Welcome to the Cyber-TA
SRI's Multiperspective Malware Infection Analysis Page


UNCENSORED PAGE


<Click here: to download BotHunter>

28 May 2010
<prev>   <next>

All data collection and analyses summarized in this page were 100% AUTO-GENERATED.

DEVELOPERS: Vinod Yegneswaran (SRI), Phillip Porras (SRI), Hassen Saidi (SRI)
Monirul Sharif (Georgia-Tech), Arvind Narayanan (University of Texas at Austin)

The data on this website is provided for research purposes only. It is provided
for your personal use only and is supplied AS IS, WITHOUT WARRANTY OF ANY KIND.
Use or reliance on this data is at your own risk.


Daily Summary Files: [DNS Lookups & Failed Connects] [ Attacker IPs ] [C&C Servers] [Binary Digests]
Cumulative Summary Files: [DNS Lookup Log] [Attacker IP Log] [C&C Server Log] [Antivirus Detection] [Code Segment Overlap]
[Behavioral Clusters] [Binary Digest Log]

[See Country Codes ]
Time
Victim
OS
Infection
Source
C&C
Server
DNS Lookups &
Failed Connects
Infection
Port
Packet
Trace
Detection
Signatures
Infection
Chatter
BotHunter
Analysis
Behavioral
Cluster
Forensic
Logs
Antivirus
Labels
Packed Malware_Binary Unpacked egg.exe
Unpacked egg.asm
Packer PEID
Data Strings
Syscall Trace
T:01:11:00 Win2K-f 61.130.137.136 (163DATA.COM.CN):
CHINANET-ZJ NINGBO NODE NETWORK,
NINGBO, ZHEJIANG, CN. (DIAL)
n/a   135 pcap raw alerts
ruleset
other
18 lines
Yeah : 1.3
profile
none summary
tarball
none none none none none none none
01:27:00 Win2K-f 200.11.72.235 (ENTELCHILE.NET):
ENTEL CHILE S.A,
SANTIAGO, REGION METROPOLITANA, CL. (DSL)
n/a US:www.maxmind.com
:checkip.dyndns.org
EU:getmyip.co.uk
GB:www.vouchercodez.com
US:www.getmyip.org
208.78.70.70:80
US:67.15.94.80:80
US:75.126.138.202:80
445 pcap raw alerts
ruleset
http
3 lines
Yeah : 0.8
profile
none summary
tarball
3 of 37 d9cb288f31
NEW
45603a001c [0] ASM:Graph
UPX| lines=174
embedded dns
trace
T:02:10:00 WinXP 95.104.38.60 (CAUCASUS.NET):
CAUCASUS ONLINE BROADBAND NETWORK,
GE. (DSL)
213.155.0.224:80 DE:citi-bank.ru 445 pcap raw alerts
ruleset
http
2 lines
Yeah : 1.3
profile
none summary
tarball
31 of 32 24137d8412
NEW
73a916deb4 [0] none:none
PolyEnE| none trace
T:04:05:00 Win2K-f 113.255.1.179 (HUTCHCITY.COM):
HUTCHISON GLOBAL COMMUNICATIONS,
HONG KONG, HONG KONG (SAR), HK. (DSL)
n/a   135 pcap raw alerts
ruleset
other
1002 lines
Yeah : 1.3
profile
none summary
tarball
30 of 41 7552be3fb7
NEW
none[3] none:none
none|none none trace
T:04:19:00 Win2K-f 220.216.32.192 (TNC.NE.JP):
TOKAI CORPORATION,
TOKYO, TOKYO, JP. (DSL)
n/a US:microsoft.com 135 pcap raw alerts
ruleset
other
99 lines
Yeah : 1.3
profile
none summary
tarball
39 of 40
40 of 41
6a6aaa5b73
NEW
8bde6dd126
NEW
63889c9976 [0]
885c68f500[0]
ASM:Graph
ASM:Graph
tElock|
tElock|
lines=42
lines=64
embedded dns
trace
trace
T:05:13:00 WinXP 125.103.232.248 (UCOM.NE.JP):
G-TK0024N,
TOKYO, TOKYO, JP. (DSL)
213.155.0.224:80 DE:citi-bank.ru 445 pcap raw alerts
ruleset
http
2 lines
Yeah : 1.3
profile
none summary
tarball
29 of 29 aa298099d5
NEW
none[0] none:none
PolyEnE| lines=68 trace
T:05:34:00 WinXP 67.251.118.224 (RR.COM):
ROAD RUNNER HOLDCO LLC,
HERNDON, VIRGINIA, US. (DSL)
213.155.0.224:80 DE:citi-bank.ru 445 pcap raw alerts
ruleset
http
2 lines
Yeah : 1.3
profile
none summary
tarball
29 of 29 3ae357d17b
NEW
none[0] none:none
PolyEnE| lines=73 trace
T:05:44:00 Win2K-f 219.238.189.39 (-):
BEIJING SAN LIN GANG PING JIAN CE JIAN XIU CO.LTD,
BEIJING, BEIJING, CN. (100Mbps)
n/a   135 pcap raw alerts
ruleset
other
11 lines
Yeah : 1.3
profile
none summary
tarball
none none none none none none none
T:05:54:00 Win2K-f 173.200.80.11 (-):
.
