Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

7

d38cdffa65...18.exe

windows7-x64

7

d38cdffa65...18.exe

windows10-2004-x64

7

Analysis

  • max time kernel
    121s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    08/09/2024, 04:34 UTC

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    d38cdffa655bb08fbd96eaaf2604d40a_JaffaCakes118.exe

  • Size

    229KB

  • MD5

    d38cdffa655bb08fbd96eaaf2604d40a

  • SHA1

    db0fa7f9c3b0c0f41c029e1019d01fc375323c13

  • SHA256

    5080f6efc5f65098cac75824cb1c8849922ea8f7fc06aeba649cfe9b230fda6b

  • SHA512

    0bf60e5befc71c150e01b79d769b36723657dadd2126cd346929c1338b9ae60aa1ab758a10d26abfee2c01beebfe2f3ce00448e92fd6ee49dc643d6dbf7937d2

  • SSDEEP

    6144:6vjIC/oLul6lR2X6grUdSwxpYeAEu8/uWN/yFJgG+6:6vjDGu0lM7IdRxpYnED/bKJ46

Score
7/10
bootkitdiscoverypersistenceupx

Malware Config

Signatures

  • UPX packed file 6 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Enumerates connected drives 3 TTPs 21 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Writes to the Master Boot Record (MBR) 1 TTPs 1 IoCs

    Bootkits write to the MBR to gain persistence at a level below the operating system.

    bootkitpersistence
  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery

Processes

  • C:\Users\Admin\AppData\Local\Temp\d38cdffa655bb08fbd96eaaf2604d40a_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\d38cdffa655bb08fbd96eaaf2604d40a_JaffaCakes118.exe"
    1⤵
    • Enumerates connected drives
    • Writes to the Master Boot Record (MBR)
    • System Location Discovery: System Language Discovery
    PID:2316

