hxxp://{ "asn"[:] "AS174", "asnNumeric"[:] 174, "organisation"[:] "Cogent Communications", "name"[:] "COGENT-174", "registry"[:] "Arin", "registeredCountry"[:] "US", "registeredCountryName"[:] "United States of America (the)", "registrationDate"[:] "1996-05-16", "registrationLastChange"[:] "2012-03-02", "totalIpv4Addresses"[:] 25871719, "totalIpv4Prefixes"[:] 13926, "totalIpv4BogonPrefixes"[:] 0, "totalIpv6Prefixes"[:] 3236, "totalIpv6BogonPrefixes"[:] 0, "totalReceivingFrom"[:] 239, "rank"[:] 15, "receivingFrom"[:] [ { "asn"[:] "AS22850", "asnNumeric"[:] 22850, "organisation"[:] "PIT US", "name"[:] "PIT-US", "registry"[:] "Arin", "registeredCountry"[:] "US", "registeredCountryName"[:] "United States of America (the)", "totalIpv4Addresses"[:] 0 }, { "asn"[:] "AS328832", "asnNumeric"[:] 328832, "organisation"[:] "Network Platforms (PTY) LTD", "name"[:] "Network-Platforms-International", "registry"[:] "Afrinic", "registeredCountry"[:] "ZA", "registeredCountryName"[:] "South Africa", "totalIpv4Addresses"[:] 0 }, { "asn"[:] "AS200242", "asnNumeric"[:] 200242, "organisation"[:] "Hazel Reimer", "name"[:] "borderline-transit", "registry"[:] "Ripe", "registeredCountry"[:] "DE", "registeredCountryName"[:] "Germany", "totalIpv4Addresses"[:] 0 }, { "asn"[:] "AS20562", "asnNumeric"[:] 20562, "organisation"[:] "Broadband Hosting B[.]V[.]", "name"[:] "OPEN-PEERING-AS", "registry"[:] "Ripe", "registeredCountry"[:] "NL", "registeredCountryName"[:] "Netherlands (Kingdom of the)", "totalIpv4Addresses"[:] 0 }, { "asn"[:] "AS4635", "asnNumeric"[:] 4635, "organisation"[:] "The Hong Kong Internet Exchange Limited", "name"[:] "HKIX-RS1", "registry"[:] "Apnic", "registeredCountry"[:] "HK", "registeredCountryName"[:] "Hong Kong", "totalIpv4Addresses"[:] 0 } ], "rankText"[:] "#15 out of 77,342", "totalTransitTo"[:] 7496, "transitTo"[:] [ { "asn"[:] "AS215232", "asnNumeric"[:] 215232, "organisation"[:] "Maksym Pan Vyacheslavovich", "name"[:] "eth0-as", "registry"[:] "Ripe", "registeredCountry"[:] "UA", "registeredCountryName"[:] "Ukraine", "totalIpv4Addresses"[:] 0 }, { "asn"[:] "AS50754", "asnNumeric"[:] 50754, "organisation"[:] "C2D System House Luxembourg SA", "name"[:] "C2D", "registry"[:] "Ripe", "registeredCountry"[:] "LU", "registeredCountryName"[:] "Luxembourg", "totalIpv4Addresses"[:] 0 }, { "asn"[:] "AS49647", "asnNumeric"[:] 49647, "organisation"[:] "Sky Unwired DWC-LLC", "name"[:] "Sky-unwired", "registry"[:] "Ripe", "registeredCountry"[:] "AE", "registeredCountryName"[:] "United Arab Emirates (the)", "totalIpv4Addresses"[:] 0 }, { "asn"[:] "AS215319", "asnNumeric"[:] 215319, "organisation"[:] "GATEWATCHER SAS", "name"[:] "GATEWATCHER-AS", "registry"[:] "Ripe", "registeredCountry"[:] "FR", "registeredCountryName"[:] "France", "totalIpv4Addresses"[:] 0 }, { "asn"[:] "AS214889", "asnNumeric"[:] 214889, "organisation"[:] "Seabak LLC", "name"[:] "SEABAK_EU", "registry"[:] "Ripe", "registeredCountry"[:] "AZ", "registeredCountryName"[:] "Azerbaijan", "totalIpv4Addresses"[:] 0 } ], "confidenceArea"[:] [ { "latitude"[:] 5[.]9161463, "longitude"[:] -162[.]30162 }, { "latitude"[:] 22[.]013693, "longitude"[:] -159[.]57162 }, { "latitude"[:] 22[.]01501, "longitude"[:] -159[.]57138 }, { "latitude"[:] 61[.]238174, "longitude"[:] -150[.]12137 }, { "latitude"[:] 61[.]257874, "longitude"[:] -150[.]11032 }, { "latitude"[:] 61[.]577488, "longitude"[:] -149[.]86032 }, { "latitude"[:] 61[.]595783, "longitude"[:] -149[.]84158 }, { "latitude"[:] 61[.]612045, "longitude"[:] -149[.]8159 }, { "latitude"[:] 61[.]625694, "longitude"[:] -149[.]7842 }, { "latitude"[:] 61[.]63623, "longitude"[:] -149[.]74762 }, { "latitude"[:] 61[.]64328, "longitude"[:] -149[.]70752 }, { "latitude"[:] 61[.]64659, "longitude"[:] -149[.]66531 }, { "latitude"[:] 61[.]646038, "longitude"[:] -149[.]62256 }, { "latitude"[:] 61[.]641647, "longitude"[:] -149[.]5808 }, { "latitude"[:] 46[.]277866, "longitude"[:] -67[.]7708 }, { "latitude"[:] 46[.]265354, "longitude"[:] -67[.]72956 }, { "latitude"[:] 46[.]247402, "longitude"[:] -67[.]692764 }, { "latitude"[:] 46[.]224724, "longitude"[:] -67[.]66189 }, { "latitude"[:] 46[.]19823, "longitude"[:] -67[.]638176 }, { "latitude"[:] 44[.]97973, "longitude"[:] -66[.]78818 }, { "latitude"[:] 44[.]948765, "longitude"[:] -66[.]772194 }, { "latitude"[:] 44[.]916115, "longitude"[:] -66[.]76559 }, { "latitude"[:] 18[.]348196, "longitude"[:] -65[.]545586 }, { "latitude"[:] 18[.]30454, "longitude"[:] -65[.]548546 }, { "latitude"[:] 18[.]26237, "longitude"[:] -65[.]56083 }, { "latitude"[:] 18[.]223457, "longitude"[:] -65[.]581924 }, { "latitude"[:] 18[.]189445, "longitude"[:] -65[.]61094 }, { "latitude"[:] 18[.]161772, "longitude"[:] -65[.]646645 }, { "latitude"[:] 18[.]141602, "longitude"[:] -65[.]687546 }, { "latitude"[:] 17[.]811228, "longitude"[:] -66[.]56755 }, { "latitude"[:] 17[.]798086, "longitude"[:] -66[.]62101 }, { "latitude"[:] 5[.]6584287, "longitude"[:] -162[.]05101 }, { "latitude"[:] 5[.]65723, "longitude"[:] -162[.]0974 }, { "latitude"[:] 5[.]6655416, "longitude"[:] -162[.]14304 }, { "latitude"[:] 5[.]683009, "longitude"[:] -162[.]18599 }, { "latitude"[:] 5[.]7088866, "longitude"[:] -162[.]22441 }, { "latitude"[:] 5[.]7420673, "longitude"[:] -162[.]25667 }, { "latitude"[:] 5[.]781134, "longitude"[:] -162[.]2814 }, { "latitude"[:] 5[.]824419, "longitude"[:] -162[.]29752 }, { "latitude"[:] 5[.]870073, "longitude"[:] -162[.]30435 }, { "latitude"[:] 5[.]9161463, "longitude"[:] -162[.]30162 } ] }

