joellots/AegisFlowDataset

1true_label,class,attack_type,source,flow_id,mean_Length_of_IP_packets,std_Length_of_IP_packets,max_Length_of_IP_packets,min_Length_of_IP_packets,mean_Length_of_TCP_payload,std_Length_of_TCP_payload,max_Length_of_TCP_payload,min_Length_of_TCP_payload,Length_of_TCP_payload,mean_Time_difference_between_packets_per_session,std_Time_difference_between_packets_per_session,max_Time_difference_between_packets_per_session,min_Time_difference_between_packets_per_session,mean_Interval_of_arrival_time_of_forward_traffic,std_Interval_of_arrival_time_of_forward_traffic,max_Interval_of_arrival_time_of_forward_traffic,min_Interval_of_arrival_time_of_forward_traffic,mean_Interval_of_arrival_time_of_backward_traffic,std_Interval_of_arrival_time_of_backward_traffic,max_Interval_of_arrival_time_of_backward_traffic,min_Interval_of_arrival_time_of_backward_traffic,median_Time_difference_between_packets_per_session,mean_time_to_live,std_time_to_live,max_time_to_live,min_time_to_live,mean_TCP_windows_size_value,std_TCP_windows_size_value,max_TCP_windows_size_value,min_TCP_windows_size_value,median_TCP_windows_size_value,The_times_of_change_of_payload_per_session,Change_values_of_TCP_windows_length_per_session,src_ip,dst_ip,src_port,dst_port,protocol,bidirectional_packets,requested_server_name,client_fingerprint,server_fingerprint20,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:52343-23.204.183.218:443-6-1668466169612,1099.1849315068491,632.3507211429393,1514,54,102.70000000000003,212.1439247953761,1208,54,3081,757.296551724138,9089.29303197826,109452,0,3786.4827586206898,20322.37241778607,109452,0,954.7043478260869,10206.179227340413,109452,0,3.0,0.0,0.0,0.0,0.0,772.9757203589985,644.1966467669426,1514.0,54.0,1099.1849315068491,72,74,172.16.24.174,23.204.183.218,52343,443,6,146,www.irs.gov,t12d190700_d83cc789557e_2dae41c691ec,4b7d5f58af981be54baeda917533e5d831,c2_beaconing,mta_gozi,Gozi_2023-07-12.pcap,10.7.12.121:50247-170.130.55.162:443-6-1689203926504,347.79166666666663,530.5418869802645,1514,54,144.18181818181816,192.9812520333611,636,54,1586,471.91304347826076,2174.129813658861,10441,0,1085.4,3288.5610226967055,10441,0,901.8333333333334,3005.3281422207865,10441,0,27.0,0.0,0.0,0.0,0.0,537.5611564361565,558.6805362074457,1514.0,54.0,347.79166666666663,16,18,10.7.12.121,170.130.55.162,50247,443,6,24,iamupdate.com,t12d190700_d83cc789557e_2dae41c691ec,4ce0442e9d20d092d9d74e9ce54b363a40,exfil,mta_astaroth,Astaroth_2023-01-04_0.pcap,10.1.4.101:49672-52.226.139.185:443-6-1672824262183,122.0,83.55836283700154,225,54,104.5,71.4177848998413,155,54,209,35.666666666666664,32.036437588054845,62,0,107.0,0.0,107,107,62.0,0.0,62,62,53.5,0.0,0.0,0.0,0.0,125.88888888888889,63.818657049912304,225.0,54.0,122.0,3,3,10.1.4.101,52.226.139.185,49672,443,6,4,,,50,benign,benign,ctu_normal21_kali_2017.pcap,192.168.1.191:46792-52.94.216.48:443-6-1493727083940,93.78125,103.14997986802611,523,54,104.49999999999999,126.7412061380723,523,54,1672,2155.290322580645,3960.923404069211,10030,0,4451.4,5006.878266088419,10784,0,4450.6,5015.9328259343465,10760,0,112.5,0.0,0.0,0.0,0.0,201.70486111111111,189.3065981109712,523.0,54.0,93.78125,12,14,192.168.1.191,52.94.216.48,46792,443,6,32,aax-eu.amazon-adsystem.com,t12d1109h2_43e74fd21232_fed6c16fddd0,30553045c697c20ead22a41ae6655ff161,c2_beaconing,mta_pikabot,Pikabot_2023-11-02.pcap,10.11.2.101:53045-154.92.19.139:2222-6-1698964929026,166.9722222222222,283.8788963233755,1430,60,120.89473684210527,169.70002774073043,748,60,2297,3631.285714285714,6720.472443001523,30413,0,7060.833333333333,8048.8678579113,30413,0,6816.0,7915.937569233351,30414,0,2561.0,0.0,0.0,0.0,0.0,477.1486163666246,547.8535326778667,1430.0,60.0,166.9722222222222,30,32,10.11.2.101,154.92.19.139,53045,2222,6,36,,t12i190700_d83cc789557e_7af1ed941c26,ec74a5c51106f0419184d0dd08fb05bc71,c2_beaconing,mta_qakbot,Qakbot_2022-09-29.pcap,10.9.29.201:50395-193.3.19.137:443-6-1664433387876,171.33333333333331,225.75281467422136,786,54,156.0,219.9028711210309,689,54,1872,5361.099999999999,17842.2336042737,75002,0,9747.454545454546,23618.447177423146,75002,0,13383.75,27230.93661759412,75004,1,2.0,0.0,0.0,0.0,0.0,326.9012345679012,306.91132861722855,786.0,54.0,171.33333333333331,14,16,10.9.29.201,193.3.19.137,50395,443,6,21,,t13i201000_2b729b4bf6f3_533b6d20482b,2253c82f03b621c5144709b393fde2c980,exfil,mta_stealc,StealC_2025-06-18.pcap,172.16.1.128:57387-52.140.118.28:443-6-1750264230586,277.23999999999995,431.5827730574982,1514,54,172.1818181818182,234.93863802355636,845,54,1894,130.25000000000003,279.19328663910926,1226,0,312.6,374.8378019594312,1228,0,213.53846153846158,354.80783892707694,1226,0,175.5,0.0,0.0,0.0,0.0,538.2452813852814,571.1341066407348,1514.0,54.0,277.23999999999995,18,20,172.16.1.128,52.140.118.28,57387,443,6,25,settings-win.data.microsoft.com,t12d1809h2_4b22cbed5bed_7af1ed941c26,2fe9b0e731d3d41b2b84e8e1d618683691,c2_beaconing,mta_icedid,IcedID_2023-05-10.pcap,172.16.10.73:50588-81.224.201.143:2222-6-1683743583656,187.60869565217394,304.2683831946029,1295,54,155.84615384615387,233.9165970147787,784,54,2026,1761.5000000000002,6626.724377563208,30651,0,3229.4166666666665,8869.237842200147,30651,0,4287.0,10155.210657588546,30651,1,2.0,0.0,0.0,0.0,0.0,456.48387216648086,495.97676092736583,1295.0,54.0,187.60869565217394,14,16,172.16.10.73,81.224.201.143,50588,2222,6,23,,t13i201100_2b729b4bf6f3_2e4f304f1f45,2253c82f03b621c5144709b393fde2c9100,c2_beaconing,mta_gozi,Gozi_2023-07-12.pcap,10.7.12.121:49850-20.189.173.7:443-6-1689201848288,465.4838709677419,575.7105100637381,1514,54,616.6153846153846,595.9068073758875,1514,54,8016,22.933333333333334,53.28513626825437,207,0,57.33333333333334,74.92703521467139,211,0,36.0,66.29008221446101,207,0,60.0,0.0,0.0,0.0,0.0,682.4925098796067,616.1741255291083,1514.0,54.0,465.4838709677419,20,22,10.7.12.121,20.189.173.7,49850,443,6,31,v10.events.data.microsoft.com,t12d1909h2_d83cc789557e_7af1ed941c26,678aeaf909676262acfb913ccb78a126110,benign,benign,ctu_normal20_win_2017_https.pcap,10.0.2.15:49709-31.13.93.7:443-6-2618609,228.15384615384616,393.5176430410908,1474,54,102.5,71.81478703138815,251,54,1230,2693.480000000001,13006.348591232923,65120,0,6121.454545454546,19574.59566562557,65139,4,5176.923076923076,18012.270074690467,65120,0,21.0,0.0,0.0,0.0,0.0,447.501221001221,556.7909404938969,1474.0,54.0,228.15384615384616,19,21,10.0.2.15,31.13.93.7,49709,443,6,26,connect.facebook.net,t12d1509h2_073e58a039a6_e70312a1ce2c,2d1eb5817ece335c24904f516ad5da12121,c2_beaconing,mta_icedid,IcedID_2022-12-20.pcap,10.3.24.178:54674-23.81.246.152:443-6-1671552962234,170.23529411764704,259.10748961863413,943,54,158.66666666666666,224.78712151722573,732,54,1428,22.3125,42.57028501979599,142,0,44.625,52.779697124665546,142,0,40.85714285714286,55.41187770213342,142,0,70.0,0.0,0.0,0.0,0.0,365.79466230936816,366.14419051154795,943.0,54.0,170.23529411764704,12,14,10.3.24.178,23.81.246.152,54674,443,6,17,xedefeg.com,t12d190700_d83cc789557e_2dae41c691ec,ae4edc6faf64d08308082ad26be60767130,benign,benign,ctu_normal7_general_2013.pcap,10.0.0.46:39341-77.67.96.229:443-6-1387315378069,777.1244343891402,681.7516856584996,1506,54,137.6267942583733,177.48153871968893,647,66,28764,185.64625850340136,2107.0444804902386,31643,0,393.27884615384613,3060.263145695646,31643,0,352.65948275862075,2899.7348857017214,31643,0,3.0,0.0,0.0,0.0,0.0,677.6113668454319,603.6782165125142,1506.0,54.0,647.0,399,405,10.0.0.46,77.67.96.229,39341,443,6,442,humblebundle-a.akamaihd.net,t12d1810s2_27d4652c4487_736b2a1ed4d3,1a1694e1fbb28471f66676e1623a7e2b141,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:52320-213.91.235.146:443-6-1668465407201,183.73684210526315,317.90177415625715,1282,54,153.36363636363637,225.71277000970625,775,54,1687,6071.777777777778,19339.366868873676,78207,0,10929.2,25445.613369170987,78207,0,15589.857142857141,29778.823893434583,78208,1,3.0,0.0,0.0,0.0,0.0,451.51116427432214,491.00689052941755,1282.0,54.0,183.73684210526315,12,14,172.16.24.174,213.91.235.146,52320,443,6,19,,t12i190600_d83cc789557e_2dae41c691ec,fd4bc6cea4877646ccd62f0792ec0b62151,c2_beaconing,mta_pikabot,Pikabot_2023-05-23.pcap,10.1.0.186:55468-104.238.35.63:8080-6-1684859956956,348.62962962962956,513.9934261887423,1514,54,252.71428571428572,425.6414938873809,1514