Network

  • flag-us
    DNS
    tei.brightbreeze.com
    d38cdffa655bb08fbd96eaaf2604d40a_JaffaCakes118.exe
    Remote address:
    8.8.8.8:53
    Request
    tei.brightbreeze.com
    IN A
    Response
    tei.brightbreeze.com
    IN A
    13.248.169.48
    tei.brightbreeze.com
    IN A
    76.223.54.146
  • flag-us
    DNS
    tei.brightbreeze.com
    d38cdffa655bb08fbd96eaaf2604d40a_JaffaCakes118.exe
    Remote address:
    8.8.8.8:53
    Request
    tei.brightbreeze.com
    IN A
    Response
    tei.brightbreeze.com
    IN A
    13.248.169.48
    tei.brightbreeze.com
    IN A
    76.223.54.146
  • flag-us
    POST
    http://tei.brightbreeze.com/trackedevent.aspx?ver=2.0.566.0&rnd=231
    d38cdffa655bb08fbd96eaaf2604d40a_JaffaCakes118.exe
    Remote address:
    13.248.169.48:80
    Request
    POST /trackedevent.aspx?ver=2.0.566.0&rnd=231 HTTP/1.1
    Content-Length: 1538
    Content-Type: application/x-www-form-urlencoded
    Cache-Control: no-cache, no-store
    Host: tei.brightbreeze.com
    User-Agent: Custom_56562_HttpClient/VER_STR_COMMA
  • flag-us
    POST
    http://tei.brightbreeze.com/trackedevent.aspx?ver=2.0.566.0&rnd=215
    d38cdffa655bb08fbd96eaaf2604d40a_JaffaCakes118.exe
    Remote address:
    13.248.169.48:80
    Request
    POST /trackedevent.aspx?ver=2.0.566.0&rnd=215 HTTP/1.1
    Content-Length: 1254
    Content-Type: application/x-www-form-urlencoded
    Cache-Control: no-cache, no-store
    Host: tei.brightbreeze.com
    User-Agent: Custom_56562_HttpClient/VER_STR_COMMA
  • flag-us
    POST
    http://tei.brightbreeze.com/trackedevent.aspx?ver=2.0.566.0&rnd=215
    d38cdffa655bb08fbd96eaaf2604d40a_JaffaCakes118.exe
    Remote address:
    13.248.169.48:80
    Request
    POST /trackedevent.aspx?ver=2.0.566.0&rnd=215 HTTP/1.1
    Content-Length: 1254
    Content-Type: application/x-www-form-urlencoded
    Cache-Control: no-cache, no-store
    Host: tei.brightbreeze.com
    User-Agent: Custom_56562_HttpClient/VER_STR_COMMA
  • flag-us
    POST
    http://tei.brightbreeze.com/trackedevent.aspx?ver=2.0.566.0&rnd=231
    d38cdffa655bb08fbd96eaaf2604d40a_JaffaCakes118.exe
    Remote address:
    13.248.169.48:80
    Request
    POST /trackedevent.aspx?ver=2.0.566.0&rnd=231 HTTP/1.1
    Content-Length: 1538
    Content-Type: application/x-www-form-urlencoded
    Cache-Control: no-cache, no-store
    Host: tei.brightbreeze.com
    User-Agent: Custom_56562_HttpClient/VER_STR_COMMA
  • flag-us
    POST
    http://tei.brightbreeze.com/trackedevent.aspx?ver=2.0.566.0&rnd=215
    d38cdffa655bb08fbd96eaaf2604d40a_JaffaCakes118.exe
    Remote address:
    13.248.169.48:80
    Request
    POST /trackedevent.aspx?ver=2.0.566.0&rnd=215 HTTP/1.1
    Content-Length: 1254
    Content-Type: application/x-www-form-urlencoded
    Cache-Control: no-cache, no-store
    Host: tei.brightbreeze.com
    User-Agent: Custom_56562_HttpClient/VER_STR_COMMA
  • flag-us
    POST
    http://tei.brightbreeze.com/trackedevent.aspx?ver=2.0.566.0&rnd=231
    d38cdffa655bb08fbd96eaaf2604d40a_JaffaCakes118.exe
    Remote address:
    13.248.169.48:80
    Request
    POST /trackedevent.aspx?ver=2.0.566.0&rnd=231 HTTP/1.1
    Content-Length: 1538
    Content-Type: application/x-www-form-urlencoded
    Cache-Control: no-cache, no-store
    Host: tei.brightbreeze.com
    User-Agent: Custom_56562_HttpClient/VER_STR_COMMA
  • flag-us
    POST
    http://tei.brightbreeze.com/trackedevent.aspx?ver=2.0.566.0&rnd=231
    d38cdffa655bb08fbd96eaaf2604d40a_JaffaCakes118.exe
    Remote address:
    13.248.169.48:80
    Request
    POST /trackedevent.aspx?ver=2.0.566.0&rnd=231 HTTP/1.1
    Content-Length: 1538
    Content-Type: application/x-www-form-urlencoded
    Cache-Control: no-cache, no-store
    Host: tei.brightbreeze.com
    User-Agent: Custom_56562_HttpClient/VER_STR_COMMA
  • flag-us
    POST
    http://tei.brightbreeze.com/trackedevent.aspx?ver=2.0.566.0&rnd=215
    d38cdffa655bb08fbd96eaaf2604d40a_JaffaCakes118.exe
    Remote address:
    13.248.169.48:80
    Request
    POST /trackedevent.aspx?ver=2.0.566.0&rnd=215 HTTP/1.1
    Content-Length: 1254
    Content-Type: application/x-www-form-urlencoded
    Cache-Control: no-cache, no-store
    Host: tei.brightbreeze.com
    User-Agent: Custom_56562_HttpClient/VER_STR_COMMA
  • flag-us
    POST
    http://tei.brightbreeze.com/trackedevent.aspx?ver=2.0.566.0&rnd=215
    d38cdffa655bb08fbd96eaaf2604d40a_JaffaCakes118.exe
    Remote address:
    13.248.169.48:80
    Request
    POST /trackedevent.aspx?ver=2.0.566.0&rnd=215 HTTP/1.1
    Content-Length: 1254
    Content-Type: application/x-www-form-urlencoded
    Cache-Control: no-cache, no-store
    Host: tei.brightbreeze.com
    User-Agent: Custom_56562_HttpClient/VER_STR_COMMA
  • flag-us
    POST
    http://tei.brightbreeze.com/trackedevent.aspx?ver=2.0.566.0&rnd=231
    d38cdffa655bb08fbd96eaaf2604d40a_JaffaCakes118.exe
    Remote address:
    13.248.169.48:80
    Request
    POST /trackedevent.aspx?ver=2.0.566.0&rnd=231 HTTP/1.1
    Content-Length: 1538
    Content-Type: application/x-www-form-urlencoded
    Cache-Control: no-cache, no-store
    Host: tei.brightbreeze.com
    User-Agent: Custom_56562_HttpClient/VER_STR_COMMA
  • flag-us
    POST
    http://tei.brightbreeze.com/trackedevent.aspx?ver=2.0.566.0&rnd=215
    d38cdffa655bb08fbd96eaaf2604d40a_JaffaCakes118.exe
    Remote address:
    13.248.169.48:80
    Request
    POST /trackedevent.aspx?ver=2.0.566.0&rnd=215 HTTP/1.1
    Content-Length: 1254
    Content-Type: application/x-www-form-urlencoded
    Cache-Control: no-cache, no-store
    Host: tei.brightbreeze.com
    User-Agent: Custom_56562_HttpClient/VER_STR_COMMA
  • flag-us
    POST
    http://tei.brightbreeze.com/trackedevent.aspx?ver=2.0.566.0&rnd=231
    d38cdffa655bb08fbd96eaaf2604d40a_JaffaCakes118.exe
    Remote address:
    13.248.169.48:80
    Request
    POST /trackedevent.aspx?ver=2.0.566.0&rnd=231 HTTP/1.1
    Content-Length: 1538
    Content-Type: application/x-www-form-urlencoded
    Cache-Control: no-cache, no-store
    Host: tei.brightbreeze.com
    User-Agent: Custom_56562_HttpClient/VER_STR_COMMA
  • flag-us
    POST
    http://tei.brightbreeze.com/trackedevent.aspx?ver=2.0.566.0&rnd=215
    d38cdffa655bb08fbd96eaaf2604d40a_JaffaCakes118.exe
    Remote address:
    13.248.169.48:80
    Request
    POST /trackedevent.aspx?ver=2.0.566.0&rnd=215 HTTP/1.1
    Content-Length: 1254
    Content-Type: application/x-www-form-urlencoded
    Cache-Control: no-cache, no-store
    Host: tei.brightbreeze.com
    User-Agent: Custom_56562_HttpClient/VER_STR_COMMA
  • flag-us
    POST
    http://tei.brightbreeze.com/trackedevent.aspx?ver=2.0.566.0&rnd=231
    d38cdffa655bb08fbd96eaaf2604d40a_JaffaCakes118.exe
    Remote address:
    13.248.169.48:80
    Request
    POST /trackedevent.aspx?ver=2.0.566.0&rnd=231 HTTP/1.1
    Content-Length: 1538
    Content-Type: application/x-www-form-urlencoded
    Cache-Control: no-cache, no-store
    Host: tei.brightbreeze.com
    User-Agent: Custom_56562_HttpClient/VER_STR_COMMA
  • flag-us
    POST