Sharing

Behavioral task

behavioral1

Sample

http://{ "asn": "AS174", "asnNumeric": 174, "organisation": "Cogent Communications", "name": "COGENT-174", "registry": "Arin", "registeredCountry": "US", "registeredCountryName": "United States of America (the)", "registrationDate": "1996-05-16", "registrationLastChange": "2012-03-02", "totalIpv4Addresses": 25871719, "totalIpv4Prefixes": 13926, "totalIpv4BogonPrefixes": 0, "totalIpv6Prefixes": 3236, "totalIpv6BogonPrefixes": 0, "totalReceivingFrom": 239, "rank": 15, "receivingFrom": [ { "asn": "AS22850", "asnNumeric": 22850, "organisation": "PIT US", "name": "PIT-US", "registry": "Arin", "registeredCountry": "US", "registeredCountryName": "United States of America (the)", "totalIpv4Addresses": 0 }, { "asn": "AS328832", "asnNumeric": 328832, "organisation": "Network Platforms (PTY) LTD", "name": "Network-Platforms-International", "registry": "Afrinic", "registeredCountry": "ZA", "registeredCountryName": "South Africa", "totalIpv4Addresses": 0 }, { "asn": "AS200242", "asnNumeric": 200242, "organisation": "Hazel Reimer", "name": "borderline-transit", "registry": "Ripe", "registeredCountry": "DE", "registeredCountryName": "Germany", "totalIpv4Addresses": 0 }, { "asn": "AS20562", "asnNumeric": 20562, "organisation": "Broadband Hosting B.V.", "name": "OPEN-PEERING-AS", "registry": "Ripe", "registeredCountry": "NL", "registeredCountryName": "Netherlands (Kingdom of the)", "totalIpv4Addresses": 0 }, { "asn": "AS4635", "asnNumeric": 4635, "organisation": "The Hong Kong Internet Exchange Limited", "name": "HKIX-RS1", "registry": "Apnic", "registeredCountry": "HK", "registeredCountryName": "Hong Kong", "totalIpv4Addresses": 0 } ], "rankText": "#15 out of 77,342", "totalTransitTo": 7496, "transitTo": [ { "asn": "AS215232", "asnNumeric": 215232, "organisation": "Maksym Pan Vyacheslavovich", "name": "eth0-as", "registry": "Ripe", "registeredCountry": "UA", "registeredCountryName": "Ukraine", "totalIpv4Addresses": 0 }, { "asn": "AS50754", "asnNumeric": 50754, "organisation": "C2D System House Luxembourg SA", "name": "C2D", "registry": "Ripe", "registeredCountry": "LU", "registeredCountryName": "Luxembourg", "totalIpv4Addresses": 0 }, { "asn": "AS49647", "asnNumeric": 49647, "organisation": "Sky Unwired DWC-LLC", "name": "Sky-unwired", "registry": "Ripe", "registeredCountry": "AE", "registeredCountryName": "United Arab Emirates (the)", "totalIpv4Addresses": 0 }, { "asn": "AS215319", "asnNumeric": 215319, "organisation": "GATEWATCHER SAS", "name": "GATEWATCHER-AS", "registry": "Ripe", "registeredCountry": "FR", "registeredCountryName": "France", "totalIpv4Addresses": 0 }, { "asn": "AS214889", "asnNumeric": 214889, "organisation": "Seabak LLC", "name": "SEABAK_EU", "registry": "Ripe", "registeredCountry": "AZ", "registeredCountryName": "Azerbaijan", "totalIpv4Addresses": 0 } ], "confidenceArea": [ { "latitude": 5.9161463, "longitude": -162.30162 }, { "latitude": 22.013693, "longitude": -159.57162 }, { "latitude": 22.01501, "longitude": -159.57138 }, { "latitude": 61.238174, "longitude": -150.12137 }, { "latitude": 61.257874, "longitude": -150.11032 }, { "latitude": 61.577488, "longitude": -149.86032 }, { "latitude": 61.595783, "longitude": -149.84158 }, { "latitude": 61.612045, "longitude": -149.8159 }, { "latitude": 61.625694, "longitude": -149.7842 }, { "latitude": 61.63623, "longitude": -149.74762 }, { "latitude": 61.64328, "longitude": -149.70752 }, { "latitude": 61.64659, "longitude": -149.66531 }, { "latitude": 61.646038, "longitude": -149.62256 }, { "latitude": 61.641647, "longitude": -149.5808 }, { "latitude": 46.277866, "longitude": -67.7708 }, { "latitude": 46.265354, "longitude": -67.72956 }, { "latitude": 46.247402, "longitude": -67.692764 }, { "latitude": 46.224724, "longitude": -67.66189 }, { "latitude": 46.19823, "longitude": -67.638176 }, { "latitude": 44.97973, "longitude": -66.78818 }, { "latitude": 44.948765, "longitude": -66.772194 }, { "latitude": 44.916115, "longitude": -66.76559 }, { "latitude": 18.348196, "longitude": -65.545586 }, { "latitude": 18.30454, "longitude": -65.548546 }, { "latitude": 18.26237, "longitude": -65.56083 }, { "latitude": 18.223457, "longitude": -65.581924 }, { "latitude": 18.189445, "longitude": -65.61094 }, { "latitude": 18.161772, "longitude": -65.646645 }, { "latitude": 18.141602, "longitude": -65.687546 }, { "latitude": 17.811228, "longitude": -66.56755 }, { "latitude": 17.798086, "longitude": -66.62101 }, { "latitude": 5.6584287, "longitude": -162.05101 }, { "latitude": 5.65723, "longitude": -162.0974 }, { "latitude": 5.6655416, "longitude": -162.14304 }, { "latitude": 5.683009, "longitude": -162.18599 }, { "latitude": 5.7088866, "longitude": -162.22441 }, { "latitude": 5.7420673, "longitude": -162.25667 }, { "latitude": 5.781134, "longitude": -162.2814 }, { "latitude": 5.824419, "longitude": -162.29752 }, { "latitude": 5.870073, "longitude": -162.30435 }, { "latitude": 5.9161463, "longitude": -162.30162 } ] }