,54,3538,17.692307692307697,39.216087750584435,156,0,35.38461538461539,50.90111076315601,158,0,32.08333333333334,51.13699662907888,156,0,1.0,0.0,0.0,0.0,0.0,639.6963324741102,631.7590096343831,1514.0,54.0,348.62962962962956,19,21,10.1.0.186,104.238.35.63,55468,8080,6,27,turiruy.us,t13d201200_2b729b4bf6f3_2e4f304f1f45,2253c82f03b621c5144709b393fde2c9160,benign,benign,ctu_normal20_win_2017_https.pcap,10.0.2.15:51100-95.172.94.50:443-6-4804937,251.28,416.780069900981,1474,54,171.36363636363637,275.66257371187436,979,54,1885,36.208333333333336,64.08824023353961,229,0,86.90000000000002,81.58764884738648,230,3,60.307692307692314,79.42332215768931,229,0,5.0,0.0,0.0,0.0,0.0,536.1905627705628,569.2281440760863,1474.0,54.0,251.28,18,20,10.0.2.15,95.172.94.50,51100,443,6,25,pixel.quantserve.com,t12d1509h2_073e58a039a6_e70312a1ce2c,ccc514751b175866924439bdbb5bba34170,exfil,mta_astaroth,Astaroth_2023-01-04_0.pcap,10.1.4.101:49682-20.201.42.68:443-6-1672807415439,760.1999999999999,690.3376059989853,1514,54,242.84615384615384,420.1872293303399,1514,54,3157,24.92307692307692,69.4252284704785,322,0,81.00000000000001,108.14468423030661,322,0,31.192307692307697,79.03468566687374,322,0,161.0,0.0,0.0,0.0,0.0,746.26027223805,626.1659136600932,1514.0,54.0,760.1999999999999,21,23,10.1.4.101,20.201.42.68,49682,443,6,40,smartscreen-prod.microsoft.com,t12d1908h2_d83cc789557e_2dae41c691ec,ae4edc6faf64d08308082ad26be60767180,benign,benign,ctu_normal21_kali_2017.pcap,192.168.1.191:53744-95.172.94.60:443-6-1493726571962,294.3,451.8956679775124,1514,54,139.72727272727275,173.9931555602639,628,54,1537,16.31578947368421,23.839865378951906,97,0,28.5,32.13945308253462,97,0,35.625,54.245309211291,161,0,22.5,0.0,0.0,0.0,0.0,526.1388327721661,561.3243541082571,1514.0,54.0,294.3,15,17,192.168.1.191,95.172.94.60,53744,443,6,20,cms.quantserve.com,t12d1109h2_43e74fd21232_fed6c16fddd0,ccc514751b175866924439bdbb5bba34191,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:51823-194.165.16.90:443-6-1668460157855,466.32,610.5326035520134,1514,54,493.1666666666667,647.6681014971864,1514,54,5918,60.83333333333334,147.04618223587082,496,0,132.72727272727272,198.3295696103286,497,0,104.08333333333334,193.57519484842592,496,0,1.0,0.0,0.0,0.0,0.0,678.3361253561253,614.6092548983562,1514.0,54.0,466.32,14,16,172.16.24.174,194.165.16.90,51823,443,6,25,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b7201,c2_beaconing,mta_gozi,Gozi_2023-07-12.pcap,10.7.12.121:50082-170.130.55.162:443-6-1689203151682,376.4545454545455,554.998217695356,1514,54,153.2,200.96201962891726,636,54,1532,514.5714285714286,2249.7452427203525,10328,0,1200.6666666666667,3424.4335297973007,10328,0,978.6363636363636,3102.4318291536165,10328,0,19.5,0.0,0.0,0.0,0.0,546.4616161616161,556.9408340161756,1514.0,54.0,376.4545454545455,13,15,10.7.12.121,170.130.55.162,50082,443,6,22,iamupdate.com,t12d190700_d83cc789557e_2dae41c691ec,4ce0442e9d20d092d9d74e9ce54b363a211,c2_beaconing,mta_emotet,Emotet_2022-07-07.pcap,10.7.7.101:57429-52.18.235.51:443-6-1657220085519,414.50000000000006,534.463433071265,1514,54,114.33333333333334,153.2135142615721,619,54,1715,2527.3225806451615,13439.652369976184,74923,0,5596.214285714284,19958.21130484921,74923,0,4893.625000000001,18678.99421230526,74923,0,2.0,0.0,0.0,0.0,0.0,557.4651416122005,560.3369346287044,1514.0,54.0,414.50000000000006,24,26,10.7.7.101,52.18.235.51,57429,443,6,32,distinctive-obi-mgw.aws-euw1.cloud-ara.tyk.io,t12d190700_d83cc789557e_2dae41c691ec,61be9ce3d068c08ff99a857f62352f9d221,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:51890-194.165.16.90:443-6-1668460269984,466.32,610.5326035520134,1514,54,493.1666666666667,647.6681014971864,1514,54,5918,75.54166666666667,184.45005902780923,612,0,164.8181818181818,249.8518833956703,614,0,128.00000000000003,242.47511587414866,612,0,1.0,0.0,0.0,0.0,0.0,678.3361253561253,614.6092548983562,1514.0,54.0,466.32,14,16,172.16.24.174,194.165.16.90,51890,443,6,25,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b7231,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:50227-194.165.16.90:443-6-1668457869742,466.32,610.5326035520134,1514,54,493.1666666666667,647.6681014971864,1514,54,5918,59.666666666666664,145.63135910106442,497,0,130.18181818181816,196.9293366575017,498,0,100.24999999999999,190.85173922088413,497,0,229.0,0.0,0.0,0.0,0.0,678.3361253561253,614.6092548983562,1514.0,54.0,466.32,14,16,172.16.24.174,194.165.16.90,50227,443,6,25,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b7241,c2_beaconing,mta_bumblebee,BumbleBee_2022-06-14.pcap,10.6.14.101:49201-193.233.203.156:443-6-1655230333103,176.6,308.1733742091107,1270,60,93.125,54.85158546998827,207,60,745,60.35714285714287,96.43938482308432,220,0,120.71428571428572,113.1057238246799,224,0,108.66666666666667,115.56066228032213,223,0,5.0,0.0,0.0,0.0,0.0,385.4138888888889,478.0048853642594,1270.0,60.0,176.6,9,12,10.6.14.101,193.233.203.156,49201,443,6,15,,t12i210600_76e208dd3e22_2dae41c691ec,76c691f46143bf86e2d1bb73c6187767251,exfil,mta_lumma,Lumma_2025-08-15.pcap,10.8.15.176:62818-5.10.250.239:443-6-1755287243653,60.0,4.898979485566356,66,54,61.5,3.0,66,60,246,75.66666666666667,82.90396050048916,154,0,100.0,86.6083136886985,151,0,152.5,2.1213203435596424,154,151,151.0,0.0,0.0,0.0,0.0,60.611111111111114,4.507880616689065,66.0,54.0,60.0,0,1,10.8.15.176,5.10.250.239,62818,443,6,7,,,260,benign,benign,ctu_normal7_general_2013.pcap,10.0.0.46:58750-199.16.156.70:443-6-1387315338292,496.8617021276597,586.3368623512514,1506,66,186.53658536585365,267.71431578839554,1083,66,7648,489.58064516129025,3248.629083175871,29469,0,1133.8249999999998,4914.586081574432,29469,0,872.7307692307692,4349.550845034979,29647,0,30.0,0.0,0.0,0.0,0.0,634.8136461994889,569.5864894352254,1506.0,66.0,496.8617021276597,77,78,10.0.0.46,199.16.156.70,58750,443,6,94,www.twitter.com,t12d1810s2_27d4652c4487_736b2a1ed4d3,30e7675adab2c5b915e4bb356e9e1cc1271,c2_beaconing,mta_gozi,Gozi_2023-07-12.pcap,10.7.12.121:50740-170.130.55.162:443-6-1689206174824,361.17391304347825,524.3860177885886,1514,54,144.18181818181816,192.9812520333611,636,54,1586,491.2272727272728,2227.03980189416,10460,0,1080.7,3296.190159360753,10460,0,978.4545454545455,3145.3058154537653,10460,0,42.0,0.0,0.0,0.0,0.0,543.4932293954033,558.1816031491434,1514.0,54.0,361.17391304347825,15,17,10.7.12.121,170.130.55.162,50740,443,6,23,iamupdate.com,t12d190700_d83cc789557e_2dae41c691ec,4ce0442e9d20d092d9d74e9ce54b363a281,c2_beaconing,mta_icedid,IcedID_2022-01-12.pcap,10.22.5.47:50059-104.168.44.45:443-6-1642007101027,219.21052631578942,365.7496987083696,1279,60,211.27272727272728,373.0335349292583,1279,60,2324,59.33333333333332,96.69722302722282,218,0,106.80000000000001,111.34710493666991,218,0,121.42857142857143,111.14533599879805,216,0,5.0,0.0,0.0,0.0,0.0,506.95647262094633,523.8724558061662,1279.0,60.0,219.21052631578942,12,13,10.22.5.47,104.168.44.45,50059,443,6,19,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b7290,benign,benign,ctu_normal14_win_full_2017.pcap,10.0.2.15:51704-151.101.1.164:443-6-3351905,802.3438572409052,686.1358938179707,1474,54,90.55192878338282,60.51523178108735,525,54,30516,6.363324175824175,51.58300155233743,1284,0,27.574404761904773,106.96935172562212,1284,0,8.24664879356568,65.37097880745068,1480,0,2.0,0.0,0.0,0.0,0.0,616.0458611455558,567.5849939708613,1474.0,54.0,525.0,969,971,10.0.2.15,151.101.1.164,51704,443,6,1457,www.nytimes.com,t12d1711h2_67e6df579eba_de5ccbe16bdd,860fcf58fd757e26aa8911e5eaff6b53300,benign,benign,ctu_normal20_win_2017_https.pcap,10.0.2.15:49785-52.29.151.73:443-6-2657942,303.28571428571433,504.0037839994004,1474,54,90.10000000000001,67.34067616728144,246,54,901,364.85,1313.9592749837377,5917,0,810.7777777777778,1922.429503114339,5917,6,727.8000000000001,1915.6187164116627,6158,0,8.0,0.0,0.0,0.0,0.0,471.83073593073595,553.5940566546498,1474.0,54.0,246.0,15,17,10.0.2.15,52.29.151.73,49785,443,6,21,odr.mookie1.com,t12d1509h2_073e58a039a6_e70312a1ce2c,303951d4c50efb2e991652225a6f02b1311,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:51367-194.165.16.90:443-6-1668459605240,466.32,610.5326035520134,1514,54,493.1666666666667,647.6681014971864,1514,54,5918,77.5,196.68823266673888,722,0,169.09090909090907,268.599871386959,723,0,136.16666666666666,263.0163608230599,722,0,1.0,0.0