Trojan.DownLoader36.44064

Technical Information

Network activity

Connects to

'ro##log.com':80
'sa###dyardim.ir':80
'mu####iranian.ir':80
'pa####online.com':80
'me###.isna.ir':443
'cu#.ir':80
'st#####.parsnews.com':443
'mu####iranian.ir':443
'fa##naz.com':80
'ro###lus.com':80
'go#####agmanager.com':443
'd3#######h0ylk.cloudfront.net':443
'st####3.rokna.ir':443
'mi###online.ir':443
'ba#.ir':443
'he###tech.com':80
'st####0.borna.news':443
'am##ing.ir':80
'be###ote.com':80
'me###.isna.ir':80
'st#####.parsnews.com':80
'hi##ip.ir':80
'en######d-tbn2.gstatic.com':443
'fr#####nloadnewa.com':80
'de###efilm.org':443
'me###.#amejamonline.ir':80
'ph#####1.wisgoon.com':80
'fo###.#inemacenter.ir':80
'pa##naz.ir':80
'microsoft.com':80
'st#####.bornanews.ir':80
'st####3.rokna.ir':80
'im####.persianblog.ir':80
'up####.wikimedia.org':443
'do#####dhappysong.com':80
'me###.jamnews.ir':80
'fe###ans.bab.ir':80
'ta###zeman.ir':80
'mi###online.ir':80
'cd#.###ine.4dsply.com':443
'ji##li1.net':80
'r3.#.lencr.org':80

TCP

HTTP GET requests

http://www.m-#####ur.asiafun.ir/js/site.js
http://up.####ipour.asiafun.ir/view/2364245/model-h-amazing-ir-14.jpg
http://up.####ipour.asiafun.ir/view/2420531/96-10-15enew1182.jpg
http://up.####ipour.asiafun.ir/view/2184980//.*1%20H~31%20D.*.jpg
http://up.####ipour.asiafun.ir/view/3182937/1588166035.png
http://up.####ipour.asiafun.ir/view/3277080/4147232.jpg
http://up.####ipour.asiafun.ir/view/3278344/117102305.jpg
http://up.####ipour.asiafun.ir/view/3278347/115519940.jpg
http://up.####ipour.asiafun.ir/view/3278353/ae-varzesh-tv-farsi-2148.jpg
http://up.####ipour.asiafun.ir/view/3280522/tv24.png
http://up.####ipour.asiafun.ir/view/3280525/f14f3616dd005292cc211e82da61b3f9e4530685_1597669902.jpg
http://up.####ipour.asiafun.ir/view/3282660/79cc407b1a341407de22310eacd3e848bcea5dc9_1598249689.jpg
http://up.####ipour.asiafun.ir/view/3282663/120324182.jpg
http://up.####ipour.asiafun.ir/view/3282665/4461608.jpg
http://me###.jamnews.ir/medium1/1395/12/27/JamNewsImage09183245.jpg
http://www.ro##a.ir/Uploads/Picture/14febadfd94e48339bdd3c8fe4b0835f.jpg
http://www.pa##naz.com/images/2017/10/1238196149.jpg
http://www.pa##naz.com/images/2017/04/611573078.jpg
http://me###.jamnews.ir/medium1/1391/12/08/IMG18101754.jpg
http://up.####ipour.asiafun.ir/view/3294862/large_c2e12155-e477-45fa-9add-9d57cb2b7139.jpg
http://ro##log.com/temp/rang/like.png
http://ro##log.com/temp/nuke/FBarrow.gif
http://r3.#.lencr.org/MFMwUTBPME0wSzAJBgUrDgMCGgUABBRI2smg%2ByvTLU%2Fw3mjS9We3NfmzxAQUFC6zF7dYVsuuUAlA5h%2BvnYsUwsYCEgP1MA6%2FrRsrEwRN0ENJhwbctA%3D%3D
http://r3.#.lencr.org/MFMwUTBPME0wSzAJBgUrDgMCGgUABBRI2smg%2ByvTLU%2Fw3mjS9We3NfmzxAQUFC6zF7dYVsuuUAlA5h%2BvnYsUwsYCEgRtL9qdZQS0UE9fLQA2laDDMw%3D%3D