Resource

win10v2004-20240802-en

discovery

windows10-2004-x64

7 signatures

150 seconds

General

Target

http://{ "asn": "AS174", "asnNumeric": 174, "organisation": "Cogent Communications", "name": "COGENT-174", "registry": "Arin", "registeredCountry": "US", "registeredCountryName": "United States of America (the)", "registrationDate": "1996-05-16", "registrationLastChange": "2012-03-02", "totalIpv4Addresses": 25871719, "totalIpv4Prefixes": 13926, "totalIpv4BogonPrefixes": 0, "totalIpv6Prefixes": 3236, "totalIpv6BogonPrefixes": 0, "totalReceivingFrom": 239, "rank": 15, "receivingFrom": [ { "asn": "AS22850", "asnNumeric": 22850, "organisation": "PIT US", "name": "PIT-US", "registry": "Arin", "registeredCountry": "US", "registeredCountryName": "United States of America (the)", "totalIpv4Addresses": 0 }, { "asn": "AS328832", "asnNumeric": 328832, "organisation": "Network Platforms (PTY) LTD", "name": "Network-Platforms-International", "registry": "Afrinic", "registeredCountry": "ZA", "registeredCountryName": "South Africa", "totalIpv4Addresses": 0 }, { "asn": "AS200242", "asnNumeric": 200242, "organisation": "Hazel Reimer", "name": "borderline-transit", "registry": "Ripe", "registeredCountry": "DE", "registeredCountryName": "Germany", "totalIpv4Addresses": 0 }, { "asn": "AS20562", "asnNumeric": 20562, "organisation": "Broadband Hosting B.V.", "name": "OPEN-PEERING-AS", "registry": "Ripe", "registeredCountry": "NL", "registeredCountryName": "Netherlands (Kingdom of the)", "totalIpv4Addresses": 0 }, { "asn": "AS4635", "asnNumeric": 4635, "organisation": "The Hong Kong Internet Exchange Limited", "name": "HKIX-RS1", "registry": "Apnic", "registeredCountry": "HK", "registeredCountryName": "Hong Kong", "totalIpv4Addresses": 0 } ], "rankText": "#15 out of 77,342", "totalTransitTo": 7496, "transitTo": [ { "asn": "AS215232", "asnNumeric": 215232, "organisation": "Maksym Pan Vyacheslavovich", "name": "eth0-as", "registry": "Ripe", "registeredCountry": "UA", "registeredCountryName": "Ukraine", "totalIpv4Addresses": 0 }, { "asn": "AS50754", "asnNumeric": 50754, "organisation": "C2D System House Luxembourg SA", "name": "C2D", "registry": "Ripe", "registeredCountry": "LU", "registeredCountryName": "Luxembourg", "totalIpv4Addresses": 0 }, { "asn": "AS49647", "asnNumeric": 49647, "organisation": "Sky Unwired DWC-LLC", "name": "Sky-unwired", "registry": "Ripe", "registeredCountry": "AE", "registeredCountryName": "United Arab Emirates (the)", "totalIpv4Addresses": 0 }, { "asn": "AS215319", "asnNumeric": 215319, "organisation": "GATEWATCHER SAS", "name": "GATEWATCHER-AS", "registry": "Ripe", "registeredCountry": "FR", "registeredCountryName": "France", "totalIpv4Addresses": 0 }, { "asn": "AS214889", "asnNumeric": 214889, "organisation": "Seabak LLC", "name": "SEABAK_EU", "registry": "Ripe", "registeredCountry": "AZ", "registeredCountryName": "Azerbaijan", "totalIpv4Addresses": 0 } ], "confidenceArea": [ { "latitude": 5.9161463, "longitude": -162.30162 }, { "latitude": 22.013693, "longitude": -159.57162 }, { "latitude": 22.01501, "longitude": -159.57138 }, { "latitude": 61.238174, "longitude": -150.12137 }, { "latitude": 61.257874, "longitude": -150.11032 }, { "latitude": 61.577488, "longitude": -149.86032 }, { "latitude": 61.595783, "longitude": -149.84158 }, { "latitude": 61.612045, "longitude": -149.8159 }, { "latitude": 61.625694, "longitude": -149.7842 }, { "latitude": 61.63623, "longitude": -149.74762 }, { "latitude": 61.64328, "longitude": -149.70752 }, { "latitude": 61.64659, "longitude": -149.66531 }, { "latitude": 61.646038, "longitude": -149.62256 }, { "latitude": 61.641647, "longitude": -149.5808 }, { "latitude": 46.277866, "longitude": -67.7708 }, { "latitude": 46.265354, "longitude": -67.72956 }, { "latitude": 46.247402, "longitude": -67.692764 }, { "latitude": 46.224724, "longitude": -67.66189 }, { "latitude": 46.19823, "longitude": -67.638176 }, { "latitude": 44.97973, "longitude": -66.78818 }, { "latitude": 44.948765, "longitude": -66.772194 }, { "latitude": 44.916115, "longitude": -66.76559 }, { "latitude": 18.348196, "longitude": -65.545586 }, { "latitude": 18.30454, "longitude": -65.548546 }, { "latitude": 18.26237, "longitude": -65.56083 }, { "latitude": 18.223457, "longitude": -65.581924 }, { "latitude": 18.189445, "longitude": -65.61094 }, { "latitude": 18.161772, "longitude": -65.646645 }, { "latitude": 18.141602, "longitude": -65.687546 }, { "latitude": 17.811228, "longitude": -66.56755 }, { "latitude": 17.798086, "longitude": -66.62101 }, { "latitude": 5.6584287, "longitude": -162.05101 }, { "latitude": 5.65723, "longitude": -162.0974 }, { "latitude": 5.6655416, "longitude": -162.14304 }, { "latitude": 5.683009, "longitude": -162.18599 }, { "latitude": 5.7088866, "longitude": -162.22441 }, { "latitude": 5.7420673, "longitude": -162.25667 }, { "latitude": 5.781134, "longitude": -162.2814 }, { "latitude": 5.824419, "longitude": -162.29752 }, { "latitude": 5.870073, "longitude": -162.30435 }, { "latitude": 5.9161463, "longitude": -162.30162 } ] }

Sharing

General

Malware Config

Signatures

Files