,0.0,0.0,0.0,678.3361253561253,614.6092548983562,1514.0,54.0,466.32,14,16,172.16.24.174,194.165.16.90,51367,443,6,25,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b7321,c2_beaconing,mta_gozi,Gozi_2023-07-12.pcap,10.7.12.121:50081-170.130.55.162:443-6-1689203146322,347.79166666666663,530.5418869802645,1514,54,144.18181818181816,192.9812520333611,636,54,1586,471.17391304347825,2177.0217072491473,10455,0,1083.7,3293.5873063339986,10455,1,899.3333333333334,3010.3880249240397,10456,0,1.5,0.0,0.0,0.0,0.0,537.5611564361565,558.6805362074457,1514.0,54.0,347.79166666666663,16,18,10.7.12.121,170.130.55.162,50081,443,6,24,iamupdate.com,t12d190700_d83cc789557e_2dae41c691ec,4ce0442e9d20d092d9d74e9ce54b363a331,exfil,mta_meduza,Meduza_2024-03-06_0.pcap,10.3.6.101:55927-94.72.104.77:13724-6-1709748596833,244.57894736842113,361.9211571276377,1430,60,147.2,167.343824372325,598,60,1472,3393.833333333333,14115.308253390545,59952,0,6787.666666666667,19937.189320463403,59952,0,7618.375,21217.71655236323,60129,0,96.5,0.0,0.0,0.0,0.0,486.95074723846653,530.2047392663793,1430.0,60.0,244.57894736842113,12,13,10.3.6.101,94.72.104.77,55927,13724,6,19,,t12i190700_d83cc789557e_7af1ed941c26,ec74a5c51106f0419184d0dd08fb05bc340,exfil,mta_lumma,Lumma_2024-03-07_0.pcap,10.3.7.135:49725-20.10.31.115:443-6-1709844321357,122.0,83.55836283700154,225,54,104.5,71.4177848998413,155,54,209,45.666666666666664,45.50091574170056,91,0,137.0,0.0,137,137,91.0,0.0,91,91,68.5,0.0,0.0,0.0,0.0,125.88888888888889,63.818657049912304,225.0,54.0,122.0,3,3,10.3.7.135,20.10.31.115,49725,443,6,4,,,351,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:50338-194.165.16.90:443-6-1668458038963,466.32,610.5326035520134,1514,54,493.1666666666667,647.6681014971864,1514,54,5918,74.875,183.6246910791494,611,0,163.36363636363635,248.90973172106902,613,0,127.83333333333331,242.1122329278992,611,0,1.0,0.0,0.0,0.0,0.0,678.3361253561253,614.6092548983562,1514.0,54.0,466.32,14,16,172.16.24.174,194.165.16.90,50338,443,6,25,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b7360,benign,benign,ctu_normal21_kali_2017.pcap,192.168.1.191:39602-198.47.127.15:443-6-1493727412229,388.0,571.874044765911,1514,54,298.35714285714283,502.6799879940222,1514,54,4177,10.884615384615383,17.898216499030113,62,0,21.769230769230774,22.594814472034084,62,0,19.416666666666668,28.738502312255505,75,0,13.0,0.0,0.0,0.0,0.0,652.7661782661783,625.8098179345834,1514.0,54.0,388.0,21,23,192.168.1.191,198.47.127.15,39602,443,6,27,image2.pubmatic.com,t12d1109h2_43e74fd21232_fed6c16fddd0,ccf031939aa8979b73a604c356f7fd68371,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:50108-194.165.16.90:443-6-1668457701084,435.77777777777777,589.6705294767014,1514,54,459.3846153846154,631.944425096271,1514,54,5972,52.73076923076922,134.38736776715518,466,0,114.24999999999999,183.03408773429956,467,0,89.00000000000001,176.7823520603796,466,0,1.0,0.0,0.0,0.0,0.0,668.1132817799485,618.2566902665315,1514.0,54.0,435.77777777777777,16,18,172.16.24.174,194.165.16.90,50108,443,6,27,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b7381,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:51946-194.165.16.90:443-6-1668460357204,466.32,610.5326035520134,1514,54,493.1666666666667,647.6681014971864,1514,54,5918,60.20833333333335,149.16549874046868,541,0,131.36363636363637,202.44765877987956,541,0,101.75,196.41057414600579,541,0,1.0,0.0,0.0,0.0,0.0,678.3361253561253,614.6092548983562,1514.0,54.0,466.32,14,16,172.16.24.174,194.165.16.90,51946,443,6,25,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b7390,c2_beaconing,mta_pikabot,Pikabot_2023-05-23.pcap,10.1.0.186:55346-104.238.35.63:8080-6-1684859761419,327.6071428571429,480.2460279424468,1514,54,237.66666666666666,410.95075594227075,1514,54,3565,27.66666666666668,73.88764859829155,345,0,53.357142857142854,97.4226376653308,345,0,33.416666666666664,52.52957320030366,159,0,1.0,0.0,0.0,0.0,0.0,633.4064916564917,634.5958046778657,1514.0,54.0,327.6071428571429,20,22,10.1.0.186,104.238.35.63,55346,8080,6,28,,t13i201100_2b729b4bf6f3_2e4f304f1f45,2253c82f03b621c5144709b393fde2c9400,benign,benign,ctu_normal14_win_full_2017.pcap,10.0.2.15:51266-13.90.152.108:443-6-2770729,335.03571428571416,516.1375413978445,1514,54,345.49999999999994,547.8799636283978,1514,54,4146,369.81481481481484,1640.3152379259543,8562,0,907.7272727272727,2544.6273240264118,8562,0,657.8,2281.2594328572104,8895,0,13.0,0.0,0.0,0.0,0.0,630.1914682539682,626.2955692058891,1514.0,54.0,335.03571428571416,19,21,10.0.2.15,13.90.152.108,51266,443,6,28,feedback.skype.com,t12d1711h2_67e6df579eba_de5ccbe16bdd,96c9f2048f1e949c8bb9ad97c36c9eea411,c2_beaconing,mta_gozi,Gozi_2023-07-12.pcap,10.7.12.121:50688-170.130.55.162:443-6-1689205916593,391.80952380952385,575.5847130568721,1514,54,164.2222222222222,209.92187700295662,636,54,1478,555.25,2354.580974566276,10551,0,1388.125,3704.9783279682333,10551,0,1004.0,3168.7734851200707,10551,0,33.0,0.0,0.0,0.0,0.0,549.3924162257496,555.5815419862272,1514.0,54.0,391.80952380952385,11,13,10.7.12.121,170.130.55.162,50688,443,6,21,iamupdate.com,t12d190700_d83cc789557e_2dae41c691ec,4ce0442e9d20d092d9d74e9ce54b363a420,benign,benign,ctu_normal21_kali_2017.pcap,192.168.1.191:51356-54.200.230.130:443-6-1493726956981,127.00000000000001,144.34045401988544,583,66,157.85714285714286,190.09596573961318,583,66,1105,519.6666666666666,1359.3052592698918,4798,0,1034.5,2117.606077626337,5348,1,1118.4,2189.2060889738086,5012,0,233.5,0.0,0.0,0.0,0.0,217.31746031746033,201.04973694241875,583.0,66.0,127.00000000000001,8,8,192.168.1.191,54.200.230.130,51356,443,6,13,load.sumome.com,t12d1110h2_43e74fd21232_205f67e4d9f4,91e914bce4ef89cc2b5fdad958d585f7431,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:50974-194.165.16.90:443-6-1668459005839,466.32,610.5326035520134,1514,54,493.1666666666667,647.6681014971864,1514,54,5918,71.16666666666666,176.0426496413685,612,0,155.18181818181816,239.08777391653393,612,0,123.83333333333333,233.872083659319,612,0,1.0,0.0,0.0,0.0,0.0,678.3361253561253,614.6092548983562,1514.0,54.0,466.32,14,16,172.16.24.174,194.165.16.90,50974,443,6,25,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b7441,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:50783-194.165.16.90:443-6-1668458719629,466.32,610.5326035520134,1514,54,493.1666666666667,647.6681014971864,1514,54,5918,62.70833333333335,150.1667129115726,510,0,136.8181818181818,202.62666072450494,511,0,107.41666666666667,197.3849300378846,510,0,1.0,0.0,0.0,0.0,0.0,678.3361253561253,614.6092548983562,1514.0,54.0,466.32,14,16,172.16.24.174,194.165.16.90,50783,443,6,25,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b7451,c2_beaconing,mta_qakbot,Qakbot_2022-09-29.pcap,10.9.29.201:50465-193.3.19.137:443-6-1664439493037,197.7619047619048,315.2119770506674,1335,54,156.5,221.22777238115307,695,54,1878,2604.2000000000003,8000.553688734036,29433,0,4734.909090909091,10512.813490731634,29433,0,6491.625,12039.536760636362,29433,1,151.0,0.0,0.0,0.0,0.0,459.33774250440916,503.8519591564246,1335.0,54.0,197.7619047619048,14,16,10.9.29.201,193.3.19.137,50465,443,6,21,,t13i201000_2b729b4bf6f3_533b6d20482b,2253c82f03b621c5144709b393fde2c9460,exfil,mta_lumma,Lumma_2025-12-30.pcap,10.12.30.101:63157-51.8.207.171:443-6-1767064490772,404.3076923076924,560.2422882454176,1514,54,300.9230769230769,488.8120738993091,1514,54,3912,2468.4799999999996,8927.87273150777,40428,0,5142.666666666666,12605.733863699654,40428,0,5134.833333333333,12615.883695732235,40428,0,51.0,0.0,0.0,0.0,0.0,657.4358974358975,624.2425858980242,1514.0,54.0,404.3076923076924,16,18,10.12.30.101,51.8.207.171,63157,443,6,26,l.clarity.ms,t13d1516h2_8daaf6152771_d8a2da3f94cd,d154fcfa5bb4f0748e1dd1992c681104470,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:52318-152.216.7.110:443-6-1668465406496,156.05882352941177,273.08274171673577,1180,54,208.0,370.1327464572677,1180,54,1872,6878.875,27432.056979320136,109749,0,13757.750000000002,38786.34492318141,109749,0,15713.714285714288,41466.127581092354,109750,1,30.0,0.0,0.0,0.0,0.0,359.5204248366013,443.584712460023,1180.0,54.0,156.05882352941177,10,12,172.16.24.174,152.216.7.110,52318,443,6,17,irs.gov,t12d190700_d83cc789557e_2dae41c691ec,76c691f46143bf86e2d1bb73c6187767481,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_0.pcap,