File MD5Sum | SHA1SUM | SHA256SUM | FUZZY HASH | File Size |
---|---|---|---|---|
35ab3252ab8c38f44d34efa8c03f29b5 | 60fd2f2323c983b02c9d996f2df8704bb88b4757 | 5a1bc084983f0f7532dbcd65249b4bd0a54ae8fa35b37214196a2ae7b5eb8c50 | 12288:XaB7p3sXmTU2WBnZ7yeeFt0vcjmD8qQLVy8cPI/zg45x+QU5d2L5:X07EmA26yavtD8zR2sdx+ | 715264 |
File Name |
---|
westpac.exe |
Snort Class | Snort Alert | Count |
---|---|---|
N/A | No snort alerts generated | 0 |
AV Alert | AV Vendor |
---|
Path | Folder Name |
---|---|
c: | Windupdt |
Action | Path | File Name |
---|
Action | Path |
---|
Action | Path | Val_Name | Val_Data |
---|
Action | Path | Val_Name | Val_Type | Mod_Val_Type | Val_Data | Mod_Val_Data |
---|
Action | Path | Val_Name | Val_Data | Mod_Val_Data |
---|---|---|---|---|
modified | HKLM/SOFTWARE/Microsoft/Cryptography/RNG | Seed | CB 1E 3A FA EE 68 7F AE 35 02 2E FB CE E2 B1 B6 28 A1 26 55 E5 F7 9A 67 26 C5 62 | AA 7D B5 9A FF 1A 5F 9C 98 23 7C 17 F0 97 35 71 66 0E 00 DC 1B B3 AD 38 65 E2 D |
modified | HKLM/SOFTWARE/Microsoft/Windows NT/CurrentVersion/Winlogon | Userinit | C:WINDOWSsystem32userinit.exe, | "C |
DNS | DNS Response |
---|
DstIP | HTTP_HOST | HTTP_REQUEST_URI | HTTP_USER_AGENT | PROTOCOL |
---|---|---|---|---|
239.255.255.250 | 239.255.255.250:1900 | * | --blank-- | 0x11 |
PROTOCOL | SRC_PKTS | DST_PKTS | SRC_BYTES | DST_BYTES |
---|---|---|---|---|
6 | 276 | 268 | 16716 | 16110 |
17 | 2 | 0 | 350 | 0 |
DPORT | PROTOCOL | SRC_PKTS | DST_PKTS | SRC_BYTES | DST_BYTES |
---|---|---|---|---|---|
1604 | 6 | 276 | 268 | 16716 | 16110 |
1900 | 17 | 2 | 0 | 350 | 0 |
Time | Date | Protocol | SrcIP | DstIP | Dir | Flags | Sport | Dport | Pkts | Bytes |
---|---|---|---|---|---|---|---|---|---|---|
23:37:38 | 2011-06-01 | 6 | 10.10.10.7 | 110.86.23.246 | -> | e | 30 | 1604 | 11 | 664 |
23:37:43 | 2011-06-01 | 6 | 10.10.10.7 | 110.86.23.246 | -> | e | 30 | 1604 | 11 | 660 |
23:37:48 | 2011-06-01 | 6 | 10.10.10.7 | 110.86.23.246 | -> | e | 30 | 1604 | 5 | 300 |
23:37:49 | 2011-06-01 | 6 | 10.10.10.7 | 110.86.23.246 | -> | e | 31 | 1604 | 13 | 793 |
23:37:54 | 2011-06-01 | 6 | 10.10.10.7 | 110.86.23.246 | -> | e | 31 | 1604 | 10 | 600 |
23:37:59 | 2011-06-01 | 6 | 10.10.10.7 | 110.86.23.246 | -> | e | 31 | 1604 | 14 | 840 |
23:38:05 | 2011-06-01 | 6 | 10.10.10.7 | 110.86.23.246 | -> | e | 35 | 1604 | 13 | 793 |
23:38:10 | 2011-06-01 | 6 | 10.10.10.7 | 110.86.23.246 | -> | e | 35 | 1604 | 11 | 660 |
23:38:15 | 2011-06-01 | 6 | 10.10.10.7 | 110.86.23.246 | -> | e | 35 | 1604 | 13 | 780 |
23:38:21 | 2011-06-01 | 6 | 10.10.10.7 | 110.86.23.246 | -> | e | 179 | 1604 | 13 | 793 |
23:38:26 | 2011-06-01 | 6 | 10.10.10.7 | 110.86.23.246 | -> | e | 179 | 1604 | 10 | 600 |
23:38:31 | 2011-06-01 | 6 | 10.10.10.7 | 110.86.23.246 | -> | e | 179 | 1604 | 14 | 840 |
23:38:36 | 2011-06-01 | 6 | 10.10.10.7 | 110.86.23.246 | -> | e | 314 | 1604 | 13 | 793 |
23:38:42 | 2011-06-01 | 6 | 10.10.10.7 | 110.86.23.246 | -> | e | 314 | 1604 | 11 | 660 |
23:38:47 | 2011-06-01 | 6 | 10.10.10.7 | 110.86.23.246 | -> | e | 314 | 1604 | 13 | 780 |