    http://tei.brightbreeze.com/trackedevent.aspx?ver=2.0.566.0&rnd=215
    d38cdffa655bb08fbd96eaaf2604d40a_JaffaCakes118.exe
    Remote address:
    13.248.169.48:80
    Request
    POST /trackedevent.aspx?ver=2.0.566.0&rnd=215 HTTP/1.1
    Content-Length: 1254
    Content-Type: application/x-www-form-urlencoded
    Cache-Control: no-cache, no-store
    Host: tei.brightbreeze.com
    User-Agent: Custom_56562_HttpClient/VER_STR_COMMA
  • flag-us
    POST
    http://tei.brightbreeze.com/trackedevent.aspx?ver=2.0.566.0&rnd=231
    d38cdffa655bb08fbd96eaaf2604d40a_JaffaCakes118.exe
    Remote address:
    13.248.169.48:80
    Request
    POST /trackedevent.aspx?ver=2.0.566.0&rnd=231 HTTP/1.1
    Content-Length: 1538
    Content-Type: application/x-www-form-urlencoded
    Cache-Control: no-cache, no-store
    Host: tei.brightbreeze.com
    User-Agent: Custom_56562_HttpClient/VER_STR_COMMA
  • flag-us
    POST
    http://tei.brightbreeze.com/trackedevent.aspx?ver=2.0.566.0&rnd=215
    d38cdffa655bb08fbd96eaaf2604d40a_JaffaCakes118.exe
    Remote address:
    13.248.169.48:80
    Request
    POST /trackedevent.aspx?ver=2.0.566.0&rnd=215 HTTP/1.1
    Content-Length: 1254
    Content-Type: application/x-www-form-urlencoded
    Cache-Control: no-cache, no-store
    Host: tei.brightbreeze.com
    User-Agent: Custom_56562_HttpClient/VER_STR_COMMA
  • flag-us
    POST
    http://tei.brightbreeze.com/trackedevent.aspx?ver=2.0.566.0&rnd=231
    d38cdffa655bb08fbd96eaaf2604d40a_JaffaCakes118.exe
    Remote address:
    13.248.169.48:80
    Request
    POST /trackedevent.aspx?ver=2.0.566.0&rnd=231 HTTP/1.1
    Content-Length: 1538
    Content-Type: application/x-www-form-urlencoded
    Cache-Control: no-cache, no-store
    Host: tei.brightbreeze.com
    User-Agent: Custom_56562_HttpClient/VER_STR_COMMA
  • flag-us
    POST
    http://tei.brightbreeze.com/trackedevent.aspx?ver=2.0.566.0&rnd=231
    d38cdffa655bb08fbd96eaaf2604d40a_JaffaCakes118.exe
    Remote address:
    13.248.169.48:80
    Request
    POST /trackedevent.aspx?ver=2.0.566.0&rnd=231 HTTP/1.1
    Content-Length: 1538
    Content-Type: application/x-www-form-urlencoded
    Cache-Control: no-cache, no-store
    Host: tei.brightbreeze.com
    User-Agent: Custom_56562_HttpClient/VER_STR_COMMA
  • flag-us
    POST
    http://tei.brightbreeze.com/trackedevent.aspx?ver=2.0.566.0&rnd=215
    d38cdffa655bb08fbd96eaaf2604d40a_JaffaCakes118.exe
    Remote address:
    13.248.169.48:80
    Request
    POST /trackedevent.aspx?ver=2.0.566.0&rnd=215 HTTP/1.1
    Content-Length: 1254
    Content-Type: application/x-www-form-urlencoded
    Cache-Control: no-cache, no-store
    Host: tei.brightbreeze.com
    User-Agent: Custom_56562_HttpClient/VER_STR_COMMA
  • flag-us
    POST
    http://tei.brightbreeze.com/trackedevent.aspx?ver=2.0.566.0&rnd=215
    d38cdffa655bb08fbd96eaaf2604d40a_JaffaCakes118.exe
    Remote address:
    13.248.169.48:80
    Request
    POST /trackedevent.aspx?ver=2.0.566.0&rnd=215 HTTP/1.1
    Content-Length: 1254
    Content-Type: application/x-www-form-urlencoded
    Cache-Control: no-cache, no-store
    Host: tei.brightbreeze.com
    User-Agent: Custom_56562_HttpClient/VER_STR_COMMA
  • flag-us
    POST
    http://tei.brightbreeze.com/trackedevent.aspx?ver=2.0.566.0&rnd=231
    d38cdffa655bb08fbd96eaaf2604d40a_JaffaCakes118.exe
    Remote address:
    13.248.169.48:80
    Request
    POST /trackedevent.aspx?ver=2.0.566.0&rnd=231 HTTP/1.1
    Content-Length: 1538
    Content-Type: application/x-www-form-urlencoded
    Cache-Control: no-cache, no-store
    Host: tei.brightbreeze.com
    User-Agent: Custom_56562_HttpClient/VER_STR_COMMA
  • flag-us
    POST
    http://tei.brightbreeze.com/trackedevent.aspx?ver=2.0.566.0&rnd=231
    d38cdffa655bb08fbd96eaaf2604d40a_JaffaCakes118.exe
    Remote address:
    13.248.169.48:80
    Request
    POST /trackedevent.aspx?ver=2.0.566.0&rnd=231 HTTP/1.1
    Content-Length: 1538
    Content-Type: application/x-www-form-urlencoded
    Cache-Control: no-cache, no-store
    Host: tei.brightbreeze.com
    User-Agent: Custom_56562_HttpClient/VER_STR_COMMA
  • flag-us
    POST
    http://tei.brightbreeze.com/trackedevent.aspx?ver=2.0.566.0&rnd=215
    d38cdffa655bb08fbd96eaaf2604d40a_JaffaCakes118.exe
    Remote address:
    13.248.169.48:80
    Request
    POST /trackedevent.aspx?ver=2.0.566.0&rnd=215 HTTP/1.1
    Content-Length: 1254
    Content-Type: application/x-www-form-urlencoded
    Cache-Control: no-cache, no-store
    Host: tei.brightbreeze.com
    User-Agent: Custom_56562_HttpClient/VER_STR_COMMA
  • flag-us
    POST
    http://tei.brightbreeze.com/trackedevent.aspx?ver=2.0.566.0&rnd=215
    d38cdffa655bb08fbd96eaaf2604d40a_JaffaCakes118.exe
    Remote address:
    13.248.169.48:80
    Request
    POST /trackedevent.aspx?ver=2.0.566.0&rnd=215 HTTP/1.1
    Content-Length: 1254
    Content-Type: application/x-www-form-urlencoded
    Cache-Control: no-cache, no-store
    Host: tei.brightbreeze.com
    User-Agent: Custom_56562_HttpClient/VER_STR_COMMA
  • flag-us
    POST
    http://tei.brightbreeze.com/trackedevent.aspx?ver=2.0.566.0&rnd=231
    d38cdffa655bb08fbd96eaaf2604d40a_JaffaCakes118.exe
    Remote address:
    13.248.169.48:80
    Request
    POST /trackedevent.aspx?ver=2.0.566.0&rnd=231 HTTP/1.1
    Content-Length: 1538
    Content-Type: application/x-www-form-urlencoded
    Cache-Control: no-cache, no-store
    Host: tei.brightbreeze.com
    User-Agent: Custom_56562_HttpClient/VER_STR_COMMA
  • flag-us
    POST
    http://tei.brightbreeze.com/trackedevent.aspx?ver=2.0.566.0&rnd=215
    d38cdffa655bb08fbd96eaaf2604d40a_JaffaCakes118.exe
    Remote address:
    13.248.169.48:80
    Request
    POST /trackedevent.aspx?ver=2.0.566.0&rnd=215 HTTP/1.1
    Content-Length: 1254
    Content-Type: application/x-www-form-urlencoded
    Cache-Control: no-cache, no-store
    Host: tei.brightbreeze.com
    User-Agent: Custom_56562_HttpClient/VER_STR_COMMA
  • flag-us
    POST
    http://tei.brightbreeze.com/trackedevent.aspx?ver=2.0.566.0&rnd=231
    d38cdffa655bb08fbd96eaaf2604d40a_JaffaCakes118.exe
    Remote address:
    13.248.169.48:80
    Request
    POST /trackedevent.aspx?ver=2.0.566.0&rnd=231 HTTP/1.1
    Content-Length: 1538
    Content-Type: application/x-www-form-urlencoded
    Cache-Control: no-cache, no-store
    Host: tei.brightbreeze.com
    User-Agent: Custom_56562_HttpClient/VER_STR_COMMA
  • flag-us
    POST
    http://tei.brightbreeze.com/trackedevent.aspx?ver=2.0.566.0&rnd=215
    d38cdffa655bb08fbd96eaaf2604d40a_JaffaCakes118.exe
    Remote address:
    13.248.169.48:80
    Request
    POST /trackedevent.aspx?ver=2.0.566.0&rnd=215 HTTP/1.1
    Content-Length: 1254
    Content-Type: application/x-www-form-urlencoded
    Cache-Control: no-cache, no-store
    Host: tei.brightbreeze.com
    User-Agent: Custom_56562_HttpClient/VER_STR_COMMA
  • flag-us
    POST
    http://tei.brightbreeze.com/trackedevent.aspx?ver=2.0.566.0&rnd=231
    d38cdffa655bb08fbd96eaaf2604d40a_JaffaCakes118.exe
    Remote address:
    13.248.169.48:80
    Request
    POST /trackedevent.aspx?ver=2.0.566.0&rnd=231 HTTP/1.1