172.16.24.174:50001-213.67.255.57:2222-6-1668456948447,1105.0100671140945,597.5234212610841,1514,54,71.09375000000001,97.65581261806813,776,54,4550,32.92592592592588,396.5059147609788,6804,0,155.22222222222226,855.30723482841,6805,0,41.042918454935645,447.31413772117577,6804,0,1.0,0.0,0.0,0.0,0.0,725.5438239338547,633.3031352782446,1514.0,54.0,776.0,176,178,172.16.24.174,213.67.255.57,50001,2222,6,298,,t12i190600_d83cc789557e_2dae41c691ec,fd4bc6cea4877646ccd62f0792ec0b62490,benign,benign,ctu_normal14_win_full_2017.pcap,10.0.2.15:51387-65.52.139.168:443-6-2911557,144.62595419847327,217.2043113284344,1474,54,125.66129032258061,118.85904912527069,955,54,7791,7476.684615384614,18581.78037257168,54988,0,15933.918032786885,24604.40477251657,54989,0,14289.602941176468,23915.828247218178,54988,0,112.0,0.0,0.0,0.0,0.0,499.6615456875245,585.1888199998025,1474.0,54.0,144.62595419847327,128,130,10.0.2.15,65.52.139.168,51387,443,6,131,go.trouter.io,t12d210400_b973bfd88a0e_2d8407136b4c,7e468c2751f5647292fc2cb3c73a3352501,c2_beaconing,mta_qakbot,Qakbot_2022-09-29.pcap,10.9.29.201:50413-193.3.19.137:443-6-1664435296379,197.33333333333334,313.6911432178686,1327,54,156.41666666666666,221.00656441642525,694,54,1877,3437.5999999999995,10584.99793103428,38915,0,6250.181818181818,13912.18696552186,38915,0,8571.5,15935.405387285975,38917,2,73.5,0.0,0.0,0.0,0.0,457.2932098765432,500.781934379571,1327.0,54.0,197.33333333333334,14,16,10.9.29.201,193.3.19.137,50413,443,6,21,,t13i201000_2b729b4bf6f3_533b6d20482b,2253c82f03b621c5144709b393fde2c9511,c2_beaconing,mta_pikabot,Pikabot_2023-05-23.pcap,10.1.0.186:55117-192.9.135.73:1194-6-1684857507796,534.1698113207549,650.0450497953394,1514,54,794.3571428571429,706.3125535344981,1514,54,22242,2115.538461538462,11130.964897416186,74969,0,4074.37037037037,15321.535136352133,74970,0,4482.041666666666,16240.79796304508,74970,0,55.0,0.0,0.0,0.0,0.0,697.2541060197664,622.28427588128,1514.0,54.0,534.1698113207549,29,31,10.1.0.186,192.9.135.73,55117,1194,6,53,,t13i201000_2b729b4bf6f3_9e7b989ebec8,40c63d2de6442242a6b0abc7e768645f520,benign,benign,ctu_normal14_win_full_2017.pcap,10.0.2.15:50443-104.20.19.8:443-6-1559719,401.3571428571429,557.2193672876269,1474,54,111.25,116.83175549014527,423,54,1335,3884.37037037037,12173.677158108701,45001,0,9534.363636363636,18057.163388930872,45001,0,6982.933333333334,15888.523722066397,45048,0,23.0,0.0,0.0,0.0,0.0,518.2827380952381,544.8775375216817,1474.0,54.0,401.3571428571429,20,22,10.0.2.15,104.20.19.8,50443,443,6,28,www.free-kassa.ru,t12d1711h2_67e6df579eba_de5ccbe16bdd,6f0a5b0a36320bdd6b88ed3e0b6c4152530,benign,benign,ctu_normal20_win_2017_https.pcap,10.0.2.15:52341-172.217.23.142:443-6-7753116,248.07894736842113,414.12848127636363,1474,54,121.875,131.91303953741647,560,54,1950,21.189189189189193,48.245804560165205,214,0,52.266666666666666,68.00469171489637,218,2,36.19047619047618,60.4628969266434,214,0,3.0,0.0,0.0,0.0,0.0,486.6463981924508,550.5735917317471,1474.0,54.0,248.07894736842113,31,33,10.0.2.15,172.217.23.142,52341,443,6,38,accounts.youtube.com,t12d1509h2_073e58a039a6_e70312a1ce2c,84480cf8cf0e732666092640e581e1a5540,exfil,mta_agenttesla,AgentTesla_2023-01-05.pcap,192.168.1.27:51959-40.126.29.10:443-6-1672959334320,662.166666666667,682.329183228824,1514,54,478.1538461538461,605.8631372064494,1514,54,6216,9.514285714285714,31.78084090673965,175,0,27.75,51.496028090435374,177,0,13.363636363636363,39.073246790081505,175,0,7.5,0.0,0.0,0.0,0.0,734.4993806515546,604.0649522164962,1514.0,54.0,662.166666666667,17,19,192.168.1.27,40.126.29.10,51959,443,6,36,login.live.com,t12d1909h2_d83cc789557e_7af1ed941c26,7d8fd34fdb13a7fff30d5a52846b6c4c550,benign,benign,ctu_normal21_kali_2017.pcap,192.168.1.191:34476-52.42.238.48:443-6-1493727176288,257.4,388.4381280337254,1514,54,130.27777777777777,139.87339046250764,494,54,2345,622.2758620689656,1927.8894065893426,10005,0,1061.5294117647059,2473.3211507416263,10005,0,1622.3636363636365,3071.581132665301,10281,0,199.0,0.0,0.0,0.0,0.0,503.529012345679,561.8173424530919,1514.0,54.0,257.4,21,26,192.168.1.191,52.42.238.48,34476,443,6,30,e.nexac.com,t12d1109h2_43e74fd21232_fed6c16fddd0,303951d4c50efb2e991652225a6f02b1560,benign,benign,ctu_normal14_win_full_2017.pcap,10.0.2.15:51409-31.13.91.36:443-6-2973908,296.7068965517241,446.28745392465436,1502,54,241.37499999999991,356.7962288380351,1502,54,5793,34.17543859649123,86.37359112082679,445,0,84.69565217391303,155.26383258025638,610,0,57.60606060606061,156.0502602116421,738,0,5.0,0.0,0.0,0.0,0.0,612.6496224926752,630.203738778964,1502.0,54.0,296.7068965517241,46,48,10.0.2.15,31.13.91.36,51409,443,6,58,www.facebook.com,t12d1712h2_67e6df579eba_88be6878e1da,96681175a9547081bf3d417f1a572091570,benign,benign,ctu_normal20_win_2017_https.pcap,10.0.2.15:49239-77.75.79.122:443-6-522906,313.54545454545456,473.3417900592026,1474,54,162.8,197.88425348616744,571,54,1628,42.57142857142858,126.55495700626327,553,0,99.33333333333331,186.10548084352592,559,2,78.54545454545455,170.2159590851361,553,1,1.5,0.0,0.0,0.0,0.0,510.72356902356904,542.6555975091053,1474.0,54.0,313.54545454545456,14,16,10.0.2.15,77.75.79.122,49239,443,6,22,jslog.post.cz,t12d1510h2_073e58a039a6_60bf0a45ed8c,ccc514751b175866924439bdbb5bba34580,c2_beaconing,mta_danabot,Danabot_2024-02-14.pcap,10.2.14.101:49797-51.104.176.40:443-6-1707928010315,466.20000000000005,586.9571960543631,1514,54,295.7,461.68966248384254,1514,54,2957,57.70833333333333,127.94376453762008,447,0,153.88888888888889,174.76301413946575,447,0,86.42857142857143,157.19351830721965,447,0,88.0,0.0,0.0,0.0,0.0,671.7518518518518,620.4932918353106,1514.0,54.0,466.20000000000005,16,18,10.2.14.101,51.104.176.40,49797,443,6,25,checkappexec.microsoft.com,t12d1809h1_4b22cbed5bed_7af1ed941c26,986571066668055ae9481cb84fda634a591,exfil,mta_meduza,Meduza_2024-03-06_0.pcap,10.3.6.101:55876-50.3.132.236:443-6-1709744685482,1128.5334987593053,565.0247162136712,1430,60,62.562874251497014,18.83362313426735,258,60,10448,1.160248447204968,13.060152069463056,348,0,5.626506024096389,29.276823326340953,348,0,1.410658307210032,15.996193008798747,383,0,1.0,0.0,0.0,0.0,0.0,655.1352081992526,629.0941287613782,1430.0,60.0,258.0,327,328,10.3.6.101,50.3.132.236,55876,443,6,806,yourunitedlaws.com,t12d2109h1_76e208dd3e22_7af1ed941c26,fe0146829eef1917ba6c2dd4f5c08905601,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:52126-194.165.16.90:443-6-1668460641508,466.32,610.5326035520134,1514,54,493.1666666666667,647.6681014971864,1514,54,5918,64.16666666666666,155.76422167373093,556,0,140.0,210.74202238756274,556,0,110.08333333333336,205.2658844848148,556,0,1.0,0.0,0.0,0.0,0.0,678.3361253561253,614.6092548983562,1514.0,54.0,466.32,14,16,172.16.24.174,194.165.16.90,52126,443,6,25,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b7610,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:51474-142.251.40.68:443-6-1668459773660,687.1212121212121,669.376470940296,1514,54,107.33333333333334,111.19706776164503,417,54,1288,9.125,24.26965448934653,110,0,26.545454545454547,36.84661079763954,110,0,11.950000000000003,28.361343224073224,110,0,1.0,0.0,0.0,0.0,0.0,602.2092352092352,579.6529702188468,1514.0,54.0,417.0,24,26,172.16.24.174,142.251.40.68,51474,443,6,33,www.google.com,t12d190700_d83cc789557e_2dae41c691ec,84aaf6d03fc8c5bfb56d1d188735b268620,c2_beaconing,mta_bumblebee,BumbleBee_2022-12-07.pcap,10.12.7.101:50201-139.177.146.137:443-6-1670432693446,186.64000000000001,291.9651634470569,1418,54,134.36363636363637,94.54445803670646,312,54,1478,1358.4166666666665,6319.256814563387,31017,0,3260.2000000000003,9755.110282422349,31017,0,2501.8461538461543,8570.152311425138,31017,0,75.0,0.0,0.0,0.0,0.0,428.74643578643577,535.1915873465913,1418.0,54.0,186.64000000000001,20,22,10.12.7.101,139.177.146.137,50201,443,6,25,,t12i210600_76e208dd3e22_2dae41c691ec,76c691f46143bf86e2d1bb73c6187767630,exfil,mta_xloader,XLoader_2023-11-29.pcap,10.11.29.101:60740-20.42.73.24:443-6-1701280874902,361.3448275862069,513.590044675856,1450,60,300.1875,465.5110766673549,1450,60,4803,23.0,33.4995854037363,88,0,42.93333333333333,48.422938287354604,125,0,46.33333333333333,61.86985362742333,194,0,18.0,0.0,0.0,0.0,0.0,623.1275235779547,594.1777154558358,1450.0,60.0,361.3448275862069,18,19,10.11.29.101,20.42.73.24,60740,443,6,29,v10.events.data