n/a   135 pcap raw alerts
ruleset
other
186 lines
Yeah : 1.3
profile
none summary
tarball
38 of 40 93609d0769
NEW
none[none] none:none
none|none none none
T:06:08:00 Win2K-f 61.198.97.199 (THN.NE.JP):
TOKAI CORPORATION,
FUJI, SHIZUOKA, JP. (DSL)
n/a US:microsoft.com 135 pcap raw alerts
ruleset
other
110 lines
Yeah : 1.3
profile
none summary
tarball
39 of 41
39 of 41
6b315f5dbc
NEW
7938865f8c
NEW
7604b94520 [0]
a9b9e4904b[0]
ASM:Graph
ASM:Graph
tElock|
Armadillo|
lines=64
embedded dns
lines=91
trace
trace
T:06:59:00 Win2K-f 218.211.83.139 (SPARQNET.NET):
NEW CENTRY INFOCOM TECH. CO. LTD,
TAIPEI, T'AI-PEI, TW. (DSL)
n/a US:microsoft.com 135 pcap raw alerts
ruleset
other
77 lines
Yeah : 1.3
profile
none summary
tarball
33 of 33
0 of 32
53bfe15e91
NEW
73f1082158
NEW
1473091351 [0]
none [0]
ASM:Graph
none:none
tElock|
Armadillo|
lines=75
embedded dns
lines=90
trace
trace
T:07:29:00 WinXP 98.175.158.3 (COX.NET):
COX COMMUNICATIONS,
PROVIDENCE, RHODE ISLAND, US. (DSL)
n/a US:gg.arrancar.org
US:216.240.187.145:555
135 pcap raw alerts
ruleset
other
356 lines
Yeah : 1.3
profile
none summary
tarball
39 of 41 74ca348885
NEW
8b0bf5ec45 [0] ASM:Graph
none|none lines=546 trace
T:07:36:00 WinXP 79.163.187.228 (CENTERTEL.PL):
PTK CENTERTEL BROADBAND SERVICES,
PL. (DSL)
n/a DE:citi-bank.ru
DE:213.155.0.224:80
445 pcap raw alerts
ruleset
http
1 line
Yeah : 0.8
profile
none summary
tarball
39 of 41 d8040f84d4
NEW
d683995e84 [0] ASM:Graph
PolyEnE| lines=73 trace
T:08:02:00 WinXP 116.118.133.87 (TINP.NET.TW):
TAIWAN INFRASTRUCTURE NETWORK TECHNOLOGIES,
TAIPEI, T'AI-PEI, TW. (DSL)
n/a US:microsoft.com 135 pcap raw alerts
ruleset
other
79 lines
Yeah : 1.3
profile
none summary
tarball
33 of 33
0 of 33
53bfe15e91
NEW
57ce4acac2
NEW
1473091351 [0]
none [0]
ASM:Graph
none:none
tElock|
Armadillo|
lines=75
embedded dns
lines=90
trace
trace
T:09:04:00 WinXP 175.119.9.157 (-):
.