    Content-Length: 1538
    Content-Type: application/x-www-form-urlencoded
    Cache-Control: no-cache, no-store
    Host: tei.brightbreeze.com
    User-Agent: Custom_56562_HttpClient/VER_STR_COMMA
  • flag-us
    POST
    http://tei.brightbreeze.com/trackedevent.aspx?ver=2.0.566.0&rnd=215
    d38cdffa655bb08fbd96eaaf2604d40a_JaffaCakes118.exe
    Remote address:
    13.248.169.48:80
    Request
    POST /trackedevent.aspx?ver=2.0.566.0&rnd=215 HTTP/1.1
    Content-Length: 1254
    Content-Type: application/x-www-form-urlencoded
    Cache-Control: no-cache, no-store
    Host: tei.brightbreeze.com
    User-Agent: Custom_56562_HttpClient/VER_STR_COMMA
  • flag-us
    POST
    http://tei.brightbreeze.com/trackedevent.aspx?ver=2.0.566.0&rnd=231
    d38cdffa655bb08fbd96eaaf2604d40a_JaffaCakes118.exe
    Remote address:
    13.248.169.48:80
    Request
    POST /trackedevent.aspx?ver=2.0.566.0&rnd=231 HTTP/1.1
    Content-Length: 1538
    Content-Type: application/x-www-form-urlencoded
    Cache-Control: no-cache, no-store
    Host: tei.brightbreeze.com
    User-Agent: Custom_56562_HttpClient/VER_STR_COMMA
  • flag-us
    POST
    http://tei.brightbreeze.com/trackedevent.aspx?ver=2.0.566.0&rnd=231
    d38cdffa655bb08fbd96eaaf2604d40a_JaffaCakes118.exe
    Remote address:
    13.248.169.48:80
    Request
    POST /trackedevent.aspx?ver=2.0.566.0&rnd=231 HTTP/1.1
    Content-Length: 1538
    Content-Type: application/x-www-form-urlencoded
    Cache-Control: no-cache, no-store
    Host: tei.brightbreeze.com
    User-Agent: Custom_56562_HttpClient/VER_STR_COMMA
  • flag-us
    POST
    http://tei.brightbreeze.com/trackedevent.aspx?ver=2.0.566.0&rnd=215
    d38cdffa655bb08fbd96eaaf2604d40a_JaffaCakes118.exe
    Remote address:
    13.248.169.48:80
    Request
    POST /trackedevent.aspx?ver=2.0.566.0&rnd=215 HTTP/1.1
    Content-Length: 1254
    Content-Type: application/x-www-form-urlencoded
    Cache-Control: no-cache, no-store
    Host: tei.brightbreeze.com
    User-Agent: Custom_56562_HttpClient/VER_STR_COMMA
  • flag-us
    POST
    http://tei.brightbreeze.com/trackedevent.aspx?ver=2.0.566.0&rnd=215
    d38cdffa655bb08fbd96eaaf2604d40a_JaffaCakes118.exe
    Remote address:
    13.248.169.48:80
    Request
    POST /trackedevent.aspx?ver=2.0.566.0&rnd=215 HTTP/1.1
    Content-Length: 1254
    Content-Type: application/x-www-form-urlencoded
    Cache-Control: no-cache, no-store
    Host: tei.brightbreeze.com
    User-Agent: Custom_56562_HttpClient/VER_STR_COMMA
  • flag-us
    POST
    http://tei.brightbreeze.com/trackedevent.aspx?ver=2.0.566.0&rnd=231
    d38cdffa655bb08fbd96eaaf2604d40a_JaffaCakes118.exe
    Remote address:
    13.248.169.48:80
    Request
    POST /trackedevent.aspx?ver=2.0.566.0&rnd=231 HTTP/1.1
    Content-Length: 1538
    Content-Type: application/x-www-form-urlencoded
    Cache-Control: no-cache, no-store
    Host: tei.brightbreeze.com
    User-Agent: Custom_56562_HttpClient/VER_STR_COMMA
  • flag-us
    POST
    http://tei.brightbreeze.com/trackedevent.aspx?ver=2.0.566.0&rnd=215
    d38cdffa655bb08fbd96eaaf2604d40a_JaffaCakes118.exe
    Remote address:
    13.248.169.48:80
    Request
    POST /trackedevent.aspx?ver=2.0.566.0&rnd=215 HTTP/1.1
    Content-Length: 1254
    Content-Type: application/x-www-form-urlencoded
    Cache-Control: no-cache, no-store
    Host: tei.brightbreeze.com
    User-Agent: Custom_56562_HttpClient/VER_STR_COMMA
  • flag-us
    POST
    http://tei.brightbreeze.com/trackedevent.aspx?ver=2.0.566.0&rnd=231
    d38cdffa655bb08fbd96eaaf2604d40a_JaffaCakes118.exe
    Remote address:
    13.248.169.48:80
    Request
    POST /trackedevent.aspx?ver=2.0.566.0&rnd=231 HTTP/1.1
    Content-Length: 1538
    Content-Type: application/x-www-form-urlencoded
    Cache-Control: no-cache, no-store
    Host: tei.brightbreeze.com
    User-Agent: Custom_56562_HttpClient/VER_STR_COMMA
  • flag-us
    POST
    http://tei.brightbreeze.com/trackedevent.aspx?ver=2.0.566.0&rnd=215
    d38cdffa655bb08fbd96eaaf2604d40a_JaffaCakes118.exe
    Remote address:
    13.248.169.48:80
    Request
    POST /trackedevent.aspx?ver=2.0.566.0&rnd=215 HTTP/1.1
    Content-Length: 1254
    Content-Type: application/x-www-form-urlencoded
    Cache-Control: no-cache, no-store
    Host: tei.brightbreeze.com
    User-Agent: Custom_56562_HttpClient/VER_STR_COMMA
  • flag-us
    POST
    http://tei.brightbreeze.com/trackedevent.aspx?ver=2.0.566.0&rnd=231
    d38cdffa655bb08fbd96eaaf2604d40a_JaffaCakes118.exe
    Remote address:
    13.248.169.48:80
    Request
    POST /trackedevent.aspx?ver=2.0.566.0&rnd=231 HTTP/1.1
    Content-Length: 1538
    Content-Type: application/x-www-form-urlencoded
    Cache-Control: no-cache, no-store
    Host: tei.brightbreeze.com
    User-Agent: Custom_56562_HttpClient/VER_STR_COMMA
  • flag-us
    POST
    http://tei.brightbreeze.com/trackedevent.aspx?ver=2.0.566.0&rnd=893
    d38cdffa655bb08fbd96eaaf2604d40a_JaffaCakes118.exe
    Remote address:
    13.248.169.48:80
    Request
    POST /trackedevent.aspx?ver=2.0.566.0&rnd=893 HTTP/1.1
    Content-Length: 1292
    Content-Type: application/x-www-form-urlencoded
    Cache-Control: no-cache, no-store
    Host: tei.brightbreeze.com
    User-Agent: Custom_56562_HttpClient/VER_STR_COMMA
  • flag-us
    POST
    http://tei.brightbreeze.com/trackedevent.aspx?ver=2.0.566.0&rnd=893
    d38cdffa655bb08fbd96eaaf2604d40a_JaffaCakes118.exe
    Remote address:
    13.248.169.48:80
    Request
    POST /trackedevent.aspx?ver=2.0.566.0&rnd=893 HTTP/1.1
    Content-Length: 1292
    Content-Type: application/x-www-form-urlencoded
    Cache-Control: no-cache, no-store
    Host: tei.brightbreeze.com
    User-Agent: Custom_56562_HttpClient/VER_STR_COMMA
  • flag-us
    POST
    http://tei.brightbreeze.com/trackedevent.aspx?ver=2.0.566.0&rnd=893
    d38cdffa655bb08fbd96eaaf2604d40a_JaffaCakes118.exe
    Remote address:
    13.248.169.48:80
    Request
    POST /trackedevent.aspx?ver=2.0.566.0&rnd=893 HTTP/1.1
    Content-Length: 1292
    Content-Type: application/x-www-form-urlencoded
    Cache-Control: no-cache, no-store
    Host: tei.brightbreeze.com
    User-Agent: Custom_56562_HttpClient/VER_STR_COMMA
  • flag-us
    POST
    http://tei.brightbreeze.com/trackedevent.aspx?ver=2.0.566.0&rnd=893
    d38cdffa655bb08fbd96eaaf2604d40a_JaffaCakes118.exe
    Remote address:
    13.248.169.48:80
    Request
    POST /trackedevent.aspx?ver=2.0.566.0&rnd=893 HTTP/1.1
    Content-Length: 1292
    Content-Type: application/x-www-form-urlencoded
    Cache-Control: no-cache, no-store
    Host: tei.brightbreeze.com
    User-Agent: Custom_56562_HttpClient/VER_STR_COMMA
  • flag-us
    POST
    http://tei.brightbreeze.com/trackedevent.aspx?ver=2.0.566.0&rnd=893
    d38cdffa655bb08fbd96eaaf2604d40a_JaffaCakes118.exe
    Remote address:
    13.248.169.48:80
    Request
    POST /trackedevent.aspx?ver=2.0.566.0&rnd=893 HTTP/1.1
    Content-Length: 1292
    Content-Type: application/x-www-form-urlencoded
    Cache-Control: no-cache, no-store
    Host: tei.brightbreeze.com
    User-Agent: Custom_56562_HttpClient/VER_STR_COMMA
