b31c85adb4627705bea5c84699dbaba918bc

    HTTP Response

    200
  • 213.136.12.213:80
    http://nl.archive.ubuntu.com/ubuntu/dists/focal-updates/restricted/binary-amd64/by-hash/SHA256/ace6e0e3e6ebc75a1620cc6f576e77597fe557afdec957a9a75351c4168d21b3
    http
    33.0kB
     3.0MB
     585
    2117

    HTTP Request

    GET http://nl.archive.ubuntu.com/ubuntu/dists/focal-updates/restricted/binary-amd64/by-hash/SHA256/ace6e0e3e6ebc75a1620cc6f576e77597fe557afdec957a9a75351c4168d21b3

    HTTP Response

    200
  • 213.136.12.213:80
    http://nl.archive.ubuntu.com/ubuntu/dists/focal-updates/restricted/binary-i386/by-hash/SHA256/860fa2b125d7b56a6744088ea8a290fdd34f8f69dbebe506bcd06266118a7a90
    http
    1.3kB
     39.1kB
     20
    31

    HTTP Request

    GET http://nl.archive.ubuntu.com/ubuntu/dists/focal-updates/restricted/binary-i386/by-hash/SHA256/860fa2b125d7b56a6744088ea8a290fdd34f8f69dbebe506bcd06266118a7a90

    HTTP Response

    200
  • 213.136.12.213:80
    http://nl.archive.ubuntu.com/ubuntu/dists/focal-updates/restricted/i18n/by-hash/SHA256/b9e11dd4b4180a31d40d3129ef5b14c30a59de9a968d9635a863401b8b74bde6
    http
    9.0kB
     412.6kB
     155
    299

    HTTP Request

    GET http://nl.archive.ubuntu.com/ubuntu/dists/focal-updates/restricted/i18n/by-hash/SHA256/b9e11dd4b4180a31d40d3129ef5b14c30a59de9a968d9635a863401b8b74bde6

    HTTP Response

    200
  • 213.136.12.213:80
    http://nl.archive.ubuntu.com/ubuntu/dists/focal-updates/universe/binary-i386/by-hash/SHA256/d0cb883686ab6aacef0d790ef74d98ea3b8c0b9e3affb91733872b3b1c861d67
    http
    13.7kB
     811.5kB
     238
    584

    HTTP Request

    GET http://nl.archive.ubuntu.com/ubuntu/dists/focal-updates/universe/binary-i386/by-hash/SHA256/d0cb883686ab6aacef0d790ef74d98ea3b8c0b9e3affb91733872b3b1c861d67

    HTTP Response

    200
  • 213.136.12.213:80
    http://nl.archive.ubuntu.com/ubuntu/dists/focal-updates/universe/binary-amd64/by-hash/SHA256/ff8de24c138de586271ec36901f24194be64c7561788c524b0fa0e368c524842
    http
    18.8kB
     1.2MB
     312
    879

    HTTP Request

    GET http://nl.archive.ubuntu.com/ubuntu/dists/focal-updates/universe/binary-amd64/by-hash/SHA256/ff8de24c138de586271ec36901f24194be64c7561788c524b0fa0e368c524842

    HTTP Response

    200
  • 213.136.12.213:80
    http://nl.archive.ubuntu.com/ubuntu/dists/focal-updates/universe/i18n/by-hash/SHA256/b566216fd57c4469444634a39f951b836b6742b79bfa1518275782b5d635beed
    http
    6.8kB
     293.4kB
     110
    213

    HTTP Request

    GET http://nl.archive.ubuntu.com/ubuntu/dists/focal-updates/universe/i18n/by-hash/SHA256/b566216fd57c4469444634a39f951b836b6742b79bfa1518275782b5d635beed

    HTTP Response

    200
  • 213.136.12.213:80
    http://nl.archive.ubuntu.com/ubuntu/dists/focal-updates/multiverse/binary-i386/by-hash/SHA256/2159d7968c1f2157691ae2125bba8101aac1f6c5d62b258501fac523114dbe06
    http
    852 B
     9.2kB
     10
    11