n/a US:microsoft.com 135 pcap raw alerts
ruleset
other
115 lines
Yeah : 1.3
profile
none summary
tarball
40 of 41
5 of 41
14f47ffd1e
NEW
50437008d9
NEW
90bf4b99ff [0]
c1b09ac5d7[0]
ASM:Graph
ASM:Graph
tElock|
Armadillo|
lines=56
embedded dns
lines=90
trace
trace
T:09:07:00 WinXP 193.93.110.216 (GRAT.NET.UA):
GRAT NETWORK INTERNET SERVICE PROVIDER,
KIEV, KYYIV, UA. (DSL)
n/a DE:citi-bank.ru
DE:213.155.0.224:80
445 pcap raw alerts
ruleset
http
1 line
Yeah : 0.8
profile
none summary
tarball
40 of 41 1d0ce31c6d
NEW
none[none] none:none
none|none none none
T:09:43:00 Win2K-f 203.118.238.245 (-):
GRAND TAINAN TECHNOLOGY CO.LTD,
TAINAN, T'AI-WAN, TW. (DSL)
n/a US:microsoft.com 135 pcap raw alerts
ruleset
other
122 lines
Yeah : 1.3
profile
none summary
tarball
40 of 41
40 of 41
5fae5f1583
NEW
a3395c110a
NEW
none[none]
none [none]
none:none
none:none
none|none
none|none
none
none
none
none
T:09:51:00 WinXP 84.90.142.179 (SM4-84-90-136-10.NETVISAO.PT):
S. M. FEIRA RESIDENTIAL CUSTOMERS,
PORTO, PORTO, PT. (DSL)
n/a :moscow-advokat.ru 445 pcap raw alerts
ruleset
http
1 line
Yeah : 0.8
profile
none summary
tarball
25 of 25 7f60162c2c
NEW
none[0] none:none
PolyEnE| lines=93
embedded dns
trace
T:09:58:00 Win2K-f 210.212.14.180 (NDL1NMS-A.SANCHARNET.IN):
NATIONAL INTERNET BACKBONE,
GUWAHATI, ASSAM, IN. (DSL)
n/a   135 pcap raw alerts
ruleset
other
11 lines
Yeah : 1.3
profile
none summary
tarball
none none none none none none none
10:50:00 Win2K-f 207.182.131.67 (XLHOST.COM):
XLHOST.COM INC,
COLUMBUS, OHIO, US. (100Mbps)
n/a US:www.maxmind.com
EU:getmyip.co.uk
GB:www.vouchercodez.com
:checkip.dyndns.org
207.182.131.67:2426
US:67.15.94.80:80
445 pcap raw alerts
ruleset
http
4 lines
Yeah : 0.8
profile
none summary
tarball
3 of 37 d9cb288f31
NEW
45603a001c [0] ASM:Graph
UPX| lines=174
embedded dns
trace
10:59:00 Win2K-f 190.128.48.5 (-):
EMPRESA DE TELECOMUNICACIONES DE PEREIRA S.A. E.S.P,
CO. (DSL)
n/a US:www.maxmind.com
:checkip.dyndns.org
US:67.15.94.80:80
445 pcap raw alerts
ruleset
http
2 lines
Yeah : 0.8
profile
none summary
tarball
8 of 37 4f88618d4f
NEW
none[3] none:none
UPX| none trace
T:11:07:00 Win2K-f 190.128.48.5 (-):
EMPRESA DE TELECOMUNICACIONES DE PEREIRA S.A. E.S.P,
CO. (DSL)
n/a US:www.maxmind.com
US:www.getmyip.org
:checkip.dyndns.org
DE:131.220.6.26:80
445 pcap raw alerts
ruleset
http
6 lines
Yeah : 0.8
profile
none summary
tarball
8 of 37 4f88618d4f
NEW
none[3] none:none
UPX| none trace
T:11:33:00 WinXP 81.84.110.68 (CPE.NETCABO.PT):
TVCABO-PORTUGAL CABLE MODEM NETWORK,
LISBON, LISBOA, PT. (DSL)
213.155.0.224:80 DE:citi-bank.ru 445 pcap raw alerts
ruleset
http
2 lines
Yeah : 1.3
profile
none summary
tarball
39 of 41 912a073945
NEW
7874c7f21e [0] ASM:Graph
PolyEnE| lines=68 trace
T:12:42:00 WinXP 186.9.93.28 (IMOVIL.ENTELPCS.CL):
ENTEL PCS TELECOMUNICACIONES S.A,
SANTIAGO, REGION METROPOLITANA, CL. (DSL)
