Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- buffer@rigel ~/thug/src $ python thug.py http://10.3.6.54:8080/1
- [2014-06-26 15:23:32] [window open redirection] about:blank -> http://10.3.6.54:8080/1
- [2014-06-26 15:23:32] [HTTP Redirection (Status: 302)] Content-Location: http://10.3.6.54:8080/1 --> Location: http://10.3.6.54:8080/1/
- [2014-06-26 15:23:32] [HTTP] URL: http://10.3.6.54:8080/1/ (Status: 200, Referrer: None)
- [2014-06-26 15:23:32] [HTTP] URL: http://10.3.6.54:8080/1/ (Content-type: text/html, MD5: fc2088853efdf38f819b83de3a5c0a39)
- [2014-06-26 15:23:32] <applet archive="jhBnvoNW.jar" code="oaJG.class" height="1" width="1"></applet>
- [2014-06-26 15:23:32] [Navigator URL Translation] jhBnvoNW.jar --> http://10.3.6.54:8080/1/jhBnvoNW.jar
- [2014-06-26 15:23:32] [applet redirection] http://10.3.6.54:8080/1/ -> http://10.3.6.54:8080/1/jhBnvoNW.jar
- [2014-06-26 15:23:33] [HTTP] URL: http://10.3.6.54:8080/1/jhBnvoNW.jar (Status: 200, Referrer: http://10.3.6.54:8080/1/)
- [2014-06-26 15:23:33] [HTTP] URL: http://10.3.6.54:8080/1/jhBnvoNW.jar (Content-type: application/octet-stream, MD5: 616eca13cc6fc173349f3836a1bf53c8)
- [2014-06-26 15:23:37] [HoneyAgent] Sample 616eca13cc6fc173349f3836a1bf53c8 submitted
- [2014-06-26 15:23:37] Saving log analysis at ../logs/c2b78e6e949138622263f77d4ec946fd/20140626152332
- buffer@rigel ~/thug/src $ cd ../logs/c2b78e6e949138622263f77d4ec946fd/20140626152332/analysis/honeyagent/dropped/
- buffer@rigel ~/thug/logs/c2b78e6e949138622263f77d4ec946fd/20140626152332/analysis/honeyagent/dropped $ ls -lh
- total 92K
- -rw-r--r-- 1 buffer buffer 73K Jun 26 15:23 PRGEepzK.exe
- -rw-r--r-- 1 buffer buffer 9.2K Jun 26 15:23 aJaKgsS.class
- -rw-r--r-- 1 buffer buffer 110 Jun 26 15:23 cJHyxJKchG.dat
- buffer@rigel ~/thug/logs/c2b78e6e949138622263f77d4ec946fd/20140626152332/analysis/honeyagent/dropped $ file *
- PRGEepzK.exe: PE32 executable (GUI) Intel 80386, for MS Windows
- aJaKgsS.class: compiled Java class data, version 45.3
- cJHyxJKchG.dat: ASCII text
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement