Report - 6d2dd193134545ad88d61026e88a730b.s3.amazonaws.com/0eadcc285164b1dcc5dcd0dc38bdd5fc/packetsCTF4.pcapng?response-content-disposition=attachment;%20filename=packetsCTF4.pcapng&response-cache-control=max-age=3600&X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAYQYMCZZ442GJAWMY/20240328/us-east-1/s3/aws4_request&X-Amz-Date=20240328T210000Z&X-Amz-Expires=3600&X-Amz-SignedHeaders=host&X-Amz-Signature=9187ab73fb2dca75ff23f934a05ff6473ef11e3df9467e1277469616ad2e5dad

Report Overview

Submitted URL
6d2dd193134545ad88d61026e88a730b.s3.amazonaws.com/0eadcc285164b1dcc5dcd0dc38bdd5fc/packetsCTF4.pcapng?response-content-disposition=attachment;%20filename=packetsCTF4.pcapng&response-cache-control=max-age=3600&X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAYQYMCZZ442GJAWMY/20240328/us-east-1/s3/aws4_request&X-Amz-Date=20240328T210000Z&X-Amz-Expires=3600&X-Amz-SignedHeaders=host&X-Amz-Signature=9187ab73fb2dca75ff23f934a05ff6473ef11e3df9467e1277469616ad2e5dad
IP
3.5.24.143
ASN
#14618 AMAZON-AES
Submitted
2024-03-28 21:50:45
Access
public
Website Title
about:privatebrowsing
Final URL
about:privatebrowsing
Tags
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
2

Domain Summary

Domain / FQDN	Rank	Registered	First Seen	Last Seen	Sent	Received	IP
6d2dd193134545ad88d61026e88a730b.s3.amazonaws.com	unknown	2005-08-18	2024-03-26	2024-03-26	921 B	16 MB	52.216.49.113

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

Scan Date	Severity	Indicator	Alert
2024-03-28	medium	6d2dd193134545ad88d61026e88a730b.s3.amazonaws.com/0eadcc285164b1dcc5dcd0dc38bdd5fc/packetsCTF4.pcapng?response-content-disposition=attachment;%20filename=packetsCTF4.pcapng&response-cache-control=max-age=3600&X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAYQYMCZZ442GJAWMY/20240328/us-east-1/s3/aws4_request&X-Amz-Date=20240328T210000Z&X-Amz-Expires=3600&X-Amz-SignedHeaders=host&X-Amz-Signature=9187ab73fb2dca75ff23f934a05ff6473ef11e3df9467e1277469616ad2e5dad	Detect files is `SliverFox` malware

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

ThreatFox

No alerts detected

JavaScript (0)

HTTP Transactions (1)

URL IP Response Size

6d2dd193134545ad88d61026e88a730b.s3.amazonaws.com/0eadcc285164b1dcc5dcd0dc38bdd5fc/packetsCTF4.pcapng?response-content-disposition=attachment;%20filename=packetsCTF4.pcapng&response-cache-control=max-age=3600&X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAYQYMCZZ442GJAWMY/20240328/us-east-1/s3/aws4_request&X-Amz-Date=20240328T210000Z&X-Amz-Expires=3600&X-Amz-SignedHeaders=host&X-Amz-Signature=9187ab73fb2dca75ff23f934a05ff6473ef11e3df9467e1277469616ad2e5dad

52.216.49.113

200 OK

16 MB

URL User Request GET HTTP/1.1
6d2dd193134545ad88d61026e88a730b.s3.amazonaws.com/0eadcc285164b1dcc5dcd0dc38bdd5fc/packetsCTF4.pcapng?response-content-disposition=attachment;%20filename=packetsCTF4.pcapng&response-cache-control=max-age=3600&X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAYQYMCZZ442GJAWMY/20240328/us-east-1/s3/aws4_request&X-Amz-Date=20240328T210000Z&X-Amz-Expires=3600&X-Amz-SignedHeaders=host&X-Amz-Signature=9187ab73fb2dca75ff23f934a05ff6473ef11e3df9467e1277469616ad2e5dad
IP
52.216.49.113:443
ASN
#16509 AMAZON-02

Certificate
IssuerAmazon
Subject*.s3.amazonaws.com
FingerprintDC:41:A6:3E:EE:32:6F:36:76:5A:EF:9D:17:AF:14:13:E3:05:C6:D1
ValidityTue, 10 Oct 2023 00:00:00 GMT - Wed, 03 Jul 2024 23:59:59 GMT

File type
pcapng capture file - version 1.0
Size
16 MB (15620660 bytes)
Hash
103d87338a2118dfb10a7b92b612ff3a
fe8131b8276e0952bb351aae44d31e1af3156a72
dcf4026fcdea56e9e9f9748a79a04f82583dff8ba2dfe58532513693d2d2ad0e

Detections

Analyzer	Verdict	Alert
YARAhub by abuse.ch	malware	Detect files is `SliverFox` malware

HTTP Headers

GET /0eadcc285164b1dcc5dcd0dc38bdd5fc/packetsCTF4.pcapng?response-content-disposition=attachment;%20filename=packetsCTF4.pcapng&response-cache-control=max-age=3600&X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIAYQYMCZZ442GJAWMY/20240328/us-east-1/s3/aws4_request&X-Amz-Date=20240328T210000Z&X-Amz-Expires=3600&X-Amz-SignedHeaders=host&X-Amz-Signature=9187ab73fb2dca75ff23f934a05ff6473ef11e3df9467e1277469616ad2e5dad HTTP/1.1
Host: 6d2dd193134545ad88d61026e88a730b.s3.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
x-amz-id-2: T+efkRtO0SJeGecvu04/o4TtFzcRLcCx7qwsMVNPjnJwDi5vPYfDnUtvmVqHxbQVOsy4IQpZScA=
x-amz-request-id: 6V3VDTZ0T7MP836H
Date: Thu, 28 Mar 2024 21:50:20 GMT
Last-Modified: Tue, 26 Mar 2024 06:14:16 GMT
ETag: "87fcc14f96a484a6fc603992ccc6e568-2"
x-amz-server-side-encryption: AES256
Cache-Control: max-age=3600
Content-Disposition: attachment; filename=packetsCTF4.pcapng
Accept-Ranges: bytes
Content-Type: binary/octet-stream
Server: AmazonS3
Content-Length: 15620660

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (0)

HTTP Transactions (1)

URL User Request GET HTTP/1.1

IP

ASN

Certificate

File type

Size

Hash

Detections

HTTP Headers