  • flag-us
    POST
    http://tei.brightbreeze.com/trackedevent.aspx?ver=2.0.566.0&rnd=893
    d38cdffa655bb08fbd96eaaf2604d40a_JaffaCakes118.exe
    Remote address:
    13.248.169.48:80
    Request
    POST /trackedevent.aspx?ver=2.0.566.0&rnd=893 HTTP/1.1
    Content-Length: 1292
    Content-Type: application/x-www-form-urlencoded
    Cache-Control: no-cache, no-store
    Host: tei.brightbreeze.com
    User-Agent: Custom_56562_HttpClient/VER_STR_COMMA
  • flag-us
    POST
    http://tei.brightbreeze.com/trackedevent.aspx?ver=2.0.566.0&rnd=893
    d38cdffa655bb08fbd96eaaf2604d40a_JaffaCakes118.exe
    Remote address:
    13.248.169.48:80
    Request
    POST /trackedevent.aspx?ver=2.0.566.0&rnd=893 HTTP/1.1
    Content-Length: 1292
    Content-Type: application/x-www-form-urlencoded
    Cache-Control: no-cache, no-store
    Host: tei.brightbreeze.com
    User-Agent: Custom_56562_HttpClient/VER_STR_COMMA
  • flag-us
    POST
    http://tei.brightbreeze.com/trackedevent.aspx?ver=2.0.566.0&rnd=893
    d38cdffa655bb08fbd96eaaf2604d40a_JaffaCakes118.exe
    Remote address:
    13.248.169.48:80
    Request
    POST /trackedevent.aspx?ver=2.0.566.0&rnd=893 HTTP/1.1
    Content-Length: 1292
    Content-Type: application/x-www-form-urlencoded
    Cache-Control: no-cache, no-store
    Host: tei.brightbreeze.com
    User-Agent: Custom_56562_HttpClient/VER_STR_COMMA
  • flag-us
    POST
    http://tei.brightbreeze.com/trackedevent.aspx?ver=2.0.566.0&rnd=893
    d38cdffa655bb08fbd96eaaf2604d40a_JaffaCakes118.exe
    Remote address:
    13.248.169.48:80
    Request
    POST /trackedevent.aspx?ver=2.0.566.0&rnd=893 HTTP/1.1
    Content-Length: 1292
    Content-Type: application/x-www-form-urlencoded
    Cache-Control: no-cache, no-store
    Host: tei.brightbreeze.com
    User-Agent: Custom_56562_HttpClient/VER_STR_COMMA
  • flag-us
    POST
    http://tei.brightbreeze.com/trackedevent.aspx?ver=2.0.566.0&rnd=893
    d38cdffa655bb08fbd96eaaf2604d40a_JaffaCakes118.exe
    Remote address:
    13.248.169.48:80
    Request
    POST /trackedevent.aspx?ver=2.0.566.0&rnd=893 HTTP/1.1
    Content-Length: 1292
    Content-Type: application/x-www-form-urlencoded
    Cache-Control: no-cache, no-store
    Host: tei.brightbreeze.com
    User-Agent: Custom_56562_HttpClient/VER_STR_COMMA
  • flag-us
    POST
    http://tei.brightbreeze.com/trackedevent.aspx?ver=2.0.566.0&rnd=893
    d38cdffa655bb08fbd96eaaf2604d40a_JaffaCakes118.exe
    Remote address:
    13.248.169.48:80
    Request
    POST /trackedevent.aspx?ver=2.0.566.0&rnd=893 HTTP/1.1
    Content-Length: 1292
    Content-Type: application/x-www-form-urlencoded
    Cache-Control: no-cache, no-store
    Host: tei.brightbreeze.com
    User-Agent: Custom_56562_HttpClient/VER_STR_COMMA
  • flag-us
    POST
    http://tei.brightbreeze.com/trackedevent.aspx?ver=2.0.566.0&rnd=893
    d38cdffa655bb08fbd96eaaf2604d40a_JaffaCakes118.exe
    Remote address:
    13.248.169.48:80
    Request
    POST /trackedevent.aspx?ver=2.0.566.0&rnd=893 HTTP/1.1
    Content-Length: 1292
    Content-Type: application/x-www-form-urlencoded
    Cache-Control: no-cache, no-store
    Host: tei.brightbreeze.com
    User-Agent: Custom_56562_HttpClient/VER_STR_COMMA
  • flag-us
    POST
    http://tei.brightbreeze.com/trackedevent.aspx?ver=2.0.566.0&rnd=893
    d38cdffa655bb08fbd96eaaf2604d40a_JaffaCakes118.exe
    Remote address:
    13.248.169.48:80
    Request
    POST /trackedevent.aspx?ver=2.0.566.0&rnd=893 HTTP/1.1
    Content-Length: 1292
    Content-Type: application/x-www-form-urlencoded
    Cache-Control: no-cache, no-store
    Host: tei.brightbreeze.com
    User-Agent: Custom_56562_HttpClient/VER_STR_COMMA
  • flag-us
    POST
    http://tei.brightbreeze.com/trackedevent.aspx?ver=2.0.566.0&rnd=893
    d38cdffa655bb08fbd96eaaf2604d40a_JaffaCakes118.exe
    Remote address:
    13.248.169.48:80
    Request
    POST /trackedevent.aspx?ver=2.0.566.0&rnd=893 HTTP/1.1
    Content-Length: 1292
    Content-Type: application/x-www-form-urlencoded
    Cache-Control: no-cache, no-store
    Host: tei.brightbreeze.com
    User-Agent: Custom_56562_HttpClient/VER_STR_COMMA
  • flag-us
    POST
    http://tei.brightbreeze.com/trackedevent.aspx?ver=2.0.566.0&rnd=893
    d38cdffa655bb08fbd96eaaf2604d40a_JaffaCakes118.exe
    Remote address:
    13.248.169.48:80
    Request
    POST /trackedevent.aspx?ver=2.0.566.0&rnd=893 HTTP/1.1
    Content-Length: 1292
    Content-Type: application/x-www-form-urlencoded
    Cache-Control: no-cache, no-store
    Host: tei.brightbreeze.com
    User-Agent: Custom_56562_HttpClient/VER_STR_COMMA
  • flag-us
    POST
    http://tei.brightbreeze.com/trackedevent.aspx?ver=2.0.566.0&rnd=893
    d38cdffa655bb08fbd96eaaf2604d40a_JaffaCakes118.exe
    Remote address:
    13.248.169.48:80
    Request
    POST /trackedevent.aspx?ver=2.0.566.0&rnd=893 HTTP/1.1
    Content-Length: 1292
    Content-Type: application/x-www-form-urlencoded
    Cache-Control: no-cache, no-store
    Host: tei.brightbreeze.com
    User-Agent: Custom_56562_HttpClient/VER_STR_COMMA
  • flag-us
    POST
    http://tei.brightbreeze.com/trackedevent.aspx?ver=2.0.566.0&rnd=893
    d38cdffa655bb08fbd96eaaf2604d40a_JaffaCakes118.exe
    Remote address:
    13.248.169.48:80
    Request
    POST /trackedevent.aspx?ver=2.0.566.0&rnd=893 HTTP/1.1
    Content-Length: 1292
    Content-Type: application/x-www-form-urlencoded
    Cache-Control: no-cache, no-store
    Host: tei.brightbreeze.com
    User-Agent: Custom_56562_HttpClient/VER_STR_COMMA
  • flag-us
    POST
    http://tei.brightbreeze.com/trackedevent.aspx?ver=2.0.566.0&rnd=893
    d38cdffa655bb08fbd96eaaf2604d40a_JaffaCakes118.exe
    Remote address:
    13.248.169.48:80
    Request
    POST /trackedevent.aspx?ver=2.0.566.0&rnd=893 HTTP/1.1
    Content-Length: 1292
    Content-Type: application/x-www-form-urlencoded
    Cache-Control: no-cache, no-store
    Host: tei.brightbreeze.com
    User-Agent: Custom_56562_HttpClient/VER_STR_COMMA
  • flag-us
    POST
    http://tei.brightbreeze.com/trackedevent.aspx?ver=2.0.566.0&rnd=893
    d38cdffa655bb08fbd96eaaf2604d40a_JaffaCakes118.exe
    Remote address:
    13.248.169.48:80
    Request
    POST /trackedevent.aspx?ver=2.0.566.0&rnd=893 HTTP/1.1
    Content-Length: 1292
    Content-Type: application/x-www-form-urlencoded
    Cache-Control: no-cache, no-store
    Host: tei.brightbreeze.com
    User-Agent: Custom_56562_HttpClient/VER_STR_COMMA
  • flag-us
    POST
    http://tei.brightbreeze.com/trackedevent.aspx?ver=2.0.566.0&rnd=893
    d38cdffa655bb08fbd96eaaf2604d40a_JaffaCakes118.exe
    Remote address:
    13.248.169.48:80
    Request
    POST /trackedevent.aspx?ver=2.0.566.0&rnd=893 HTTP/1.1
    Content-Length: 1292
    Content-Type: application/x-www-form-urlencoded
    Cache-Control: no-cache, no-store
    Host: tei.brightbreeze.com
    User-Agent: Custom_56562_HttpClient/VER_STR_COMMA
  • 13.248.169.48:80
    http://tei.brightbreeze.com/trackedevent.aspx?ver=2.0.566.0&rnd=231
    http
    d38cdffa655bb08fbd96eaaf2604d40a_JaffaCakes118.exe
    2.0kB
     172 B
     5
    4

