Trojan.DownLoader38.29951

Technical Information

Network activity

Connects to

'm-#####ur.asiafun.ir':80
'fa###news.com':80
'am##ing.ir':80
'fi###.namnak.com':443
'kh###rpu.com':443
'hi##ip.ir':80
'go#####agmanager.com':443
'kh###obank.com':443
'cd#.##shreghnews.ir':443
'po##news.ir':443
'en##khab.ir':443
'pe##l.ir':443
'is##news.ir':80
'be###ote.com':443
'na##how.ir':80
'mu####iranian.ir':80
'microsoft.com':80
'pa##naz.ir':443
'mi###online.ir':443
'st#####.eghtesadnews.com':443
'st####.hugedomains.com':80
'sn#.ir':443
'cu#.ir':80
'do####adgozar.co':80
'mu####iranian.ir':443
'af###news.ir':443
'fa###news.com':443
'd3#######h0ylk.cloudfront.net':443
'na##how.ir':443
'ba#.ir':443
'sh####arnews.net':80
'me###.#amejamonline.ir':80
'it##san.com':443
'af###news.ir':80
'di####amasani.ir':80
'cd#.###ine.4dsply.com':443
'it##san.com':80
'ne######a.tasnimnews.com':443
'kh###obank.com':80
'kh###rpu.com':80
'cd#.##shreghnews.ir':80
'po##news.ir':80
'pe##l.ir':80
'cd#.##rtarinha.ir':80
'me###.snn.ir':80
'sa##n.ir':80
'en##khab.ir':80
'gr###tar.com':80
'he###tech.com':80
'mi###online.ir':80
'fi###.namnak.com':80
'en######d-tbn2.gstatic.com':443
'ph#####1.wisgoon.com':80
'fa##naz.com':80
'fo###.#inemacenter.ir':80
'ax##g.com':80
'ji##li1.net':80
'de###efilm.org':443
'im####.persianblog.ir':80
'do#####dhappysong.com':80
'pa##naz.ir':80
'do####adgozar.ir':80
'be###ote.com':80
'fe###ans.bab.ir':80
'st#####.eghtesadnews.com':80
'st####3.rokna.ir':80
'r3.#.lencr.org':80

TCP

HTTP GET requests

http://ro##log.com/include/rozblog_ads_js.php
http://r3.#.lencr.org/MFMwUTBPME0wSzAJBgUrDgMCGgUABBRI2smg%2ByvTLU%2Fw3mjS9We3NfmzxAQUFC6zF7dYVsuuUAlA5h%2BvnYsUwsYCEgQ8TKUFAI1LoEx0r1uQ2J%2FP7g%3D%3D
http://www.microsoft.com/pki/certs/MicRooCerAut_2010-06-23.crt
http://up.####ipour.asiafun.ir/view/2184980//.*1%20H~31%20D.*.jpg
http://up.####ipour.asiafun.ir/view/2317403/photo5935824449125329514.jpg
http://up.####ipour.asiafun.ir/view/3182935/127_800.jpg
http://up.####ipour.asiafun.ir/view/2411459/1524558_401.jpg
http://www.po##news.ir/files/fa/news/1395/8/12/243714_607.jpg
http://up.####ipour.asiafun.ir/view/3277080/4147232.jpg
http://up.####ipour.asiafun.ir/view/3278344/117102305.jpg
http://up.####ipour.asiafun.ir/view/3278347/115519940.jpg
http://up.####ipour.asiafun.ir/view/3278353/ae-varzesh-tv-farsi-2148.jpg
http://up.####ipour.asiafun.ir/view/3280522/tv24.png
http://up.####ipour.asiafun.ir/view/3280525/f14f3616dd005292cc211e82da61b3f9e4530685_1597669902.jpg
http://up.####ipour.asiafun.ir/view/3282660/79cc407b1a341407de22310eacd3e848bcea5dc9_1598249689.jpg
http://r3.#.lencr.org/MFMwUTBPME0wSzAJBgUrDgMCGgUABBRI2smg%2ByvTLU%2Fw3mjS9We3NfmzxAQUFC6zF7dYVsuuUAlA5h%2BvnYsUwsYCEgPLt7jw4KOhGXFvHCNxZ3Mlug%3D%3D
http://up.####ipour.asiafun.ir/view/3282663/120324182.jpg
http://up.####ipour.asiafun.ir/view/3294862/large_c2e12155-e477-45fa-9add-9d57cb2b7139.jpg
http://up.####ipour.asiafun.ir/view/2182886/E4.5'*-%C2%A9'ED-.H/1H%C3%8C-%C2%A9H&%C3%8C%C2%A9-41%C2%A9*-3'%C3%8C~'-9%C2%A9-1.jpg
http://up.####ipour.asiafun.ir/view/2192398/78418927.jpg
http://up.####ipour.asiafun.ir/view/2470015/1202429_522.jpg
http://up.####ipour.asiafun.ir/view/3095668/5e6bb2e9ae98c_2020-03-13_19-50.jpeg
http://www.be###ote.com/images/stories/fun/fun628.jpg
http://www.pa##naz.com/images/2017/10/1484796944.jpg
http://www.be###ote.com/images/stories/economic/hhe2708-general-culture.jpg
http://www.be###ote.com/images/stories/fun/fu5933.jpg
http://me###.snn.ir/medium/1394/11/25/IMG20223826.jpg
http://up.####ipour.asiafun.ir/view/3182936/Sajam_infographic.jpg
http://cd#.yjc.ir/files/fa/news/1395/9/24/5564827_843.jpg
http://ro##log.com/temp/rang/like.png
http://ro##log.com/temp/nuke/FBarrow.gif
http://up.####ipour.asiafun.ir/view/3282665/4461608.jpg
http://r3.#.lencr.org/MFMwUTBPME0wSzAJBgUrDgMCGgUABBRI2smg%2ByvTLU%2Fw3mjS9We3NfmzxAQUFC6zF7dYVsuuUAlA5h%2BvnYsUwsYCEgTC8D7i1g1gXuN183eprJqYOg%3D%3D