Apache httpd2.4.52

HTTP/1.1 200 OK
Date: Tue, 29 Oct 2024 23:02:23 GMT
Server: Apache/2.4.52 (Ubuntu)
Last-Modified: Mon, 20 May 2024 06:20:01 GMT
ETag: "9-618dcb1013bf5"
Accept-Ranges: bytes
Content-Length: 9
Content-Type: text/html

Java RMI
N\x00\x0e224.114.13.155\x00\x00\xa2\xea

Cobalt Strike Beacon

HTTP/1.1 404 Not Found
Date: Thu, 21 Nov 2024 09:25:15 GMT
Content-Type: text/plain
Content-Length: 0


Cobalt Strike Beacon:
  x86:
    beacon_type: HTTP
    dns-beacon.strategy_fail_seconds: -1
    dns-beacon.strategy_fail_x: -1
    dns-beacon.strategy_rotate_seconds: -1
    http-get.client:
      Cookie
    http-get.uri: 101.43.59.200,/cx
    http-get.verb: GET
    http-post.client:
      Content-Type: application/octet-stream
      id
    http-post.uri: /submit.php
    http-post.verb: POST
    maxgetsize: 1048576
    port: 6666
    post-ex.spawnto_x64: %windir%\sysnative\rundll32.exe
    post-ex.spawnto_x86: %windir%\syswow64\rundll32.exe
    process-inject.execute:
      CreateThread
      SetThreadContext
      CreateRemoteThread
      RtlCreateUserThread
    process-inject.startrwx: 64
    process-inject.stub: 0b34150c342e35d2ffacb2227620d91c
    process-inject.userwx: 64
    proxy.behavior: 2 (Use IE settings)
    server.publickey_md5: 4d36399e12aa21cfdff47fae716454cd
    sleeptime: 60000
    useragent_header: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727)
    uses_cookies: 1
    watermark: 987654321
  x64:
    beacon_type: HTTP
    dns-beacon.strategy_fail_seconds: -1
    dns-beacon.strategy_fail_x: -1
    dns-beacon.strategy_rotate_seconds: -1
    http-get.client:
      Cookie
    http-get.uri: 101.43.59.200,/dot.gif
    http-get.verb: GET
    http-post.client:
      Content-Type: application/octet-stream
      id
    http-post.uri: /submit.php
    http-post.verb: POST
    maxgetsize: 1048576
    port: 6666
    post-ex.spawnto_x64: %windir%\sysnative\rundll32.exe
    post-ex.spawnto_x86: %windir%\syswow64\rundll32.exe
    process-inject.execute:
      CreateThread
      SetThreadContext
      CreateRemoteThread
      RtlCreateUserThread
    process-inject.startrwx: 64
    process-inject.stub: 0b34150c342e35d2ffacb2227620d91c
    process-inject.userwx: 64
    proxy.behavior: 2 (Use IE settings)
    server.publickey_md5: 4d36399e12aa21cfdff47fae716454cd
    sleeptime: 60000
    useragent_header: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1)
    uses_cookies: 1
    watermark: 987654321