    HTTP Request

    POST http://tei.brightbreeze.com/trackedevent.aspx?ver=2.0.566.0&rnd=231
  • 13.248.169.48:80
    http://tei.brightbreeze.com/trackedevent.aspx?ver=2.0.566.0&rnd=215
    http
    d38cdffa655bb08fbd96eaaf2604d40a_JaffaCakes118.exe
    1.8kB
     252 B
     6
    6

    HTTP Request

    POST http://tei.brightbreeze.com/trackedevent.aspx?ver=2.0.566.0&rnd=215
  • 13.248.169.48:80
    http://tei.brightbreeze.com/trackedevent.aspx?ver=2.0.566.0&rnd=215
    http
    d38cdffa655bb08fbd96eaaf2604d40a_JaffaCakes118.exe
    1.8kB
     252 B
     6
    6

    HTTP Request

    POST http://tei.brightbreeze.com/trackedevent.aspx?ver=2.0.566.0&rnd=215
  • 13.248.169.48:80
    http://tei.brightbreeze.com/trackedevent.aspx?ver=2.0.566.0&rnd=231
    http
    d38cdffa655bb08fbd96eaaf2604d40a_JaffaCakes118.exe
    2.0kB
     212 B
     5
    5

    HTTP Request

    POST http://tei.brightbreeze.com/trackedevent.aspx?ver=2.0.566.0&rnd=231
  • 13.248.169.48:80
    http://tei.brightbreeze.com/trackedevent.aspx?ver=2.0.566.0&rnd=215
    http
    d38cdffa655bb08fbd96eaaf2604d40a_JaffaCakes118.exe
    1.8kB
     252 B
     6
    6

    HTTP Request

    POST http://tei.brightbreeze.com/trackedevent.aspx?ver=2.0.566.0&rnd=215
  • 13.248.169.48:80
    http://tei.brightbreeze.com/trackedevent.aspx?ver=2.0.566.0&rnd=231
    http
    d38cdffa655bb08fbd96eaaf2604d40a_JaffaCakes118.exe
    2.0kB
     212 B
     5
    5

    HTTP Request

    POST http://tei.brightbreeze.com/trackedevent.aspx?ver=2.0.566.0&rnd=231
  • 13.248.169.48:80
    http://tei.brightbreeze.com/trackedevent.aspx?ver=2.0.566.0&rnd=215
    http
    d38cdffa655bb08fbd96eaaf2604d40a_JaffaCakes118.exe
    1.8kB
     252 B
     6
    6

    HTTP Request

    POST http://tei.brightbreeze.com/trackedevent.aspx?ver=2.0.566.0&rnd=215
  • 13.248.169.48:80
    http://tei.brightbreeze.com/trackedevent.aspx?ver=2.0.566.0&rnd=231
    http
    d38cdffa655bb08fbd96eaaf2604d40a_JaffaCakes118.exe
    2.0kB
     172 B
     5
    4

    HTTP Request

    POST http://tei.brightbreeze.com/trackedevent.aspx?ver=2.0.566.0&rnd=231
  • 13.248.169.48:80
    http://tei.brightbreeze.com/trackedevent.aspx?ver=2.0.566.0&rnd=215
    http
    d38cdffa655bb08fbd96eaaf2604d40a_JaffaCakes118.exe
    1.8kB
     252 B
     6
    6

    HTTP Request

    POST http://tei.brightbreeze.com/trackedevent.aspx?ver=2.0.566.0&rnd=215
  • 13.248.169.48:80
    http://tei.brightbreeze.com/trackedevent.aspx?ver=2.0.566.0&rnd=231
    http
    d38cdffa655bb08fbd96eaaf2604d40a_JaffaCakes118.exe
    2.0kB
     172 B
     5
    4

    HTTP Request

    POST http://tei.brightbreeze.com/trackedevent.aspx?ver=2.0.566.0&rnd=231
  • 13.248.169.48:80
    http://tei.brightbreeze.com/trackedevent.aspx?ver=2.0.566.0&rnd=215
    http
    d38cdffa655bb08fbd96eaaf2604d40a_JaffaCakes118.exe
    1.8kB
     252 B
     6
    6

    HTTP Request

    POST http://tei.brightbreeze.com/trackedevent.aspx?ver=2.0.566.0&rnd=215
  • 13.248.169.48:80
    http://tei.brightbreeze.com/trackedevent.aspx?ver=2.0.566.0&rnd=231
    http
    d38cdffa655bb08fbd96eaaf2604d40a_JaffaCakes118.exe
    2.0kB
     212 B
     5
    5

    HTTP Request

    POST http://tei.brightbreeze.com/trackedevent.aspx?ver=2.0.566.0&rnd=231
  • 13.248.169.48:80
    http://tei.brightbreeze.com/trackedevent.aspx?ver=2.0.566.0&rnd=215
    http
    d38cdffa655bb08fbd96eaaf2604d40a_JaffaCakes118.exe
    1.8kB
     252 B
     6
    6

    HTTP Request

    POST http://tei.brightbreeze.com/trackedevent.aspx?ver=2.0.566.0&rnd=215
  • 13.248.169.48:80
    http://tei.brightbreeze.com/trackedevent.aspx?ver=2.0.566.0&rnd=231
    http
    d38cdffa655bb08fbd96eaaf2604d40a_JaffaCakes118.exe
    2.0kB
     172 B
     5
    4

    HTTP Request

    POST http://tei.brightbreeze.com/trackedevent.aspx?ver=2.0.566.0&rnd=231
  • 13.248.169.48:80
    http://tei.brightbreeze.com/trackedevent.aspx?ver=2.0.566.0&rnd=215
    http
    d38cdffa655bb08fbd96eaaf2604d40a_JaffaCakes118.exe
    1.8kB
     252 B
     6
    6

    HTTP Request

    POST http://tei.brightbreeze.com/trackedevent.aspx?ver=2.0.566.0&rnd=215
  • 13.248.169.48:80
    http://tei.brightbreeze.com/trackedevent.aspx?ver=2.0.566.0&rnd=231
    http
    d38cdffa655bb08fbd96eaaf2604d40a_JaffaCakes118.exe
    2.0kB
     172 B
     5
    4

    HTTP Request

    POST http://tei.brightbreeze.com/trackedevent.aspx?ver=2.0.566.0&rnd=231
  • 13.248.169.48:80
    http://tei.brightbreeze.com/trackedevent.aspx?ver=2.0.566.0&rnd=215
    http
    d38cdffa655bb08fbd96eaaf2604d40a_JaffaCakes118.exe
    1.8kB
     252 B
     6
    6

    HTTP Request

    POST http://tei.brightbreeze.com/trackedevent.aspx?ver=2.0.566.0&rnd=215
  • 13.248.169.48:80
    http://tei.brightbreeze.com/trackedevent.aspx?ver=2.0.566.0&rnd=231
    http
    d38cdffa655bb08fbd96eaaf2604d40a_JaffaCakes118.exe
    2.0kB
     172 B
     5
    4

    HTTP Request

    POST http://tei.brightbreeze.com/trackedevent.aspx?ver=2.0.566.0&rnd=231
  • 13.248.169.48:80
    http://tei.brightbreeze.com/trackedevent.aspx?ver=2.0.566.0&rnd=231
    http
    d38cdffa655bb08fbd96eaaf2604d40a_JaffaCakes118.exe
    2.0kB
     172 B
     5
    4

    HTTP Request

    POST http://tei.brightbreeze.com/trackedevent.aspx?ver=2.0.566.0&rnd=231
  • 13.248.169.48:80
    http://tei.brightbreeze.com/trackedevent.aspx?ver=2.0.566.0&rnd=215
    http
    d38cdffa655bb08fbd96eaaf2604d40a_JaffaCakes118.exe
    1.8kB
     252 B
     6
    6

    HTTP Request

    POST http://tei.brightbreeze.com/trackedevent.aspx?ver=2.0.566.0&rnd=215
  • 13.248.169.48:80
    http://tei.brightbreeze.com/trackedevent.aspx?ver=2.0.566.0&rnd=215
    http
    d38cdffa655bb08fbd96eaaf2604d40a_JaffaCakes118.exe
    3.1kB
     212 B
     7
    5

    HTTP Request

    POST http://tei.brightbreeze.com/trackedevent.aspx?ver=2.0.566.0&rnd=215
  • 13.248.169.48:80
    http://tei.brightbreeze.com/trackedevent.aspx?ver=2.0.566.0&rnd=231
    http
    d38cdffa655bb08fbd96eaaf2604d40a_JaffaCakes118.exe
    2.0kB
     172 B
     5
    4

    HTTP Request

    POST http://tei.brightbreeze.com/trackedevent.aspx?ver=2.0.566.0&rnd=231
  • 13.248.169.48:80
    http://tei.brightbreeze.com/trackedevent.aspx?ver=2.0.566.0&rnd=231
    http
    d38cdffa655bb08fbd96eaaf2604d40a_JaffaCakes118.exe
    2.0kB
     172 B
     5
    4

    HTTP Request

    POST http://tei.brightbreeze.com/trackedevent.aspx?ver=2.0.566.0&rnd=231
  • 13.248.169.48:80
    http://tei.brightbreeze.com/trackedevent.aspx?ver=2.0.566.0&rnd=215
    http
    d38cdffa655bb08fbd96eaaf2604d40a_JaffaCakes118.exe
    1.8kB
     252 B
     6
    6