    HTTP Request

    GET http://nl.archive.ubuntu.com/ubuntu/dists/focal-updates/multiverse/binary-i386/by-hash/SHA256/2159d7968c1f2157691ae2125bba8101aac1f6c5d62b258501fac523114dbe06

    HTTP Response

    200
  • 213.136.12.213:80
    http://nl.archive.ubuntu.com/ubuntu/dists/focal-updates/multiverse/binary-amd64/by-hash/SHA256/0a62abb55d7b3ce28662b06064af34112db12f73e48911160703e9e877a771da
    http
    1.1kB
     27.6kB
     15
    23

    HTTP Request

    GET http://nl.archive.ubuntu.com/ubuntu/dists/focal-updates/multiverse/binary-amd64/by-hash/SHA256/0a62abb55d7b3ce28662b06064af34112db12f73e48911160703e9e877a771da

    HTTP Response

    200
  • 213.136.12.213:80
    http://nl.archive.ubuntu.com/ubuntu/dists/focal-updates/multiverse/i18n/by-hash/SHA256/0def9e05629ac6d06af2c54b27bcb997d2aa86bd10d9e3b99817566c62f2cfa3
    http
    693 B
     8.7kB
     8
    11

    HTTP Request

    GET http://nl.archive.ubuntu.com/ubuntu/dists/focal-updates/multiverse/i18n/by-hash/SHA256/0def9e05629ac6d06af2c54b27bcb997d2aa86bd10d9e3b99817566c62f2cfa3

    HTTP Response

    200
  • 224.0.0.251:5353
    146 B
     2
  • 1.1.1.1:53
    connectivity-check.ubuntu.com
    dns
    86 B
     422 B
     1
    1

    DNS Request

    connectivity-check.ubuntu.com

    DNS Response

    2620:2d:4000:1::98
    2001:67c:1562::24
    2001:67c:1562::23
    2620:2d:4002:1::197
    2620:2d:4000:1::2b
    2620:2d:4002:1::198
    2620:2d:4000:1::2a
    2620:2d:4002:1::196
    2620:2d:4000:1::23
    2620:2d:4000:1::97
    2620:2d:4000:1::96
    2620:2d:4000:1::22

  • 1.1.1.1:53
    _http._tcp.security.ubuntu.com
    dns
    163 B
     285 B
     2
    2

    DNS Request

    _http._tcp.security.ubuntu.com

    DNS Request

    _http._tcp.security.ubuntu.com

  • 1.1.1.1:53
    _https._tcp.deb.nodesource.com
    dns
    163 B
     331 B
     2
    2

    DNS Request

    _https._tcp.deb.nodesource.com

    DNS Request

    _https._tcp.deb.nodesource.com

  • 1.1.1.1:53
    _http._tcp.nl.archive.ubuntu.com
    dns
    167 B
     289 B
     2
    2

    DNS Request

    _http._tcp.nl.archive.ubuntu.com

    DNS Request

    _http._tcp.nl.archive.ubuntu.com

  • 1.1.1.1:53
    cdn.fwupd.org
    dns
    70 B
     185 B
     1
    1

    DNS Request

    cdn.fwupd.org

    DNS Response

    151.101.194.49
    151.101.130.49
    151.101.66.49
    151.101.2.49

  • 1.1.1.1:53
    cdn.fwupd.org
    dns
    70 B
     233 B
     1
    1

    DNS Request

    cdn.fwupd.org

    DNS Response

    2a04:4e42::561
    2a04:4e42:400::561
    2a04:4e42:200::561
    2a04:4e42:600::561

  • 1.1.1.1:53
    security.ubuntu.com
    dns
    76 B
     156 B
     1
    1

    DNS Request

    security.ubuntu.com

    DNS Response

    185.125.190.36
    91.189.91.81
    91.189.91.83
    91.189.91.82
    185.125.190.39