n/a DE:citi-bank.ru
DE:213.155.0.224:80
445 pcap raw alerts
ruleset
http
1 line
Yeah : 0.8
profile
none summary
tarball
26 of 28 7d99b0e910
NEW
none[0] none:none
PolyEnE| lines=68 trace
T:13:08:00 WinXP 79.163.243.120 (CENTERTEL.PL):
PTK CENTERTEL BROADBAND SERVICES,
PL. (DSL)
213.155.0.224:80 DE:citi-bank.ru 445 pcap raw alerts
ruleset
http
2 lines
Yeah : 1.3
profile
none summary
tarball
41 of 41 5c6df5141d
NEW
none[none] none:none
none|none none none
T:13:14:00 Win2K-f 76.188.182.241 (RR.COM):
ROAD RUNNER HOLDCO LLC,
AMHERST, OHIO, US. (DSL)
n/a   135 pcap raw alerts
ruleset
other
11 lines
Yeah : 1.3
profile
none summary
tarball
none none none none none none none
T:13:38:00 WinXP 99.170.148.226 (SBCGLOBAL.NET):
AT&T INTERNET SERVICES,
SAN FRANCISCO, CALIFORNIA, US. (DSL)
n/a US:microsoft.com 135 pcap raw alerts
ruleset
other
75 lines
Yeah : 1.3
profile
none summary
tarball
33 of 33
0 of 32
53bfe15e91
NEW
73f1082158
NEW
1473091351 [0]
none [0]
ASM:Graph
none:none
tElock|
Armadillo|
lines=75
embedded dns
lines=90
trace
trace
T:14:25:00 WinXP 70.74.177.3 (SHAWCABLE.NET):
SHAW COMMUNICATIONS INC,
EDMONTON, ALBERTA, CA. (DSL)
n/a US:microsoft.com 135 pcap raw alerts
ruleset
other
228 lines
Yeah : 1.3
profile
none summary
tarball
37 of 41
38 of 41
4180c19d91
NEW
b6e91e001c
NEW
9f3f2de385 [0]
d2275a6cf5[0]
ASM:Graph
ASM:Graph
Armadillo|
PolyEnE|
lines=91
lines=64
embedded dns
trace
trace
14:48:00 Win2K-f 202.47.162.7 (EON.COM.MY):
MULTI INDUSTRY GROUP. THERE ARE MANY SUBSIDIARIES ASSOCIATED TO,
SHAH ALAM, SELANGOR, MY. (DSL)
n/a US:www.maxmind.com
EU:getmyip.co.uk
GB:www.vouchercodez.com
:checkip.dyndns.org
US:67.15.94.80:80
445 pcap raw alerts
ruleset
http
4 lines
Yeah : 0.8
profile
none summary
tarball
7 of 37 7587773eea
NEW
none[3] none:none
StarForce| none trace
15:15:00 Win2K-f 115.186.151.170 (115-186-128-10.NAYATEL.PK):
MICRONET BROADBAND (PVT) LTD,
ISLAMABAD, ISLAMABAD, PK. (DSL)
n/a US:www.maxmind.com
EU:getmyip.co.uk
US:www.getmyip.org
:checkip.dyndns.org
208.78.70.70:80
US:67.15.94.80:80
US:75.126.138.202:80
EU:78.40.35.134:80
445 pcap raw alerts
ruleset
http
1 line
Yeah : 0.8
profile
none summary
tarball
6 of 37 58256fd29e
NEW
none[3] none:none
UPX| none trace
T:15:28:00 Win2K-f 115.186.151.170 (115-186-128-10.NAYATEL.PK):
MICRONET BROADBAND (PVT) LTD,
ISLAMABAD, ISLAMABAD, PK. (DSL)
n/a US:www.maxmind.com
:checkip.dyndns.org
EU:getmyip.co.uk
US:www.getmyip.org
208.78.70.70:80
US:67.15.94.80:80
US:75.126.138.202:80
EU:78.40.35.134:80
445 pcap raw alerts
ruleset
http
1 line
Yeah : 0.8
profile
none summary
tarball
3 of 37 d9cb288f31
NEW
45603a001c [0] ASM:Graph
UPX| lines=174
embedded dns
trace
T:15:49:00 WinXP 125.4.10.191 (ZAQ.NE.JP):
J:COM WEST CO. LTD,
OSAKA, OSAKA, JP. (DSL)
n/a US:microsoft.com 135 pcap raw alerts
ruleset
other
75 lines
Yeah : 1.3
profile
none summary
tarball