.microsoft.com,t12d1909h2_d83cc789557e_7af1ed941c26,2fe9b0e731d3d41b2b84e8e1d6186836640,benign,benign,ctu_normal20_win_2017_https.pcap,10.0.2.15:49582-91.198.174.208:443-6-2197942,599.1578947368422,649.3946848927216,1474,54,98.52631578947368,84.67018917938306,360,54,1872,22.83928571428572,56.934979433709145,300,0,71.05555555555556,95.15156468202669,353,3,33.486486486486484,68.37259913380733,301,0,2.0,0.0,0.0,0.0,0.0,557.4619883040936,555.4906082073512,1474.0,54.0,360.0,38,40,10.0.2.15,91.198.174.208,49582,443,6,57,upload.wikimedia.org,t12d1509h2_073e58a039a6_e70312a1ce2c,e1780de8814476f0cb0c3f0226424e51650,benign,benign,ctu_normal21_kali_2017.pcap,192.168.1.191:59848-54.231.121.42:443-6-1493727261248,945.3014671083761,683.6099113337914,1486,54,65.70129870129874,47.372679252218255,453,54,50590,5.192708333333342,39.01535953121832,1443,0,14.261378413524055,64.97510002776707,1443,0,8.071535022354695,53.38387658621283,1571,0,3.0,0.0,0.0,0.0,0.0,671.9574513512364,629.4530946002745,1486.0,54.0,453.0,1502,1509,192.168.1.191,54.231.121.42,59848,443,6,2113,s3.amazonaws.com,t12d1109h2_43e74fd21232_fed6c16fddd0,ea615e28cb25adfb2f261151eab3314f661,exfil,mta_lumma,Lumma_2025-08-15.pcap,10.8.15.176:62820-5.10.250.239:443-6-1755287338789,60.0,4.898979485566356,66,54,61.5,3.0,66,60,246,83.5,90.87298828584872,175,0,112.33333333333334,96.74881566889248,176,1,163.0,2.8284271247461903,165,161,160.0,0.0,0.0,0.0,0.0,60.611111111111114,4.507880616689065,66.0,54.0,60.0,0,1,10.8.15.176,5.10.250.239,62820,443,6,7,,,671,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:51309-194.165.16.90:443-6-1668459517473,466.32,610.5326035520134,1514,54,493.1666666666667,647.6681014971864,1514,54,5918,73.625,184.40098379912988,632,0,160.63636363636365,251.04034445772763,633,0,129.41666666666669,245.94953596708459,632,0,107.5,0.0,0.0,0.0,0.0,678.3361253561253,614.6092548983562,1514.0,54.0,466.32,14,16,172.16.24.174,194.165.16.90,51309,443,6,25,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b7680,benign,benign,ctu_normal21_kali_2017.pcap,192.168.1.191:53834-192.0.77.2:443-6-1493726594364,260.23529411764713,468.6806794851246,1514,54,88.05555555555556,58.51241419031593,237,54,1585,60.151515151515156,115.9873703286594,559,0,116.41176470588235,149.57358507751687,559,0,129.26666666666668,183.72085450746297,656,0,54.0,0.0,0.0,0.0,0.0,469.91426107480027,571.8847716320391,1514.0,54.0,237.0,26,28,192.168.1.191,192.0.77.2,53834,443,6,34,i2.wp.com,t12d1109h2_43e74fd21232_fed6c16fddd0,76cc3e2d3028143b23ec18e27dbd7ca9691,c2_beaconing,mta_qakbot,Qakbot_2022-09-29.pcap,10.9.29.201:50182-85.86.242.245:443-6-1664422951621,133.2380952380952,149.85322978231227,551,54,140.0,181.17043708267437,551,54,1680,3972.25,12249.614635721575,44984,0,7222.272727272727,16102.208122434073,44984,0,9912.625,18441.21845941469,44984,1,68.0,0.0,0.0,0.0,0.0,217.38447971781304,191.61722327971242,551.0,54.0,133.2380952380952,14,16,10.9.29.201,85.86.242.245,50182,443,6,21,,t13i201000_2b729b4bf6f3_533b6d20482b,2253c82f03b621c5144709b393fde2c9701,c2_beaconing,mta_qakbot,Qakbot_2023-05-10.pcap,172.16.10.73:50547-184.28.38.170:443-6-1683742320064,660.0845070422534,664.785201538896,1514,54,91.58620689655173,104.12818928107636,426,54,2656,1565.814285714286,13036.181139587652,109076,0,3914.5357142857147,20609.745636977168,109076,0,2672.3902439024387,17032.91954257703,109076,0,2.0,0.0,0.0,0.0,0.0,602.2544179508725,583.3170467887602,1514.0,54.0,426.0,54,56,172.16.10.73,184.28.38.170,50547,443,6,71,www.oracle.com,t13d201100_2b729b4bf6f3_9e7b989ebec8,15af977ce25de452b96affa2addb1036710,benign,benign,ctu_normal20_win_2017_https.pcap,10.0.2.15:64918-37.157.5.49:443-6-9543992,285.6521739130435,460.63470132333833,1474,54,121.81818181818181,132.75979676228656,472,54,1340,301.7272727272728,570.8373283267795,2312,0,663.6,833.6615620262219,2673,9,599.6363636363636,829.2158069799771,2560,0,67.0,0.0,0.0,0.0,0.0,491.70040989606207,546.4377458187794,1474.0,54.0,285.6521739130435,16,18,10.0.2.15,37.157.5.49,64918,443,6,23,cm.adform.net,t12d1509h2_073e58a039a6_e70312a1ce2c,ccc514751b175866924439bdbb5bba34720,benign,benign,ctu_normal21_kali_2017.pcap,192.168.1.191:56952-52.20.0.36:443-6-1493727285746,146.38095238095235,222.15433288380314,1063,54,172.24999999999997,288.0615859026109,1063,54,2067,78.1,148.42999413155934,641,0,142.0,199.28070654230427,641,0,180.37500000000003,275.56691564845005,802,0,111.0,0.0,0.0,0.0,0.0,336.16887125220455,394.9236183795423,1063.0,54.0,146.38095238095235,14,19,192.168.1.191,52.20.0.36,56952,443,6,21,adserve.2adpro.com,t12d1109h2_43e74fd21232_fed6c16fddd0,303951d4c50efb2e991652225a6f02b1731,c2_beaconing,mta_gozi,Gozi_2023-07-12.pcap,10.7.12.121:50468-170.130.55.162:443-6-1689204947828,388.76190476190476,576.8025576193213,1514,54,164.2222222222222,209.92187700295662,636,54,1478,772.2,3325.3436324211984,14894,0,1930.5,5240.12791555975,14894,0,1401.0,4477.3211187048,14895,0,17.0,0.0,0.0,0.0,0.0,548.4611992945327,555.6665933938945,1514.0,54.0,388.76190476190476,11,13,10.7.12.121,170.130.55.162,50468,443,6,21,iamupdate.com,t12d190700_d83cc789557e_2dae41c691ec,4ce0442e9d20d092d9d74e9ce54b363a741,c2_beaconing,mta_icedid,IcedID_2023-05-10.pcap,172.16.10.73:50443-77.105.141.154:443-6-1683740190108,413.4827586206896,577.2208428996935,1514,54,424.7857142857142,613.8213444131305,1514,54,5947,77.32142857142858,247.79547324526845,1249,0,166.53846153846158,349.70645199095566,1250,0,123.42857142857142,330.6549943290215,1249,0,1.0,0.0,0.0,0.0,0.0,660.5779784710819,621.0951595618501,1514.0,54.0,413.4827586206896,18,20,172.16.10.73,77.105.141.154,50443,443,6,29,floatfil.com,t13d201200_2b729b4bf6f3_2e4f304f1f45,2253c82f03b621c5144709b393fde2c9750,benign,benign,ctu_normal20_win_2017_https.pcap,10.0.2.15:49600-216.58.214.66:443-6-2383255,167.30952380952382,315.965148440514,1474,54,90.09999999999997,56.46041929855304,255,54,1802,4933.829268292681,17209.452248549984,65483,0,10646.684210526315,24371.007983195097,65483,1,9631.619047619048,23436.31295975583,65690,0,19.5,0.0,0.0,0.0,0.0,428.878835978836,563.3440071180424,1474.0,54.0,167.30952380952382,34,36,10.0.2.15,216.58.214.66,49600,443,6,42,www.googleadservices.com,t12d1509h2_073e58a039a6_e70312a1ce2c,ab41313cfec25328b20865eb1388e0a2761,c2_beaconing,mta_icedid,IcedID_2022-01-12.pcap,10.22.5.47:50358-104.168.44.45:443-6-1642007873072,219.21052631578942,365.7496987083696,1279,60,211.27272727272728,373.0335349292583,1279,60,2324,68.05555555555557,111.5318325555651,246,0,122.5,128.10694317205798,249,0,141.14285714285714,130.81084125742865,251,0,3.0,0.0,0.0,0.0,0.0,506.95647262094633,523.8724558061662,1279.0,60.0,219.21052631578942,12,13,10.22.5.47,104.168.44.45,50358,443,6,19,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b7771,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:51031-194.165.16.90:443-6-1668459094216,466.32,610.5326035520134,1514,54,493.1666666666667,647.6681014971864,1514,54,5918,70.95833333333334,174.90605656519847,611,0,154.81818181818184,237.52886905882335,612,0,123.08333333333334,231.90807674724496,611,0,1.0,0.0,0.0,0.0,0.0,678.3361253561253,614.6092548983562,1514.0,54.0,466.32,14,16,172.16.24.174,194.165.16.90,51031,443,6,25,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b7780,benign,benign,ctu_normal21_kali_2017.pcap,192.168.1.191:55990-95.101.244.205:443-6-1493726413176,782.7027027027033,692.2919700869331,1514,54,252.4818652849741,451.34305473202534,1514,54,48729,378.2895833333332,1814.027788033484,10031,0,945.7239583333333,2791.817734687597,10176,0,632.296167247387,2331.868613400009,10560,0,15.0,0.0,0.0,0.0,0.0,765.4676526159147,631.1171214018689,1514.0,54.0,782.7027027027033,357,364,192.168.1.191,95.101.244.205,55990,443,6,481,ak.quantcast.com,t12d1109h2_43e74fd21232_fed6c16fddd0,8d2a028aa94425f76ced7826b1f39039790,benign,benign,ctu_normal14_win_full_2017.pcap,10.0.2.15:50781-172.217.23.206:443-6-2251663,301.3684210526316,473.425250526688,1472,54,107.22222222222223,103.0142924280143,312,54,965,471.22222222222234,1942.9316707296175,8256,0,1060.25,2907.6198783786813,8256,0,940.2222222222222,2743.5866934442665,8256,1,19.0,0.0,0.0,0.0,0.0,478.0767381416504,548.9013706361894,1472.0,54.0,301.3684210526316,10,12,10.0.2.15,172.217.23.206,50781,443,6,19,apis.google.com,t12d1711h2_67e6df579eba_de5ccbe16bdd,f09be93fa9d03eabf66fdd359154a