| download.trafficland.com/ |  52.217.104.155 | | 107 B |
URL download.trafficland.com/ IP52.217.104.155:0
File typeHTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text Hash9d2a751959d3379e658a785c065ac6b8 17c2d5e472c321b524a3f63052aa6822bd4f8440 b4ce3f27ed2279663959e0ed5388d44fe6d5978862a27da0ad90a6c26589243e
GET / HTTP/1.1
Host: download.trafficland.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
x-amz-id-2: O1a4t7+9ORdkRsrr5RIAagFBIqPa7GrVzsVBQgc6APXpezeI4AyqmK42vaxAe+ADWPUhNpyCGiY=
x-amz-request-id: 5X7A2HB9F6TTYG7V
Date: Sat, 02 Dec 2023 13:25:56 GMT
Last-Modified: Thu, 19 Nov 2015 16:55:42 GMT
ETag: "9d2a751959d3379e658a785c065ac6b8"
Content-Type: text/html
Server: AmazonS3
Content-Length: 107
|
| GET download.trafficland.com/vmc/admin/install/Application%20Files/Vmc_4_01_05_00/Player.dll.deploy | 52.217.118.109 | 200 OK | 79 kB |
URL User Request GET HTTP/1.1download.trafficland.com/vmc/admin/install/Application%20Files/Vmc_4_01_05_00/Player.dll.deploy IP52.217.118.109:80
File typePE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows\012- data Hash351a672f57e419478bdd920aad054874 51ecd64d6054c1ade0919d0647a40b2acb83b11f 5e2c6b905931050c89fc1278a02b3b6d2996159474a1973bc2bdcb3cf49fe42d
| NIDS | Severity | Alert |
|---|
| suricata | medium | ET POLICY Executable served from Amazon S3 | | suricata | high | ET POLICY PE EXE or DLL Windows file download HTTP |
GET /vmc/admin/install/Application%20Files/Vmc_4_01_05_00/Player.dll.deploy HTTP/1.1
Host: download.trafficland.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
x-amz-id-2: Zv/0R4CxharuQ9dmdRP1Iim20mH7i6lp0HOGv70YcOPs/rkmz4O2dDd7TdUC08FadN8VnALTuO4=
x-amz-request-id: GPAB4WSW4W7KTVZQ
Date: Sat, 02 Dec 2023 13:25:57 GMT
Cache-Control: public, max-age=864000
x-amz-meta-hashtag: 351a672f57e419478bdd920aad054874
Last-Modified: Sat, 02 Dec 2023 04:45:25 GMT
ETag: "351a672f57e419478bdd920aad054874"
Content-Type: application/octet-stream
Server: AmazonS3
Content-Length: 79360
|