0 of 32
33 of 33
07fabc79ef
NEW
53bfe15e91
NEW
none[0]
1473091351[0]
none:none
ASM:Graph
Armadillo|
tElock|
lines=90
lines=75
embedded dns
trace
trace
T:16:47:00 Win2K-f 174.7.74.114 (SHAWCABLE.NET):
SHAW COMMUNICATIONS INC,
VANCOUVER, BRITISH COLUMBIA, CA. (DSL)
n/a US:microsoft.com 135 pcap raw alerts
ruleset
other
75 lines
Yeah : 1.3
profile
none summary
tarball
33 of 33
0 of 33
53bfe15e91
NEW
a08f3b74a4
NEW
1473091351 [0]
none [0]
ASM:Graph
none:none
tElock|
Armadillo|
lines=75
embedded dns
lines=90
trace
trace
T:16:55:00 WinXP 114.51.183.215 (E-MOBILE.NE.JP):
EMOBILE LTD,
TOKYO, TOKYO, JP. (DSL)
n/a   445 pcap raw alerts
ruleset
shell
ftp
14 lines
Yeah : 1.3
profile
none summary
tarball
37 of 40 5285741560
NEW
60590b8b67 [0] ASM:Graph
none|none lines=59 trace
T:17:11:00 WinXP 98.25.102.0 (RR.COM):
ROAD RUNNER HOLDCO LLC,
FLORENCE, SOUTH CAROLINA, US. (DSL)
213.155.0.224:80 DE:citi-bank.ru 445 pcap raw alerts
ruleset
http
2 lines
Yeah : 1.3
profile
none summary
tarball
26 of 28 7d99b0e910
NEW
none[0] none:none
PolyEnE| lines=68 trace
T:17:31:00 WinXP 186.9.174.26 (IMOVIL.ENTELPCS.CL):
ENTEL PCS TELECOMUNICACIONES S.A,
SANTIAGO, REGION METROPOLITANA, CL. (DSL)
213.155.0.224:80 DE:citi-bank.ru 445 pcap raw alerts
ruleset
http
2 lines
Yeah : 1.3
profile
none summary
tarball
26 of 28 7d99b0e910
NEW
none[0] none:none
PolyEnE| lines=68 trace
T:17:36:00 WinXP 174.116.49.56 (ROGERS.COM):
ROGERS CABLE COMMUNICATIONS INC,
ST. JOHN'S, NEWFOUNDLAND AND LABRADOR, CA. (DSL)
n/a US:microsoft.com 135 pcap raw alerts
ruleset
other
75 lines
Yeah : 1.3
profile
none summary
tarball
33 of 33
0 of 33
53bfe15e91
NEW
a08f3b74a4
NEW
1473091351 [0]
none [0]
ASM:Graph
none:none
tElock|
Armadillo|
lines=75
embedded dns
lines=90
trace
trace
18:17:00 WinXP 201.207.187.90 (-):
LIMON,
SAN JOSE, SAN JOSE, CR. (DSL)
n/a DE:citi-bank.ru
DE:213.155.0.224:80
445 pcap raw alerts
ruleset
http
1 line
Yeah : 0.8
profile
none summary
tarball
39 of 41 912a073945
NEW
7874c7f21e [0] ASM:Graph
PolyEnE| lines=68 trace
T:19:34:00 Win2K-f 110.93.96.223 (CABLENET.NE.JP):
CABLENET SAITAMA CO. LTD,
JP. (DSL)
n/a US:microsoft.com 135 pcap raw alerts
ruleset
other
110 lines
Yeah : 1.3
profile
none summary
tarball
39 of 41
39 of 41
5bbb57c115
NEW
75ac189d9e
NEW
03e5cb3c4a [0]
705dbaa801[0]
ASM:Graph
ASM:Graph
Armadillo|
tElock|
lines=91
lines=64
embedded dns
trace
trace
20:00:00 Win2K-f 98.175.158.3 (COX.NET):
COX COMMUNICATIONS,
PROVIDENCE, RHODE ISLAND, US. (DSL)
n/a   135 pcap raw alerts
ruleset
other
356 lines
Yeah : 1.3
profile
none summary
tarball
39 of 41 74ca348885
NEW
8b0bf5ec45 [0] ASM:Graph
none|none lines=546 trace
T:20:28:00 WinXP 152.48.222.69 (UNC.EDU):
NORTH CAROLINA RESEARCH AND EDUCATION NETWORK,
DURHAM, NORTH CAROLINA, US. (100Mbps)
n/a US:microsoft.com 135 pcap raw alerts
ruleset
other
75 lines
Yeah : 1.3
profile
none summary
tarball
33 of 33
0 of 32
53bfe15e91
NEW
73f1082158
NEW
1473091351 [0]
none [0]
ASM:Graph
none:none
tElock|
Armadillo|
lines=75
embedded dns
lines=90
trace
trace
T:20:35:00 WinXP 98.141.160.48 (CAVTEL.NET):
CAVALIER TELEPHONE,
PHILADELPHIA, PENNSYLVANIA, US. (DSL)
n/a   135 pcap raw alerts
ruleset
other
18 lines
Yeah : 1.3
profile
none summary
tarball
none none none none none none none
21:16:00 Win2K-f 77.36.254.58 (-):
ISLAMIC REPUBLIC OF IRAN BROADCASTING,
IR. (DSL)
n/a US:www.maxmind.com
:checkip.dyndns.org
US:www.getmyip.org
EU:getmyip.co.uk
DE:131.220.6.26:80
208.78.70.70:80
US:75.126.138.202:80
EU:78.40.35.134:80
445 pcap raw alerts
ruleset
http
4 lines
Yeah : 0.8
profile
none summary
tarball
4 of 37 4e6c4dd8b1
NEW
none[3] none:none
StarForce| none trace
T:21:24:00 Win2K-f 77.36.254.58 (-):
ISLAMIC REPUBLIC OF IRAN BROADCASTING,
IR. (DSL)
n/a US:www.maxmind.com
EU:getmyip.co.uk
GB:www.vouchercodez.com
US:www.getmyip.org
:checkip.dyndns.org
DE:131.220.6.26:80
445 pcap raw alerts
ruleset
http
8 lines
Yeah : 0.8
profile
none summary
tarball
4 of 37 4e6c4dd8b1
NEW
none[3] none:none
StarForce| none trace
22:25:00 Win2K-f 114.44.111.203 (HINET.NET):
CHUNGHWA TELECOM DATA COMMUNICATION BUSINESS GROUP,
TAIPEI, T'AI-PEI, TW. (DSL)
n/a US:www.maxmind.com
:checkip.dyndns.org
US:www.getmyip.org
EU:getmyip.co.uk
208.78.70.70:80
US:67.15.94.80:80
US:75.126.138.202:80
EU:78.40.35.134:80
445 pcap raw alerts
ruleset
http
1 line
Yeah : 0.8
profile
none summary
tarball
2 of 37 409ef22885
NEW
none[3] none:none
UPX| none trace
T:22:37:00 Win2K-f 69.115.204.131 (OPTONLINE.NET):
OPTIMUM ONLINE (CABLEVISION SYSTEMS),
OLD BRIDGE, NEW JERSEY, US. (DSL)
n/a US:microsoft.com 135 pcap raw alerts
ruleset
other
75 lines
Yeah : 1.3
profile
none summary
tarball
33 of 33
0 of 32
53bfe15e91
NEW
73f1082158
NEW
1473091351 [0]
none [0]
ASM:Graph
none:none
tElock|
Armadillo|
lines=75
embedded dns
lines=90
trace
trace
T:22:47:00 WinXP 113.255.156.6 (HUTCHCITY.COM):
HUTCHISON GLOBAL COMMUNICATIONS,
HK. (DSL)
n/a US:gg.arrancar.org
US:216.240.187.145:555
135 pcap raw alerts
ruleset
other
184 lines
Yeah : 1.3
profile
none summary
tarball
37 of 41 7c7d5bd68d
NEW
25c505d17c [0] ASM:Graph
StarForce| lines=546 trace
22:55:00 WinXP 117.20.191.115 (-):
STARHUB HSPA,
SINGAPORE, SINGAPORE, SG. (DSL)
n/a DE:citi-bank.ru
DE:213.155.0.224:80
445 pcap raw alerts
ruleset
http
1 line
Yeah : 0.8
profile
none summary
tarball
41 of 41 d51fe583c4
NEW
none[none] none:none
none|none none none
T:23:57:00 Win2K-f 219.112.185.212 (THN.NE.JP):
TOKAI CORPORATION,
SHIZUOKA, SHIZUOKA, JP. (DSL)
n/a US:microsoft.com 135 pcap raw alerts
ruleset
other
110 lines
Yeah : 1.3
profile
none summary
tarball
40 of 41
39 of 41
5799ab6538
NEW
f38e8d97da
NEW
2713679411 [0]
83f1400243[0]
ASM:Graph
ASM:Graph
tElock|
Armadillo|
lines=64
embedded dns
lines=91
trace
trace