魔盾安全分析报告

分析类型	开始时间	结束时间	持续时间	分析引擎版本
URL	2020-01-16 20:30:24	2020-01-16 20:32:41	137 秒	1.4-Maldun

虚拟机机器名	标签	虚拟机管理	开机时间	关机时间
win7-sp1-x64-hpdapp01-1	win7-sp1-x64-hpdapp01-1	KVM	2020-01-16 20:30:25	2020-01-16 20:32:42

魔盾分数
0.35 正常的

URL	http://5eplay.space/
VirusTotal	VirusTotal查询失败

网络分析

域名解析

域名	响应
5eplay.space	A 104.27.169.229 A 104.27.168.229
cdnjs.cloudflare.com	A 104.17.64.4 A 104.17.65.4
use.fontawesome.com	A 23.111.9.35 CNAME fontawesome-cdn.fonticons.netdna-cdn.com
code.jquery.com	CNAME cds.s5x3j6q5.hwcdn.net A 209.197.3.24
www.smartsuppchat.com	A 52.57.141.222 A 35.156.233.228 CNAME smartsuppchat.com A 35.158.145.54
x.ss2.us	A 143.204.126.71 A 143.204.126.6 A 143.204.126.107 A 143.204.126.14
js.intercomcdn.com	A 13.225.176.87 A 13.225.176.44 CNAME d1spgg7psata7d.cloudfront.net A 13.225.176.115 A 13.225.176.124
s2.ax1x.com	A 46.4.132.220
i.gyazo.com	A 104.19.142.111 A 104.19.143.111
i.imgur.com	A 151.101.40.193 CNAME prod.imgur.map.fastlylb.net
static.5eplay.com	A 121.207.229.203 A 140.249.61.101 A 140.249.60.232 A 121.207.229.171 A 140.249.60.231 A 121.207.229.172 A 140.249.60.229 CNAME static.5eplay.com.w.kunlungr.com A 121.207.229.204 A 140.249.61.73 A 140.249.60.228 A 140.249.60.230 A 140.249.61.18 A 140.249.61.100 A 140.249.61.99 A 121.207.229.202
image.ibb.co	A 64.31.6.154
epulze.com	A 104.26.8.63 A 104.26.9.63

TCP连接

IP地址	端口
104.17.64.4	443
104.17.64.4	443
104.17.64.4	443
104.19.142.111	443
104.26.8.63	443
104.26.8.63	443
104.26.8.63	443
104.27.169.229	80
104.27.169.229	443
104.27.169.229	443
104.27.169.229	443
104.27.169.229	443
104.27.169.229	443
104.27.169.229	443
104.27.169.229	443
104.27.169.229	443
104.27.169.229	443
104.27.169.229	443
104.27.169.229	443
104.27.169.229	443
121.207.229.172	443
13.225.176.87	443
13.225.176.87	443
13.225.176.87	443
13.225.176.87	443
143.204.126.107	80
151.101.40.193	443
151.101.40.193	443
151.101.40.193	443
151.101.40.193	443
151.101.40.193	443
151.101.40.193	443
151.101.40.193	443
151.101.40.193	443
151.101.40.193	443
151.101.40.193	443
151.101.40.193	443
151.101.40.193	443
192.168.122.1	53
209.197.3.24	443
23.111.9.35	443
23.111.9.35	443
35.156.233.228	443
46.4.132.220	443
64.31.6.154	443

UDP连接

IP地址	端口
192.168.122.1	53
192.168.122.1	53
192.168.122.1	53
192.168.122.1	53
192.168.122.1	53
192.168.122.1	53
192.168.122.1	53
192.168.122.1	53
192.168.122.1	53
192.168.122.1	53
192.168.122.1	53
192.168.122.1	53
192.168.122.1	53

HTTP请求

URL	HTTP数据
http://5eplay.space/	GET / HTTP/1.1 Accept: / Accept-Language: zh-cn User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E) Accept-Encoding: gzip, deflate Host: 5eplay.space Connection: Keep-Alive
http://x.ss2.us/x.cer	GET /x.cer HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Microsoft-CryptoAPI/6.1 Host: x.ss2.us

URL

HTTP数据

http://5eplay.space/

GET / HTTP/1.1
Accept: */*
Accept-Language: zh-cn
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: 5eplay.space
Connection: Keep-Alive

http://x.ss2.us/x.cer

GET /x.cer HTTP/1.1
Connection: Keep-Alive
Accept: */*
User-Agent: Microsoft-CryptoAPI/6.1
Host: x.ss2.us

魔盾安全分析报告

0.35

正常的

URL信息

特征

运行截图

网络分析

域名解析

TCP连接

UDP连接

HTTP请求

投放文件

行为分析

进程

iexplore.exe PID: 2672, 上一级进程 PID: 2332