3fa801,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:50975-194.165.16.90:443-6-1668459007572,450.4615384615385,603.6125400134912,1514,54,459.3846153846154,631.944425096271,1514,54,5972,64.52,167.44852940530708,660,0,134.41666666666666,225.95713927176277,660,0,115.0,226.43883380406606,660,0,1.0,0.0,0.0,0.0,0.0,672.8205128205128,616.4463618420267,1514.0,54.0,450.4615384615385,16,18,172.16.24.174,194.165.16.90,50975,443,6,26,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b7811,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:50609-194.165.16.90:443-6-1668458461592,466.32,610.5326035520134,1514,54,493.1666666666667,647.6681014971864,1514,54,5918,66.5,161.19607288344056,540,0,145.09090909090912,218.12998626757144,541,0,114.25,212.58672027284217,540,0,1.0,0.0,0.0,0.0,0.0,678.3361253561253,614.6092548983562,1514.0,54.0,466.32,14,16,172.16.24.174,194.165.16.90,50609,443,6,25,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b7820,benign,benign,ctu_normal20_win_2017_https.pcap,10.0.2.15:49391-82.99.173.215:443-6-976956,299.42857142857144,503.56365748816415,1474,54,89.7,66.31582683559702,242,54,897,310.00000000000006,1065.5156399355988,4756,0,688.7777777777778,1550.6507325779214,4756,3,618.0,1581.669722511976,5054,0,4.0,0.0,0.0,0.0,0.0,470.13549783549786,553.9063480445074,1474.0,54.0,242.0,13,15,10.0.2.15,82.99.173.215,49391,443,6,21,ads2.czc.cz,t12d1509h2_073e58a039a6_e70312a1ce2c,2b1f517a72b7346c86d59ef328167d49831,c2_beaconing,mta_icedid,IcedID_2022-07-06.pcap,10.7.1.7:55278-92.38.171.191:443-6-1657136138880,205.0,330.2851581804513,1356,60,119.00000000000001,86.34647813150393,267,60,952,4428.5714285714275,15987.042044751723,59966,0,8857.142857142859,22541.10127026163,59966,1,10305.166666666668,24448.554668255274,60205,12,172.5,0.0,0.0,0.0,0.0,420.6984126984127,507.1538046859728,1356.0,60.0,205.0,9,10,10.7.1.7,92.38.171.191,55278,443,6,15,feldaxxxx.com,t12d210800_76e208dd3e22_16bbda4055b2,ec74a5c51106f0419184d0dd08fb05bc841,c2_beaconing,mta_darkgate,DarkGate_2023-12-07.pcap,10.11.28.11:52236-46.101.78.238:443-6-1701962647070,109.22222222222223,96.89398559479554,320,60,113.20000000000002,115.6339050624859,320,60,566,67.375,74.41186061374893,155,0,134.75,102.10248119740609,248,0,129.33333333333334,32.34707611722168,155,93,145.5,0.0,0.0,0.0,0.0,153.0746913580247,102.02725459294896,320.0,60.0,109.22222222222223,4,5,10.11.28.11,46.101.78.238,52236,443,6,9,cdn-uk.widgetsfordeploy.com,,851,c2_beaconing,mta_icedid,IcedID_2023-09-28.pcap,10.10.20.147:50795-172.86.75.88:443-6-1695926220876,62.5,8.535639569308374,71,54,62.5,8.571731229523383,71,54,3750,14704.478991596636,25791.244977162547,59972,0,29658.186440677957,30036.384416969213,59972,188,29657.406779661014,30086.743310610636,60024,142,163.5,0.0,0.0,0.0,0.0,62.5,6.940220937885671,71.0,54.0,62.5,119,119,10.10.20.147,172.86.75.88,50795,443,6,120,,,861,c2_beaconing,mta_icedid,IcedID_2022-12-20.pcap,10.3.24.178:54618-103.208.85.184:443-6-1671550969675,184.29411764705884,314.26516763433284,1356,54,115.99999999999999,88.66147496436737,266,54,928,4129.375,14902.982779184396,59953,0,9438.571428571428,22289.56031312374,59953,1,8219.375,20941.62710241085,60004,1,561.0,0.0,0.0,0.0,0.0,409.47712418300654,511.574658908555,1356.0,54.0,184.29411764705884,10,12,10.3.24.178,103.208.85.184,54618,443,6,17,artiwal.pics,t12d190800_d83cc789557e_7af1ed941c26,ec74a5c51106f0419184d0dd08fb05bc870,c2_beaconing,mta_pikabot,Pikabot_2024-02-08.pcap,10.2.8.101:53197-150.171.22.254:443-6-1707413748890,327.46874999999994,459.73428401105923,1430,60,133.1875,143.19786718616538,565,60,2131,4.516129032258066,9.326917918018918,36,0,9.333333333333334,12.965154765572144,36,0,7.533333333333331,13.798895746019816,46,0,3.5,0.0,0.0,0.0,0.0,509.71180555555554,524.8034163568585,1430.0,60.0,327.46874999999994,24,25,10.2.8.101,150.171.22.254,53197,443,6,32,ln-ring.msedge.net,t12d1909h2_d83cc789557e_7af1ed941c26,a66ea560599a2f5c89eec8c3a0d69cee881,c2_beaconing,mta_gozi,Gozi_2023-07-12.pcap,10.7.12.121:50227-170.130.55.162:443-6-1689203823578,316.7407407407407,491.00325806474984,1451,54,124.85714285714285,173.55728699231233,636,54,1748,413.6538461538461,2043.9917405372792,10433,0,827.3076923076923,2886.733690078788,10433,0,893.3333333333334,3004.8240708849653,10433,0,18.0,0.0,0.0,0.0,0.0,518.3313887758333,537.0583044363256,1451.0,54.0,316.7407407407407,18,20,10.7.12.121,170.130.55.162,50227,443,6,27,iamupdate.com,t12d190700_d83cc789557e_2dae41c691ec,4ce0442e9d20d092d9d74e9ce54b363a890,benign,benign,ctu_normal20_win_2017_https.pcap,10.0.2.15:65446-62.67.193.85:443-6-3516526,78.11111111111111,66.45382691095458,255,54,96.6,88.70062006547643,255,54,483,439.0,1079.2707855637661,3093,1,877.75,1484.8347551158681,3093,27,1161.0,1684.309650865897,3096,24,14.5,0.0,0.0,0.0,0.0,106.63456790123456,80.47189021685722,255.0,54.0,58.0,2,4,10.0.2.15,62.67.193.85,65446,443,6,9,pixel.rubiconproject.com,t12d1509h2_073e58a039a6_e70312a1ce2c,901,c2_beaconing,mta_gozi,Gozi_2023-07-12.pcap,10.7.12.121:50435-170.130.55.162:443-6-1689204777917,362.4347826086957,546.2708141311793,1514,54,144.18181818181816,192.9812520333611,636,54,1586,490.77272727272725,2204.0482436129114,10354,0,1079.6999999999998,3260.1391602881686,10354,0,977.9090909090908,3111.479051979796,10355,0,1.0,0.0,0.0,0.0,0.0,543.9018445322794,558.1444128109066,1514.0,54.0,362.4347826086957,15,17,10.7.12.121,170.130.55.162,50435,443,6,23,iamupdate.com,t12d190700_d83cc789557e_2dae41c691ec,4ce0442e9d20d092d9d74e9ce54b363a911,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:52356-213.91.235.146:443-6-1668466581045,64.0,4.898979485566356,66,54,66.0,0.0,66,66,330,15000.6,25264.088887193222,59939,1015,3766.0,3096.880473422678,8018,1015,0.0,0.0,0,0,4015.0,0.0,0.0,0.0,0.0,60.44444444444444,5.7948465824023545,66.0,54.0,64.0,0,1,172.16.24.174,213.91.235.146,52356,443,6,6,,,920,benign,benign,ctu_normal14_win_full_2017.pcap,10.0.2.15:49687-104.120.251.12:443-6-948700,254.31578947368416,454.60015726701823,1514,54,236.55555555555554,467.96231902381174,1514,54,4258,8348.162162162163,17532.522463051842,45085,0,18169.529411764706,22406.2380714547,45086,0,16254.578947368422,21889.706399522813,45086,0,44.0,0.0,0.0,0.0,0.0,602.79681611436,640.2462311036048,1514.0,54.0,254.31578947368416,30,32,10.0.2.15,104.120.251.12,49687,443,6,38,px.moatads.com,t12d1711h2_67e6df579eba_de5ccbe16bdd,2cba4988cee12fb77485df2186d14685931,c2_beaconing,mta_gozi,Gozi_2023-07-12.pcap,10.7.12.121:49865-170.130.55.162:443-6-1689202033063,347.7,513.5850362634061,1514,54,191.60000000000002,310.37117563760114,1020,54,1916,16.894736842105264,55.352300701799706,240,0,35.666666666666664,78.4840748177616,240,0,31.22222222222222,79.21612490171711,240,0,1.0,0.0,0.0,0.0,0.0,583.6777777777778,575.3107909407223,1514.0,54.0,347.7,16,18,10.7.12.121,170.130.55.162,49865,443,6,20,iamupdate.com,t12d190700_d83cc789557e_2dae41c691ec,4ce0442e9d20d092d9d74e9ce54b363a940,exfil,mta_astaroth,Astaroth_2023-01-04_0.pcap,10.1.4.101:49796-13.89.179.8:443-6-1672819105707,380.0909090909091,539.1139034246852,1514,54,305.55555555555554,398.47588104900126,1023,54,2750,29.333333333333336,59.7263202728356,234,0,77.0,79.17431040793112,236,0,43.75,72.72004225421314,234,0,46.0,0.0,0.0,0.0,0.0,592.2598635931969,568.3225640244805,1514.0,54.0,380.0909090909091,14,16,10.1.4.101,13.89.179.8,49796,443,6,22,v10.events.data.microsoft.com,t12d1909h2_d83cc789557e_7af1ed941c26,678aeaf909676262acfb913ccb78a126951,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:50972-194.165.16.90:443-6-1668459002649,466.32,610.5326035520134,1514,54,493.1666666666667,647.6681014971864,1514,54,5918,59.00000000000001,147.02646907511468,513,0,128.72727272727275,199.7163443031596,513,0,100.75,194.486328100928,513,0,207.0,0.0,0.0,0.0,0.0,678.3361253561253,614.6092548983562,1514.0,54.0,466.32,14,16,172.16.24.174,194.165.16.90,50972,443,6,25,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b7960,benign,benign,ctu_normal7_general_2013.pcap,10.0.0.46:41174-199.16.156.230:443-6-1387315837523,144.33333333333334,141.8855172313228,484,66,168.6,180.08553523256663,484,66,843,66.875,91.88881091530443,188,0,86.75,99.64729466138724,177,0,122.0,104.99047575851822,189,1,169.0,0.0,0.0,0.0,0.0,204.77037037037036,159.49779861822657,484.0,66.0,144.33333333333334,6,7,10.0.0.46,199.16.156.230,41174,443