SHOW:
|
|
- or go back to the newest paste.
| 1 | buffer@rigel ~/thug/src $ python thug.py http://10.3.6.54:8080/1 | |
| 2 | - | Couldn't import dot_parser, loading of dot files will not be possible. |
| 2 | + | |
| 3 | [2014-06-26 15:23:32] [HTTP Redirection (Status: 302)] Content-Location: http://10.3.6.54:8080/1 --> Location: http://10.3.6.54:8080/1/ | |
| 4 | [2014-06-26 15:23:32] [HTTP] URL: http://10.3.6.54:8080/1/ (Status: 200, Referrer: None) | |
| 5 | [2014-06-26 15:23:32] [HTTP] URL: http://10.3.6.54:8080/1/ (Content-type: text/html, MD5: fc2088853efdf38f819b83de3a5c0a39) | |
| 6 | [2014-06-26 15:23:32] <applet archive="jhBnvoNW.jar" code="oaJG.class" height="1" width="1"></applet> | |
| 7 | [2014-06-26 15:23:32] [Navigator URL Translation] jhBnvoNW.jar --> http://10.3.6.54:8080/1/jhBnvoNW.jar | |
| 8 | [2014-06-26 15:23:32] [applet redirection] http://10.3.6.54:8080/1/ -> http://10.3.6.54:8080/1/jhBnvoNW.jar | |
| 9 | [2014-06-26 15:23:33] [HTTP] URL: http://10.3.6.54:8080/1/jhBnvoNW.jar (Status: 200, Referrer: http://10.3.6.54:8080/1/) | |
| 10 | [2014-06-26 15:23:33] [HTTP] URL: http://10.3.6.54:8080/1/jhBnvoNW.jar (Content-type: application/octet-stream, MD5: 616eca13cc6fc173349f3836a1bf53c8) | |
| 11 | [2014-06-26 15:23:37] [HoneyAgent] Sample 616eca13cc6fc173349f3836a1bf53c8 submitted | |
| 12 | [2014-06-26 15:23:37] Saving log analysis at ../logs/c2b78e6e949138622263f77d4ec946fd/20140626152332 | |
| 13 | ||
| 14 | - | [2014-06-26 15:23:40] [HPFeeds] Unable to connect to broker |
| 14 | + | |
| 15 | - | buffer@rigel ~/thug/src $ cd ../logs/c2b78e6e949138622263f77d4ec946fd/20140626152332/analysis/ |
| 15 | + | |
| 16 | - | graph.svg honeyagent/ json/ maec11/ |
| 16 | + | |
| 17 | - | buffer@rigel ~/thug/src $ cd ../logs/c2b78e6e949138622263f77d4ec946fd/20140626152332/analysis/honeyagent/ |
| 17 | + | |
| 18 | - | 616eca13cc6fc173349f3836a1bf53c8 dropped/ |
| 18 | + | |
| 19 | -rw-r--r-- 1 buffer buffer 110 Jun 26 15:23 cJHyxJKchG.dat | |
| 20 | buffer@rigel ~/thug/logs/c2b78e6e949138622263f77d4ec946fd/20140626152332/analysis/honeyagent/dropped $ file * | |
| 21 | PRGEepzK.exe: PE32 executable (GUI) Intel 80386, for MS Windows | |
| 22 | aJaKgsS.class: compiled Java class data, version 45.3 | |
| 23 | cJHyxJKchG.dat: ASCII text |