    HTTP Request

    POST http://tei.brightbreeze.com/trackedevent.aspx?ver=2.0.566.0&rnd=215
  • 13.248.169.48:80
    http://tei.brightbreeze.com/trackedevent.aspx?ver=2.0.566.0&rnd=215
    http
    d38cdffa655bb08fbd96eaaf2604d40a_JaffaCakes118.exe
    3.1kB
     212 B
     7
    5

    HTTP Request

    POST http://tei.brightbreeze.com/trackedevent.aspx?ver=2.0.566.0&rnd=215
  • 13.248.169.48:80
    http://tei.brightbreeze.com/trackedevent.aspx?ver=2.0.566.0&rnd=231
    http
    d38cdffa655bb08fbd96eaaf2604d40a_JaffaCakes118.exe
    2.0kB
     172 B
     5
    4

    HTTP Request

    POST http://tei.brightbreeze.com/trackedevent.aspx?ver=2.0.566.0&rnd=231
  • 13.248.169.48:80
    http://tei.brightbreeze.com/trackedevent.aspx?ver=2.0.566.0&rnd=215
    http
    d38cdffa655bb08fbd96eaaf2604d40a_JaffaCakes118.exe
    1.8kB
     252 B
     6
    6

    HTTP Request

    POST http://tei.brightbreeze.com/trackedevent.aspx?ver=2.0.566.0&rnd=215
  • 13.248.169.48:80
    http://tei.brightbreeze.com/trackedevent.aspx?ver=2.0.566.0&rnd=231
    http
    d38cdffa655bb08fbd96eaaf2604d40a_JaffaCakes118.exe
    2.0kB
     172 B
     5
    4

    HTTP Request

    POST http://tei.brightbreeze.com/trackedevent.aspx?ver=2.0.566.0&rnd=231
  • 13.248.169.48:80
    http://tei.brightbreeze.com/trackedevent.aspx?ver=2.0.566.0&rnd=215
    http
    d38cdffa655bb08fbd96eaaf2604d40a_JaffaCakes118.exe
    3.1kB
     212 B
     7
    5

    HTTP Request

    POST http://tei.brightbreeze.com/trackedevent.aspx?ver=2.0.566.0&rnd=215
  • 13.248.169.48:80
    http://tei.brightbreeze.com/trackedevent.aspx?ver=2.0.566.0&rnd=231
    http
    d38cdffa655bb08fbd96eaaf2604d40a_JaffaCakes118.exe
    2.0kB
     172 B
     5
    4

    HTTP Request

    POST http://tei.brightbreeze.com/trackedevent.aspx?ver=2.0.566.0&rnd=231
  • 13.248.169.48:80
    http://tei.brightbreeze.com/trackedevent.aspx?ver=2.0.566.0&rnd=215
    http
    d38cdffa655bb08fbd96eaaf2604d40a_JaffaCakes118.exe
    1.8kB
     252 B
     6
    6

    HTTP Request

    POST http://tei.brightbreeze.com/trackedevent.aspx?ver=2.0.566.0&rnd=215
  • 13.248.169.48:80
    http://tei.brightbreeze.com/trackedevent.aspx?ver=2.0.566.0&rnd=231
    http
    d38cdffa655bb08fbd96eaaf2604d40a_JaffaCakes118.exe
    2.0kB
     172 B
     5
    4

    HTTP Request

    POST http://tei.brightbreeze.com/trackedevent.aspx?ver=2.0.566.0&rnd=231
  • 13.248.169.48:80
    http://tei.brightbreeze.com/trackedevent.aspx?ver=2.0.566.0&rnd=231
    http
    d38cdffa655bb08fbd96eaaf2604d40a_JaffaCakes118.exe
    2.0kB
     172 B
     5
    4

    HTTP Request

    POST http://tei.brightbreeze.com/trackedevent.aspx?ver=2.0.566.0&rnd=231
  • 13.248.169.48:80
    http://tei.brightbreeze.com/trackedevent.aspx?ver=2.0.566.0&rnd=215
    http
    d38cdffa655bb08fbd96eaaf2604d40a_JaffaCakes118.exe
    1.8kB
     252 B
     6
    6

    HTTP Request

    POST http://tei.brightbreeze.com/trackedevent.aspx?ver=2.0.566.0&rnd=215
  • 13.248.169.48:80
    http://tei.brightbreeze.com/trackedevent.aspx?ver=2.0.566.0&rnd=215
    http
    d38cdffa655bb08fbd96eaaf2604d40a_JaffaCakes118.exe
    1.8kB
     252 B
     6
    6

    HTTP Request

    POST http://tei.brightbreeze.com/trackedevent.aspx?ver=2.0.566.0&rnd=215
  • 13.248.169.48:80
    http://tei.brightbreeze.com/trackedevent.aspx?ver=2.0.566.0&rnd=231
    http
    d38cdffa655bb08fbd96eaaf2604d40a_JaffaCakes118.exe
    2.0kB
     172 B
     5
    4

    HTTP Request

    POST http://tei.brightbreeze.com/trackedevent.aspx?ver=2.0.566.0&rnd=231
  • 13.248.169.48:80
    http://tei.brightbreeze.com/trackedevent.aspx?ver=2.0.566.0&rnd=215
    http
    d38cdffa655bb08fbd96eaaf2604d40a_JaffaCakes118.exe
    1.8kB
     252 B
     6
    6

    HTTP Request

    POST http://tei.brightbreeze.com/trackedevent.aspx?ver=2.0.566.0&rnd=215
  • 13.248.169.48:80
    http://tei.brightbreeze.com/trackedevent.aspx?ver=2.0.566.0&rnd=231
    http
    d38cdffa655bb08fbd96eaaf2604d40a_JaffaCakes118.exe
    2.0kB
     212 B
     5
    5

    HTTP Request

    POST http://tei.brightbreeze.com/trackedevent.aspx?ver=2.0.566.0&rnd=231
  • 13.248.169.48:80
    http://tei.brightbreeze.com/trackedevent.aspx?ver=2.0.566.0&rnd=215
    http
    d38cdffa655bb08fbd96eaaf2604d40a_JaffaCakes118.exe
    1.8kB
     252 B
     6
    6

    HTTP Request

    POST http://tei.brightbreeze.com/trackedevent.aspx?ver=2.0.566.0&rnd=215
  • 13.248.169.48:80
    http://tei.brightbreeze.com/trackedevent.aspx?ver=2.0.566.0&rnd=231
    http
    d38cdffa655bb08fbd96eaaf2604d40a_JaffaCakes118.exe
    2.0kB
     172 B
     5
    4

    HTTP Request

    POST http://tei.brightbreeze.com/trackedevent.aspx?ver=2.0.566.0&rnd=231
  • 13.248.169.48:80
    http://tei.brightbreeze.com/trackedevent.aspx?ver=2.0.566.0&rnd=893
    http
    d38cdffa655bb08fbd96eaaf2604d40a_JaffaCakes118.exe
    1.8kB
     252 B
     6
    6

    HTTP Request

    POST http://tei.brightbreeze.com/trackedevent.aspx?ver=2.0.566.0&rnd=893
  • 13.248.169.48:80
    http://tei.brightbreeze.com/trackedevent.aspx?ver=2.0.566.0&rnd=893
    http
    d38cdffa655bb08fbd96eaaf2604d40a_JaffaCakes118.exe
    1.8kB
     252 B
     6
    6

    HTTP Request

    POST http://tei.brightbreeze.com/trackedevent.aspx?ver=2.0.566.0&rnd=893
  • 13.248.169.48:80
    http://tei.brightbreeze.com/trackedevent.aspx?ver=2.0.566.0&rnd=893
    http
    d38cdffa655bb08fbd96eaaf2604d40a_JaffaCakes118.exe
    1.8kB
     252 B
     6
    6

    HTTP Request

    POST http://tei.brightbreeze.com/trackedevent.aspx?ver=2.0.566.0&rnd=893
  • 13.248.169.48:80
    http://tei.brightbreeze.com/trackedevent.aspx?ver=2.0.566.0&rnd=893
    http
    d38cdffa655bb08fbd96eaaf2604d40a_JaffaCakes118.exe
    1.8kB
     252 B
     6
    6