,6,9,twitter.com,t12d1810s2_27d4652c4487_736b2a1ed4d3,91e914bce4ef89cc2b5fdad958d585f7971,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:51120-194.165.16.90:443-6-1668459226733,435.77777777777777,589.6705294767014,1514,54,459.3846153846154,631.944425096271,1514,54,5972,57.19230769230768,149.78331528732278,592,0,123.91666666666667,205.12544203412938,593,0,96.46153846153845,198.0465498246205,592,0,2.0,0.0,0.0,0.0,0.0,668.1132817799485,618.2566902665315,1514.0,54.0,435.77777777777777,16,18,172.16.24.174,194.165.16.90,51120,443,6,27,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b7981,c2_beaconing,mta_icedid,IcedID_2022-01-12.pcap,10.22.5.47:50125-104.168.44.45:443-6-1642007338044,219.21052631578942,365.7496987083696,1279,60,211.27272727272728,373.0335349292583,1279,60,2324,68.33333333333334,112.24238478033364,247,0,123.0,128.83840007285613,249,0,141.42857142857142,131.0748604714842,251,0,121.5,0.0,0.0,0.0,0.0,506.95647262094633,523.8724558061662,1279.0,60.0,219.21052631578942,12,13,10.22.5.47,104.168.44.45,50125,443,6,19,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b7991,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:50229-194.165.16.90:443-6-1668457872587,466.32,610.5326035520134,1514,54,493.1666666666667,647.6681014971864,1514,54,5918,60.33333333333334,148.30657631983198,540,0,131.63636363636363,201.0488859592476,541,0,100.16666666666666,193.60918147524706,540,0,109.5,0.0,0.0,0.0,0.0,678.3361253561253,614.6092548983562,1514.0,54.0,466.32,14,16,172.16.24.174,194.165.16.90,50229,443,6,25,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b71000,benign,benign,ctu_normal20_win_2017_https.pcap,10.0.2.15:65423-192.0.76.3:443-6-10632642,307.1111111111111,502.1007662682656,1474,54,98.83333333333333,74.4566174277873,243,54,1186,26.884615384615387,64.1288246722654,267,0,63.54545454545455,90.68667337196092,274,2,49.14285714285714,107.17337294371148,381,0,3.0,0.0,0.0,0.0,0.0,470.29753086419754,552.8752748258812,1474.0,54.0,243.0,17,19,10.0.2.15,192.0.76.3,65423,443,6,27,pixel.wp.com,t12d1509h2_073e58a039a6_e70312a1ce2c,49b45fc1ab090aa3a159778313fc9b9e1011,c2_beaconing,mta_gozi,Gozi_2023-07-12.pcap,10.7.12.121:50665-170.130.55.162:443-6-1689205812143,390.76190476190476,575.9654420850183,1514,54,164.2222222222222,209.92187700295662,636,54,1478,546.75,2339.2710262409796,10480,0,1366.875,3684.0234774147216,10480,0,991.4545454545453,3148.930242594661,10481,0,34.0,0.0,0.0,0.0,0.0,549.0723104056437,555.610104810533,1514.0,54.0,390.76190476190476,11,13,10.7.12.121,170.130.55.162,50665,443,6,21,iamupdate.com,t12d190700_d83cc789557e_2dae41c691ec,4ce0442e9d20d092d9d74e9ce54b363a1020,benign,benign,ctu_normal14_win_full_2017.pcap,10.0.2.15:50588-216.58.201.104:443-6-1856819,120.26666666666668,145.25763646838314,587,54,149.12499999999997,192.16766302967238,587,54,1193,866.1428571428571,2807.865624034983,10577,0,1732.2857142857144,3916.053273143158,10577,1,2017.6666666666667,4347.43426248939,10857,16,25.0,0.0,0.0,0.0,0.0,211.85304232804233,206.57732713109658,587.0,54.0,120.26666666666668,7,9,10.0.2.15,216.58.201.104,50588,443,6,15,ssl.google-analytics.com,t12d1711h2_67e6df579eba_de5ccbe16bdd,c74a0764cf5d01aa28d5c7769cd86fc11031,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:52048-194.165.16.90:443-6-1668460520162,466.32,610.5326035520134,1514,54,493.1666666666667,647.6681014971864,1514,54,5918,75.04166666666667,197.40104382056666,793,0,163.7272727272727,271.84962420760894,794,0,131.08333333333337,265.1279136682153,793,0,1.0,0.0,0.0,0.0,0.0,678.3361253561253,614.6092548983562,1514.0,54.0,466.32,14,16,172.16.24.174,194.165.16.90,52048,443,6,25,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b71040,c2_beaconing,mta_icedid,IcedID_2023-05-10.pcap,172.16.10.73:50589-72.13.63.40:443-6-1683743766708,268.90000000000003,430.4601667662338,1514,54,100.4375,105.48615627970652,391,54,1607,3676.8275862068967,17908.796900783076,96292,0,7108.533333333335,24805.507115692406,96292,0,8196.461538461537,26612.938161776954,96292,0,6.5,0.0,0.0,0.0,0.0,490.19623015873015,565.5578496179567,1514.0,54.0,268.90000000000003,21,23,172.16.10.73,72.13.63.40,50589,443,6,30,verisign.com,t13d201100_2b729b4bf6f3_9e7b989ebec8,9cc975a75175269206c6e8daf726e9aa1051,c2_beaconing,mta_emotet,Emotet_2022-07-07.pcap,10.7.7.101:57406-52.18.235.51:443-6-1657219407251,279.0000000000001,471.68328357066025,1514,54,118.64285714285715,158.05092029657217,619,54,1661,3902.6,15135.22997567816,74957,0,7504.999999999999,20709.03121023933,74957,0,8865.0,22392.495595623102,74958,0,92.0,0.0,0.0,0.0,0.0,519.191798941799,563.6597362442403,1514.0,54.0,279.0000000000001,19,21,10.7.7.101,52.18.235.51,57406,443,6,26,distinctive-obi-mgw.aws-euw1.cloud-ara.tyk.io,t12d190700_d83cc789557e_2dae41c691ec,61be9ce3d068c08ff99a857f62352f9d1060,benign,benign,ctu_normal14_win_full_2017.pcap,10.0.2.15:51723-151.101.1.164:443-6-3354850,354.0,548.0101667461497,1474,54,88.3,71.70936712406082,259,54,883,300.3809523809524,1177.3486941509927,5421,0,700.888888888889,1776.2472691354408,5421,0,569.8181818181818,1757.9629585507093,5869,0,40.0,0.0,0.0,0.0,0.0,487.412962962963,552.4949132092395,1474.0,54.0,259.0,13,15,10.0.2.15,151.101.1.164,51723,443,6,22,int.nyt.com,t12d1711h2_67e6df579eba_de5ccbe16bdd,860fcf58fd757e26aa8911e5eaff6b531070,benign,benign,ctu_normal20_win_2017_https.pcap,10.0.2.15:51545-52.1.140.113:443-6-6037003,251.31818181818184,452.1918595035391,1514,54,286.19047619047615,516.3255386912039,1514,54,6010,1592.6046511627908,3517.59011215359,10092,0,3424.1000000000004,4558.263033679663,10093,0,3102.3181818181815,4501.72173820474,10094,0,105.0,0.0,0.0,0.0,0.0,602.3318798753581,640.6437112208324,1514.0,54.0,251.31818181818184,34,36,10.0.2.15,52.1.140.113,51545,443,6,44,logx.optimizely.com,t12d1509h2_073e58a039a6_e70312a1ce2c,303951d4c50efb2e991652225a6f02b11081,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:50680-194.165.16.90:443-6-1668458571499,435.77777777777777,589.6705294767014,1514,54,459.3846153846154,631.944425096271,1514,54,5972,49.730769230769226,127.4693869734401,465,0,107.75000000000001,173.86678547356044,466,0,83.76923076923076,167.84722907362013,465,0,1.0,0.0,0.0,0.0,0.0,668.1132817799485,618.2566902665315,1514.0,54.0,435.77777777777777,16,18,172.16.24.174,194.165.16.90,50680,443,6,27,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b71090,benign,benign,ctu_normal14_win_full_2017.pcap,10.0.2.15:49855-198.47.127.17:443-6-1073160,86.78571428571428,67.44932978104443,300,54,99.28571428571429,91.09100629903826,300,54,695,1079.7692307692307,3829.21776506739,13824,0,2339.5,5626.800183052532,13825,12,2331.5,5630.681974681221,13825,0,14.0,0.0,0.0,0.0,0.0,129.03968253968253,94.93601563554175,300.0,54.0,86.78571428571428,7,9,10.0.2.15,198.47.127.17,49855,443,6,14,simage4.pubmatic.com,t12d1711h2_67e6df579eba_de5ccbe16bdd,ccf031939aa8979b73a604c356f7fd681101,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:51099-194.165.16.90:443-6-1668459200403,466.32,610.5326035520134,1514,54,493.1666666666667,647.6681014971864,1514,54,5918,65.16666666666666,160.75465147551557,613,0,142.0909090909091,218.27526407976444,614,0,107.83333333333331,209.73005738257206,613,0,1.0,0.0,0.0,0.0,0.0,678.3361253561253,614.6092548983562,1514.0,54.0,466.32,14,16,172.16.24.174,194.165.16.90,51099,443,6,25,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b71110,benign,benign,ctu_normal14_win_full_2017.pcap,10.0.2.15:52416-151.101.0.175:443-6-3622145,341.76190476190476,539.9805463868031,1474,54,88.4,71.97406940465898,260,54,884,213.10000000000002,788.1734981321655,3546,0,473.5555555555555,1157.300534769503,3546,0,423.3,1203.370918157268,3844,0,34.5,0.0,0.0,0.0,0.0,485.8058682058682,552.7243328943593,1474.0,54.0,260.0,13,15,10.0.2.15,151.101.0.175,52416,443,6,21,cdn.krxd.net,t12d1711h2_67e6df579eba_de5ccbe16bdd,860fcf58fd757e26aa8911e5eaff6b531120,benign,benign,ctu_normal14_win_full_2017.pcap,10.0.2.15:51166-91.190.219.146:443-6-2699039,293.3157894736842,461.62683975402314,1474,54,129.44444444444446,172.73759804332633,571,54,1165,89.55555555555556,244.0036697463241,1031,0,201.5,354.03994931968583,1031,1,168.22222222222223,428.4660948598435,1308,0,24.5,0.0,0.0,0.0,0.0,504.9511371020143,545.9400454269016,1474.0,54.0,293.3157894736842,12,14,10.0.2.15,91.190.219.146,51166,443,6,19,api.skype.com,t12d1712