  • 1.1.1.1:53
    security.ubuntu.com
    dns
    76 B
     216 B
     1
    1

    DNS Request

    security.ubuntu.com

    DNS Response

    2620:2d:4002:1::102
    2620:2d:4002:1::101
    2620:2d:4000:1::16
    2620:2d:4002:1::103
    2620:2d:4000:1::19

  • 1.1.1.1:53
    deb.nodesource.com
    dns
    75 B
     174 B
     1
    1

    DNS Request

    deb.nodesource.com

    DNS Response

    104.22.5.26
    104.22.4.26
    172.67.10.205

  • 1.1.1.1:53
    deb.nodesource.com
    dns
    75 B
     210 B
     1
    1

    DNS Request

    deb.nodesource.com

    DNS Response

    2606:4700:10::6816:41a
    2606:4700:10::6816:51a
    2606:4700:10::ac43:acd

  • 1.1.1.1:53
    nl.archive.ubuntu.com
    dns
    78 B
     146 B
     1
    1

    DNS Request

    nl.archive.ubuntu.com

    DNS Response

    213.136.12.213

  • 1.1.1.1:53
    nl.archive.ubuntu.com
    dns
    78 B
     158 B
     1
    1

    DNS Request

    nl.archive.ubuntu.com

    DNS Response

    2001:7b8:3:37::21:3

  • 1.1.1.1:53
    _https._tcp.motd.ubuntu.com
    dns
    157 B
     279 B
     2
    2

    DNS Request

    _https._tcp.motd.ubuntu.com

    DNS Request

    _https._tcp.motd.ubuntu.com

  • 1.1.1.1:53
    motd.ubuntu.com
    dns
    72 B
     152 B
     1
    1

    DNS Request

    motd.ubuntu.com

    DNS Response

    54.217.10.153
    54.171.230.55
    34.254.182.186
    54.247.62.1
    34.243.160.129

  • 1.1.1.1:53
    motd.ubuntu.com
    dns
    72 B
     212 B
     1
    1

    DNS Request

    motd.ubuntu.com

    DNS Response

    2a05:d018:91c:3200:2846:99fb:81b6:1e11
    2a05:d018:91c:3200:5e0d:21a9:26ca:90b5
    2a05:d018:91c:3200:c8f:1a06:a2dd:450f
    2a05:d018:91c:3200:d8b6:37bc:63f9:703c
    2a05:d018:91c:3200:c887:2f22:290f:a7c

  • 1.1.1.1:53
    _https._tcp.esm.ubuntu.com
    dns
    155 B
     277 B
     2
    2

    DNS Request

    _https._tcp.esm.ubuntu.com

    DNS Request

    _https._tcp.esm.ubuntu.com

  • 1.1.1.1:53
    esm.ubuntu.com
    dns
    71 B
     151 B
     1
    1

    DNS Request

    esm.ubuntu.com

    DNS Response

    185.125.190.75
    91.189.91.46
    185.125.190.23
    91.189.91.47
    185.125.190.24

  • 1.1.1.1:53
    esm.ubuntu.com
    dns
    71 B
     211 B
     1
    1

    DNS Request

    esm.ubuntu.com

    DNS Response

    2620:2d:4000:1::30
    2620:2d:4000:1::2f
    2001:67c:1562::21
    2001:67c:1562::22
    2620:2d:4000:1::2e

  • 1.1.1.1:53
    connectivity-check.ubuntu.com
    dns
    86 B
     422 B
     1
    1

    DNS Request

    connectivity-check.ubuntu.com

    DNS Response

    2620:2d:4000:1::2b
    2620:2d:4000:1::22
    2620:2d:4002:1::196
    2620:2d:4000:1::96
    2620:2d:4000:1::23
    2620:2d:4002:1::198
    2001:67c:1562::24
    2001:67c:1562::23
    2620:2d:4000:1::2a
    2620:2d:4000:1::98
    2620:2d:4000:1::97
    2620:2d:4002:1::197

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.