魔盾安全分析报告

分析类型 开始时间 结束时间 持续时间 分析引擎版本
URL 2020-04-07 22:15:37 2020-04-07 22:17:51 134 秒 1.4-Maldun
虚拟机机器名 标签 虚拟机管理 开机时间 关机时间
win7-sp1-x64-hpdapp01-1 win7-sp1-x64-hpdapp01-1 KVM 2020-04-07 22:15:37 2020-04-07 22:17:51
魔盾分数

0.0

正常的

URL信息

URL http://cxtj.ccccltd.cn/LoginAction.do
VirusTotal VirusTotal查询失败

特征

无特征匹配

运行截图

网络分析

域名解析

域名 响应
cxtj.ccccltd.cn A 117.21.219.95
A 111.13.147.240
CNAME 57df6de1e123c88a.cname.365cyd.cn

TCP连接

IP地址 端口
117.21.219.95 80
117.21.219.95 80

UDP连接

IP地址 端口
192.168.122.1 53

HTTP请求

URL HTTP数据
http://cxtj.ccccltd.cn/LoginAction.do 
GET /LoginAction.do HTTP/1.1
Accept: */*
Accept-Language: zh-cn
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: cxtj.ccccltd.cn
Connection: Keep-Alive
http://cxtj.ccccltd.cn/css/jituancss/zj_css.css 
GET /css/jituancss/zj_css.css HTTP/1.1
Accept: */*
Referer: http://cxtj.ccccltd.cn/LoginAction.do
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: cxtj.ccccltd.cn
Connection: Keep-Alive
Cookie: JSESSIONID=0vMAc8VxtK8OosI9YeVFd67i.undefined; __jsluid_h=197639886e9a247fd3ea0f7a60336b7d
http://cxtj.ccccltd.cn/images/bk_bj.png 
GET /images/bk_bj.png HTTP/1.1
Accept: */*
Referer: http://cxtj.ccccltd.cn/LoginAction.do
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: cxtj.ccccltd.cn
Connection: Keep-Alive
Cookie: JSESSIONID=0vMAc8VxtK8OosI9YeVFd67i.undefined; __jsluid_h=197639886e9a247fd3ea0f7a60336b7d
http://cxtj.ccccltd.cn/images/dl.png 
GET /images/dl.png HTTP/1.1
Accept: */*
Referer: http://cxtj.ccccltd.cn/LoginAction.do
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: cxtj.ccccltd.cn
Connection: Keep-Alive
Cookie: JSESSIONID=0vMAc8VxtK8OosI9YeVFd67i.undefined; __jsluid_h=197639886e9a247fd3ea0f7a60336b7d
http://cxtj.ccccltd.cn/images/fx.png 
GET /images/fx.png HTTP/1.1
Accept: */*
Referer: http://cxtj.ccccltd.cn/LoginAction.do
Accept-Language: zh-CN
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Accept-Encoding: gzip, deflate
Host: cxtj.ccccltd.cn
Connection: Keep-Alive
Cookie: JSESSIONID=0vMAc8VxtK8OosI9YeVFd67i.undefined; __jsluid_h=197639886e9a247fd3ea0f7a60336b7d
http://cxtj.ccccltd.cn/favicon.ico 
GET /favicon.ico HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)
Host: cxtj.ccccltd.cn
Connection: Keep-Alive
Cookie: JSESSIONID=0vMAc8VxtK8OosI9YeVFd67i.undefined; __jsluid_h=197639886e9a247fd3ea0f7a60336b7d

投放文件

无信息

行为分析

互斥量(Mutexes) 无信息
执行的命令 无信息
创建的服务 无信息
启动的服务 无信息

进程

iexplore.exe PID: 2660, 上一级进程 PID: 2336

访问的文件 无信息
读取的文件 无信息
修改的文件 无信息
删除的文件 无信息
注册表键 无信息
读取的注册表键 无信息
修改的注册表键 无信息
删除的注册表键 无信息
API解析 无信息