    HTTP Request

    POST http://tei.brightbreeze.com/trackedevent.aspx?ver=2.0.566.0&rnd=893
  • 13.248.169.48:80
    http://tei.brightbreeze.com/trackedevent.aspx?ver=2.0.566.0&rnd=893
    http
    d38cdffa655bb08fbd96eaaf2604d40a_JaffaCakes118.exe
    1.8kB
     252 B
     6
    6

    HTTP Request

    POST http://tei.brightbreeze.com/trackedevent.aspx?ver=2.0.566.0&rnd=893
  • 13.248.169.48:80
    http://tei.brightbreeze.com/trackedevent.aspx?ver=2.0.566.0&rnd=893
    http
    d38cdffa655bb08fbd96eaaf2604d40a_JaffaCakes118.exe
    1.8kB
     252 B
     6
    6

    HTTP Request

    POST http://tei.brightbreeze.com/trackedevent.aspx?ver=2.0.566.0&rnd=893
  • 13.248.169.48:80
    http://tei.brightbreeze.com/trackedevent.aspx?ver=2.0.566.0&rnd=893
    http
    d38cdffa655bb08fbd96eaaf2604d40a_JaffaCakes118.exe
    1.8kB
     252 B
     6
    6

    HTTP Request

    POST http://tei.brightbreeze.com/trackedevent.aspx?ver=2.0.566.0&rnd=893
  • 13.248.169.48:80
    http://tei.brightbreeze.com/trackedevent.aspx?ver=2.0.566.0&rnd=893
    http
    d38cdffa655bb08fbd96eaaf2604d40a_JaffaCakes118.exe
    1.8kB
     252 B
     6
    6

    HTTP Request

    POST http://tei.brightbreeze.com/trackedevent.aspx?ver=2.0.566.0&rnd=893
  • 13.248.169.48:80
    http://tei.brightbreeze.com/trackedevent.aspx?ver=2.0.566.0&rnd=893
    http
    d38cdffa655bb08fbd96eaaf2604d40a_JaffaCakes118.exe
    1.8kB
     252 B
     6
    6

    HTTP Request

    POST http://tei.brightbreeze.com/trackedevent.aspx?ver=2.0.566.0&rnd=893
  • 13.248.169.48:80
    http://tei.brightbreeze.com/trackedevent.aspx?ver=2.0.566.0&rnd=893
    http
    d38cdffa655bb08fbd96eaaf2604d40a_JaffaCakes118.exe
    1.8kB
     252 B
     6
    6

    HTTP Request

    POST http://tei.brightbreeze.com/trackedevent.aspx?ver=2.0.566.0&rnd=893
  • 13.248.169.48:80
    http://tei.brightbreeze.com/trackedevent.aspx?ver=2.0.566.0&rnd=893
    http
    d38cdffa655bb08fbd96eaaf2604d40a_JaffaCakes118.exe
    1.8kB
     252 B
     6
    6

    HTTP Request

    POST http://tei.brightbreeze.com/trackedevent.aspx?ver=2.0.566.0&rnd=893
  • 13.248.169.48:80
    http://tei.brightbreeze.com/trackedevent.aspx?ver=2.0.566.0&rnd=893
    http
    d38cdffa655bb08fbd96eaaf2604d40a_JaffaCakes118.exe
    1.8kB
     252 B
     6
    6

    HTTP Request

    POST http://tei.brightbreeze.com/trackedevent.aspx?ver=2.0.566.0&rnd=893
  • 13.248.169.48:80
    http://tei.brightbreeze.com/trackedevent.aspx?ver=2.0.566.0&rnd=893
    http
    d38cdffa655bb08fbd96eaaf2604d40a_JaffaCakes118.exe
    1.8kB
     252 B
     6
    6

    HTTP Request

    POST http://tei.brightbreeze.com/trackedevent.aspx?ver=2.0.566.0&rnd=893
  • 13.248.169.48:80
    http://tei.brightbreeze.com/trackedevent.aspx?ver=2.0.566.0&rnd=893
    http
    d38cdffa655bb08fbd96eaaf2604d40a_JaffaCakes118.exe
    3.1kB
     212 B
     7
    5

    HTTP Request

    POST http://tei.brightbreeze.com/trackedevent.aspx?ver=2.0.566.0&rnd=893
  • 13.248.169.48:80
    http://tei.brightbreeze.com/trackedevent.aspx?ver=2.0.566.0&rnd=893
    http
    d38cdffa655bb08fbd96eaaf2604d40a_JaffaCakes118.exe
    1.8kB
     252 B
     6
    6

    HTTP Request

    POST http://tei.brightbreeze.com/trackedevent.aspx?ver=2.0.566.0&rnd=893
  • 13.248.169.48:80
    http://tei.brightbreeze.com/trackedevent.aspx?ver=2.0.566.0&rnd=893
    http
    d38cdffa655bb08fbd96eaaf2604d40a_JaffaCakes118.exe
    1.8kB
     252 B
     6
    6

    HTTP Request

    POST http://tei.brightbreeze.com/trackedevent.aspx?ver=2.0.566.0&rnd=893
  • 13.248.169.48:80
    http://tei.brightbreeze.com/trackedevent.aspx?ver=2.0.566.0&rnd=893
    http
    d38cdffa655bb08fbd96eaaf2604d40a_JaffaCakes118.exe
    1.8kB
     252 B
     6
    6

    HTTP Request

    POST http://tei.brightbreeze.com/trackedevent.aspx?ver=2.0.566.0&rnd=893
  • 13.248.169.48:80
    http://tei.brightbreeze.com/trackedevent.aspx?ver=2.0.566.0&rnd=893
    http
    d38cdffa655bb08fbd96eaaf2604d40a_JaffaCakes118.exe
    1.8kB
     252 B
     6
    6

    HTTP Request

    POST http://tei.brightbreeze.com/trackedevent.aspx?ver=2.0.566.0&rnd=893
  • 13.248.169.48:80
    http://tei.brightbreeze.com/trackedevent.aspx?ver=2.0.566.0&rnd=893
    http
    d38cdffa655bb08fbd96eaaf2604d40a_JaffaCakes118.exe
    1.8kB
     252 B
     6
    6

    HTTP Request

    POST http://tei.brightbreeze.com/trackedevent.aspx?ver=2.0.566.0&rnd=893
  • 13.248.169.48:80
    http://tei.brightbreeze.com/trackedevent.aspx?ver=2.0.566.0&rnd=893
    http
    d38cdffa655bb08fbd96eaaf2604d40a_JaffaCakes118.exe
    1.8kB
     252 B
     6
    6

    HTTP Request

    POST http://tei.brightbreeze.com/trackedevent.aspx?ver=2.0.566.0&rnd=893
  • 8.8.8.8:53
    tei.brightbreeze.com
    dns
    d38cdffa655bb08fbd96eaaf2604d40a_JaffaCakes118.exe
    66 B
     98 B
     1
    1

    DNS Request

    tei.brightbreeze.com

    DNS Response

    13.248.169.48
    76.223.54.146

  • 8.8.8.8:53
    tei.brightbreeze.com
    dns
    d38cdffa655bb08fbd96eaaf2604d40a_JaffaCakes118.exe
    66 B
     98 B
     1
    1

    DNS Request

    tei.brightbreeze.com

    DNS Response

    13.248.169.48
    76.223.54.146

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/2316-0-0x0000000000400000-0x0000000000486000-memory.dmp

    Filesize

    536KB

    Download

  • memory/2316-1-0x0000000000400000-0x0000000000486000-memory.dmp

    Filesize

    536KB

    Download

  • memory/2316-2-0x0000000000400000-0x0000000000486000-memory.dmp

    Filesize

    536KB

    Download

  • memory/2316-4-0x0000000000400000-0x0000000000486000-memory.dmp

    Filesize

    536KB

    Download

  • memory/2316-5-0x0000000000400000-0x0000000000486000-memory.dmp

    Filesize

    536KB

    Download

  • memory/2316-6-0x0000000000400000-0x0000000000486000-memory.dmp

    Filesize

    536KB

    Download

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.