Score: | 56 |
Range: | 0 - 100 |
Whitelisted: | false |
AV Detection |
---|
Source: |
ReversingLabs: |
|||
Source: |
Virustotal: |
Perma Link |
Source: |
String: |
||
Source: |
String: |
Networking |
---|
Source: |
TCP traffic: |
Source: |
DNS traffic detected: |
||
Source: |
DNS traffic detected: |
Source: |
TCP traffic: |
Source: |
Socket: |
Jump to behavior |
Source: |
TCP traffic detected without corresponding DNS query: |
||
Source: |
TCP traffic detected without corresponding DNS query: |
||
Source: |
TCP traffic detected without corresponding DNS query: |
||
Source: |
TCP traffic detected without corresponding DNS query: |
||
Source: |
UDP traffic detected without corresponding DNS query: |
||
Source: |
UDP traffic detected without corresponding DNS query: |
||
Source: |
UDP traffic detected without corresponding DNS query: |
||
Source: |
UDP traffic detected without corresponding DNS query: |
||
Source: |
UDP traffic detected without corresponding DNS query: |
Source: |
DNS traffic detected: |
||
Source: |
DNS traffic detected: |
||
Source: |
DNS traffic detected: |
Source: |
Network traffic detected: |
||
Source: |
Network traffic detected: |
||
Source: |
Network traffic detected: |
Source: |
.symtab present: |
Source: |
SIGKILL sent: |
Jump to behavior |
Source: |
Classification label: |
Source: |
Rm executable: |
Jump to behavior |
Source: |
Queries kernel information via 'uname': |
Jump to behavior |
Source: |
Binary or memory string: |
||
Source: |
Binary or memory string: |
||
Source: |
Binary or memory string: |
||
Source: |
Binary or memory string: |
IP | Domain | Country | Flag | ASN | ASN Name | Malicious |
---|---|---|---|---|---|---|
34.249.145.219 | unknown | United States | 16509 | AMAZON-02US | false | |
109.202.202.202 | unknown | Switzerland | 13030 | INIT7CH | false | |
38.60.249.66 | eighteen.pirate | United States | 174 | COGENT-174US | true | |
91.189.91.42 | unknown | United Kingdom | 41231 | CANONICAL-ASGB | false |
Name | IP | Active |
---|---|---|
eighteen.pirate | 38.60.249.66 | true |
nineteen.libre. [malformed] | unknown | unknown |
2joints.libre. [malformed] | unknown | unknown |