23:38:52 | 2011-06-01 | 6 | 10.10.10.7 | 110.86.23.246 | -> | e | 99 | 1604 | 13 | 793 |
23:38:58 | 2011-06-01 | 6 | 10.10.10.7 | 110.86.23.246 | -> | e | 99 | 1604 | 11 | 660 |
23:39:03 | 2011-06-01 | 6 | 10.10.10.7 | 110.86.23.246 | -> | e | 99 | 1604 | 13 | 780 |
23:39:09 | 2011-06-01 | 6 | 10.10.10.7 | 110.86.23.246 | -> | e | 434 | 1604 | 13 | 793 |
23:39:14 | 2011-06-01 | 6 | 10.10.10.7 | 110.86.23.246 | -> | e | 434 | 1604 | 10 | 600 |
23:39:19 | 2011-06-01 | 6 | 10.10.10.7 | 110.86.23.246 | -> | e | 434 | 1604 | 10 | 600 |
23:39:24 | 2011-06-01 | 6 | 10.10.10.7 | 110.86.23.246 | -> | e | 101 | 1604 | 13 | 793 |
23:39:24 | 2011-06-01 | 6 | 10.10.10.7 | 110.86.23.246 | -> | e | 434 | 1604 | 4 | 240 |
23:39:30 | 2011-06-01 | 6 | 10.10.10.7 | 110.86.23.246 | -> | e | 101 | 1604 | 10 | 600 |
23:39:35 | 2011-06-01 | 6 | 10.10.10.7 | 110.86.23.246 | -> | e | 101 | 1604 | 14 | 840 |
23:39:40 | 2011-06-01 | 6 | 10.10.10.7 | 110.86.23.246 | -> | e | 389 | 1604 | 13 | 793 |
23:39:46 | 2011-06-01 | 6 | 10.10.10.7 | 110.86.23.246 | -> | e | 389 | 1604 | 11 | 660 |
23:39:51 | 2011-06-01 | 6 | 10.10.10.7 | 110.86.23.246 | -> | e | 389 | 1604 | 13 | 780 |
23:39:56 | 2011-06-01 | 6 | 10.10.10.7 | 110.86.23.246 | -> | e | 503 | 1604 | 13 | 793 |
23:40:02 | 2011-06-01 | 6 | 10.10.10.7 | 110.86.23.246 | -> | e | 503 | 1604 | 10 | 600 |
23:40:07 | 2011-06-01 | 6 | 10.10.10.7 | 110.86.23.246 | -> | e | 503 | 1604 | 14 | 840 |
23:40:13 | 2011-06-01 | 6 | 10.10.10.7 | 110.86.23.246 | -> | e | 521 | 1604 | 13 | 793 |
23:40:18 | 2011-06-01 | 6 | 10.10.10.7 | 110.86.23.246 | -> | e | 521 | 1604 | 11 | 660 |
23:40:23 | 2011-06-01 | 6 | 10.10.10.7 | 110.86.23.246 | -> | e | 521 | 1604 | 13 | 780 |
23:40:29 | 2011-06-01 | 6 | 10.10.10.7 | 110.86.23.246 | -> | e | 613 | 1604 | 12 | 733 |
23:40:34 | 2011-06-01 | 6 | 10.10.10.7 | 110.86.23.246 | -> | e | 613 | 1604 | 10 | 600 |
23:40:39 | 2011-06-01 | 6 | 10.10.10.7 | 110.86.23.246 | -> | e | 613 | 1604 | 14 | 840 |
23:40:44 | 2011-06-01 | 6 | 10.10.10.7 | 110.86.23.246 | -> | e | 456 | 1604 | 13 | 793 |
23:40:50 | 2011-06-01 | 6 | 10.10.10.7 | 110.86.23.246 | -> | e | 456 | 1604 | 11 | 660 |
23:40:55 | 2011-06-01 | 6 | 10.10.10.7 | 110.86.23.246 | -> | e | 456 | 1604 | 13 | 780 |
23:41:00 | 2011-06-01 | 6 | 10.10.10.7 | 110.86.23.246 | -> | e | 639 | 1604 | 13 | 793 |
23:41:06 | 2011-06-01 | 6 | 10.10.10.7 | 110.86.23.246 | -> | e | 639 | 1604 | 10 | 600 |
23:41:11 | 2011-06-01 | 6 | 10.10.10.7 | 110.86.23.246 | -> | e | 639 | 1604 | 10 | 600 |
23:41:17 | 2011-06-01 | 6 | 10.10.10.7 | 110.86.23.246 | -> | e | 233 | 1604 | 13 | 793 |
23:41:16 | 2011-06-01 | 6 | 10.10.10.7 | 110.86.23.246 | -> | e | 639 | 1604 | 4 | 240 |
23:41:22 | 2011-06-01 | 6 | 10.10.10.7 | 110.86.23.246 | -> | e | 233 | 1604 | 11 | 660 |
23:41:27 | 2011-06-01 | 6 | 10.10.10.7 | 110.86.23.246 | -> | e d | 233 | 1604 | 11 | 660 |
23:41:34 | 2011-06-01 | 6 | 10.10.10.7 | 110.86.23.246 | -> | e d | 233 | 1604 | 2 | 120 |
23:43:05 | 2011-06-01 | 17 | 10.10.10.7 | 239.255.255.250 | -> | e | 8 | 1900 | 2 | 350 |
Packer Name |
---|
Honey Trap Log File Location |
---|
PTFB Log File Location |
---|