Trojan.DownLoader46.45662

Техническая информация

Сетевая активность

Подключается к

'fo##opup.ir':443
'x1.#.lencr.org':80
'x.##2.us':80
'ir###nblog.com':443
'be##.#aprila.com':443
'ir###nblog.com':80
'ai##ameh.ir':443
'ir##cn.com':443
'uu##oad.ir':443
'ja###online.ir':443
'd3#######h0ylk.cloudfront.net':443
'cd#.yjc.ir':443
's4.##cofile.com':443
'1c#r.ir':443
'go###iran.ir':443
'vi##a.ir':443
'ja###online.ir':80
'ae###ameh.ir':80
'1c#r.ir':80
'vi##a.ir':80
'cd#.yjc.ir':80
'bl##.#eriksaz.com':80
's4.##cofile.com':80
'ir##cn.com':80
'go###iran.ir':80
'ro##p.ir':443
'ae###ameh.com':80
'uu##oad.ir':80
'oc##.#ectigo.com':80
'microsoft.com':80

TCP

Запросы HTTP GET

http://uu##oad.ir/files/ioe5_1234.jpg
http://bl##.#eriksaz.com/wp-content/uploads/2017/05/fda4f8c108344b0dcdd15d19c92a6741.jpg
http://www.de###saz.com/images/home/download.png
http://bl##.#eriksaz.com/wp-content/uploads/2016/12/1-1.png
http://www.ir###nshop.ir/images/banners/6316.gif
http://www.ir###nshop.ir/images/banners/8459.gif
http://ir##cn.com/images/aeen5.jpg
http://ir##cn.com/images/home/download.png
http://ae###ameh.ir/images/banners/aeen1.gif
http://ir##cn.com/images/products/8803/parag_20221615336_1.png
http://ir##cn.com/images/products/8803/parag_20221615336_2.jpg
http://bl##.#eriksaz.com/wp-content/uploads/2016/12/4.png
http://bl##.#eriksaz.com/wp-content/uploads/2016/12/5-1.png
http://ae###ameh.ir/images/aeen103.gif
http://ae###ameh.ir/images/aeen102.jpg
http://www.ir###nshop.ir/adbox2.aspx?rg###########
http://bl##.#eriksaz.com/wp-content/uploads/2016/10/photo_16.jpg
http://bl##.#eriksaz.com/wp-content/uploads/2016/10/photo_soale20.jpg
http://bl##.#eriksaz.com/wp-content/uploads/2016/10/soale-30.jpg
http://bl##.#eriksaz.com/wp-content/uploads/2016/07/eshgh1.gif
http://bl##.#eriksaz.com/wp-content/uploads/2016/11/147543469073090-irannaz-com.jpg
http://bl##.#eriksaz.com/wp-content/uploads/2016/12/3-1.png
http://ir###nblog.com/ads/file/1aeennameh120.gif
http://www.ir###nblog.com/ads/file/1aeennameh120.gif
http://x.##2.us/x.cer
http://x1.#.lencr.org/
http://uu##oad.ir/files/xckf_11.jpg
http://uu##oad.ir/files/zzwm_44.jpg
http://ir##cn.com/images/products/8803/p1.jpg
http://ir##cn.com/images/tablighat/aeenjadid.gif
http://www.de###saz.com/images/home/arrow3.png
http://ir##cn.com/images/aeen4.jpg
http://uu##oad.ir/files/65il_55.jpg
http://ae###ameh.com/images/aeen6.jpg
http://www.go###iran.ir/wp-content/uploads/2020/01/8.png
http://ir##cn.com/images/aeen6.jpg
http://ir##cn.com/images/aeen1.jpg
http://s4.##cofile.com/file/7763160535/1_tavajoh.gif
http://s4.##cofile.com/file/7763160749/2_new.gif
http://vi##a.ir/include/lifestyle/images/670d32542d71158f298b3ccdbac11d6b.jpg
http://uu##oad.ir/files/ujs8_aeennameh.com.png
http://uu##oad.ir/files/3i2r_22.png
http://de###saz.com/images/home/download.png
http://1c#r.ir/thumbnails/cmsing/908.jpg/%20620/%20349
http://de###saz.com/images/products/moghan_5_3.GIF
http://cd#.yjc.ir/files/fa/news/1395/9/7/5490872_247.jpg
http://uu##oad.ir/files/gl1i_photo_soal1.jpg
http://ir##cn.com/images/aeen2.jpg
http://ae###ameh.ir/images/home/download.png
http://www.de###saz.com/images/products/moghan_5_3.GIF
http://uu##oad.ir/files/3qql_123456789.png
http://uu##oad.ir/files/exhr_1234567890.png
http://www.ja###online.ir/files/fa/news/1395/8/1/272186_257.jpg
http://www.de###saz.com/images/products/moghan_5_1.jpg
http://bl##.#eriksaz.com/wp-content/uploads/2017/05/motor-deriksaz-com1.jpg
http://bl##.#eriksaz.com/wp-content/uploads/2017/05/Motorcycle-deriksaz-com.jpg
http://www.ae###ameh.ir/images/banners/aeen1.gif
http://uu##oad.ir/files/j6m5_22.jpg
http://uu##oad.ir/files/t154_33.jpg
http://ir##cn.com/images/aeen3.jpg
http://ae###ameh.ir/images/aeen100.jpg
http://ae###ameh.ir/images/aeen101.gif
http://oc##.#ectigo.com/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRDC9IOTxN6GmyRjyTl2n4yTUczyAQUjYxexFStiuF36Zv5mwXhuAGNYeECEQCJj8UD1KYapqbbKaz3UYd%2F
http://www.microsoft.com/pki/certs/MicRooCerAut_2010-06-23.crt