h2_67e6df579eba_88be6878e1da,a8d2a5625ef8f3aada2fb53dad3f29211130,benign,benign,ctu_normal20_win_2017_https.pcap,10.0.2.15:52424-130.211.17.221:443-6-8263341,321.2,475.9978021927283,1474,54,110.05882352941177,101.14993239508077,425,54,1871,207.97435897435903,595.949683816533,2778,0,506.93749999999994,860.9546227879842,2778,1,363.59090909090907,826.5865932277732,3037,0,3.0,0.0,0.0,0.0,0.0,493.7244103438477,546.0882287211681,1474.0,54.0,321.2,31,33,10.0.2.15,130.211.17.221,52424,443,6,40,static.parastorage.com,t12d1509h2_073e58a039a6_e70312a1ce2c,ab41313cfec25328b20865eb1388e0a21141,c2_beaconing,mta_icedid,IcedID_2022-10-31_1.pcap,172.16.0.153:57807-198.44.140.67:8008-6-1667231241468,281.71428571428567,397.3117343921701,1354,60,297.99999999999994,428.1736407891857,1354,60,2980,38.099999999999994,66.5281104021767,152,0,67.77777777777777,79.42886405107683,152,0,61.0,77.89308912434615,152,0,2.0,0.0,0.0,0.0,0.0,565.4025974025974,565.0009367975513,1354.0,60.0,281.71428571428567,14,15,172.16.0.153,198.44.140.67,57807,8008,6,21,clouditsoft.com,t12d190700_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b71151,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:50777-194.165.16.90:443-6-1668458710223,466.32,610.5326035520134,1514,54,493.1666666666667,647.6681014971864,1514,54,5918,66.375,162.4641264750602,569,0,144.8181818181818,219.68104978892384,569,0,112.66666666666666,213.7132034604632,569,0,1.0,0.0,0.0,0.0,0.0,678.3361253561253,614.6092548983562,1514.0,54.0,466.32,14,16,172.16.24.174,194.165.16.90,50777,443,6,25,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b71160,exfil,mta_xloader,XLoader_2025-09-05.pcap,10.9.5.71:55452-23.55.178.205:443-17-1757117500812,490.86666666666673,533.0078432064018,1494,63,309.2307692307692,457.7661618931209,1292,73,4020,7.551724137931035,16.389426484554328,71,0,18.25,26.965044712806176,82,0,7.312499999999999,15.278388876667155,47,0,2.0,0.0,0.0,0.0,0.0,656.5402379755321,577.3863121506037,1494.0,63.0,490.86666666666673,25,25,10.9.5.71,23.55.178.205,55452,443,17,30,img-s-msn-com.akamaized.net,q13d0311h3_55b375c5d22e_653d80c3fe9d,1171,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:52272-213.91.235.146:443-6-1668464461594,116.05263157894737,137.0541148939233,586,54,136.1818181818182,175.20206516009918,586,54,1498,4183.944444444443,12175.403312427126,43482,0,7531.099999999999,15874.548129701903,43482,0,10735.571428571428,18386.82809202594,43482,1,81.0,0.0,0.0,0.0,0.0,206.62327219564062,206.92195308301376,586.0,54.0,116.05263157894737,12,14,172.16.24.174,213.91.235.146,52272,443,6,19,,t12i190600_d83cc789557e_2dae41c691ec,fd4bc6cea4877646ccd62f0792ec0b621180,benign,benign,ctu_normal21_kali_2017.pcap,192.168.1.191:43354-104.20.31.2:443-6-1493726621012,218.34615384615384,398.19060182859084,1514,54,88.57142857142857,59.20201956757151,251,54,1240,119.72000000000001,309.73544087387444,1382,0,230.15384615384613,417.6784740590634,1425,0,270.90909090909093,439.32071531978875,1385,0,5.0,0.0,0.0,0.0,0.0,457.5186202686203,573.9208629463816,1514.0,54.0,218.34615384615384,19,21,192.168.1.191,104.20.31.2,43354,443,6,26,experience.tinypass.com,t12d1109h2_43e74fd21232_fed6c16fddd0,76cc3e2d3028143b23ec18e27dbd7ca91191,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:51859-194.165.16.90:443-6-1668460218404,435.7777777777779,596.1940400015195,1514,54,430.4285714285715,616.7435215943265,1514,54,6026,51.11538461538461,127.97603742047241,434,0,102.23076923076923,169.45016664010387,436,0,91.25000000000001,171.28027270582513,434,0,1.0,0.0,0.0,0.0,0.0,667.74942341609,617.9183340028792,1514.0,54.0,435.7777777777779,17,19,172.16.24.174,194.165.16.90,51859,443,6,27,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b71200,benign,benign,ctu_normal20_win_2017_https.pcap,10.0.2.15:49281-2.21.49.82:443-6-704452,833.8836689038035,681.3882425676122,1514,54,127.23364485981308,223.55707470307715,1514,54,13614,432.55605381165924,1965.315940577777,10096,0,1819.990566037736,3718.034282214149,10098,0,569.0294985250737,2240.964953363659,10097,0,2.0,0.0,0.0,0.0,0.0,742.3764335554346,635.3449638086679,1514.0,54.0,833.8836689038035,263,265,10.0.2.15,2.21.49.82,49281,443,6,447,wwwimages2.adobe.com,t12d1509h2_073e58a039a6_e70312a1ce2c,2b33c1374db4ddf06942f92373c0b54b1211,c2_beaconing,mta_qakbot,Qakbot_2022-12-09.pcap,10.12.9.101:49813-98.178.242.28:443-6-1670629726184,186.8421052631579,333.0517582662048,1378,54,150.00000000000003,215.57040613219615,738,54,1650,6070.722222222223,19343.492752330876,77999,0,10927.300000000001,25451.937603822797,77999,0,15598.000000000002,29780.41487286569,77999,1,83.0,0.0,0.0,0.0,0.0,470.03801169590645,524.5690962164193,1378.0,54.0,186.8421052631579,12,14,10.12.9.101,98.178.242.28,49813,443,6,19,,t12i190600_d83cc789557e_2dae41c691ec,fd4bc6cea4877646ccd62f0792ec0b621220,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_0.pcap,172.16.24.174:49970-13.69.239.73:443-6-1668456160581,457.7142857142857,597.1632233685489,1514,54,396.0769230769231,557.2633221883622,1514,54,5149,38.11111111111111,72.78806608299581,210,0,85.75,89.81306343531749,210,0,54.78571428571429,87.62874359076879,210,0,151.0,0.0,0.0,0.0,0.0,674.3249491249492,616.4905467126158,1514.0,54.0,457.7142857142857,17,19,172.16.24.174,13.69.239.73,49970,443,6,28,self.events.data.microsoft.com,t12d190800_d83cc789557e_7af1ed941c26,986571066668055ae9481cb84fda634a1231,exfil,mta_lumma,Lumma_2025-07-15.pcap,10.7.15.101:52917-172.67.216.128:443-6-1752609348897,1186.7680973734787,555.0328553749525,1514,54,56.358422939068106,28.10694873671108,502,54,15724,39.831410256410265,1519.2835793209963,60006,0,223.51438848920867,3598.59234485002,60006,0,48.477751756440284,1676.6094836417458,60007,0,2.0,0.0,0.0,0.0,0.0,707.5449123800213,650.129258395909,1514.0,54.0,502.0,856,858,10.7.15.101,172.67.216.128,52917,443,6,1561,desk-app-now.com,t13d201200_2b729b4bf6f3_e24568c0d440,907bf3ecef1c987c889946b737b43de81240,benign,benign,ctu_normal21_kali_2017.pcap,192.168.1.191:54548-52.200.162.142:443-6-1493727399671,91.72222222222223,61.75073760507839,291,54,93.9,72.1871795327182,291,54,939,80.3529411764706,104.07265561644338,282,0,151.7777777777778,144.9756684566222,439,0,154.85714285714286,208.5700750119158,585,0,145.5,0.0,0.0,0.0,0.0,137.95802469135802,93.05340572829404,291.0,54.0,91.72222222222223,10,15,192.168.1.191,52.200.162.142,54548,443,6,18,logx.optimizely.com,t12d1109h2_43e74fd21232_fed6c16fddd0,303951d4c50efb2e991652225a6f02b11250,benign,benign,ctu_normal21_kali_2017.pcap,192.168.1.191:56696-23.227.38.32:443-6-1493726764316,499.69230769230774,635.4491223099883,1514,66,151.2857142857143,260.89502541389,1175,66,3177,31.526315789473678,68.96992562061958,322,0,59.900000000000006,87.38053498770101,322,0,58.294117647058826,121.34906504887171,426,0,24.0,0.0,0.0,0.0,0.0,662.0160765160765,589.4833168311159,1514.0,66.0,499.69230769230774,32,33,192.168.1.191,23.227.38.32,56696,443,6,39,shop.thefader.com,t12d1110h2_43e74fd21232_205f67e4d9f4,8d2a028aa94425f76ced7826b1f390391260,benign,benign,ctu_normal20_win_2017_https.pcap,10.0.2.15:65435-172.217.23.138:443-6-10770881,94.85714285714288,91.73014863210038,571,54,116.24999999999999,127.92471744480554,571,54,1860,5875.14705882353,18994.7771994437,66959,0,13317.000000000002,27281.885670061107,66959,5,11095.444444444445,25364.919158327644,67220,1,27.0,0.0,0.0,0.0,0.0,200.21658312447786,203.46076000871795,571.0,54.0,94.85714285714288,27,29,10.0.2.15,172.217.23.138,65435,443,6,35,fonts.googleapis.com,t12d1510h2_073e58a039a6_60bf0a45ed8c,67619a80665d7ab92d1041b1d11f91641271,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:50530-194.165.16.90:443-6-1668458344185,466.32,610.5326035520134,1514,54,493.1666666666667,647.6681014971864,1514,54,5918,65.16666666666666,161.24722219829607,612,0,142.1818181818182,219.14644335777766,613,0,106.08333333333334,208.93951205305734,612,0,1.0,0.0,0.0,0.0,0.0,678.3361253561253,614.6092548983562,1514.0,54.0,466.32,14,16,172.16.24.174,194.165.16.90,50530,443,6,25,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b71281,c2_beaconing,mta_icedid,IcedID_2022-12-20.pcap,10.3.24.178:54699-23.81.246.152:443-6-1671553076297,170.23529411764704,259.10748961863413,943,54,158.66666666666666,224.78712151722573,732,54,1428,23.0,43.2265350604618,142,0,46.0,53.25142519890229,142,0,41.285714285714285,55.46985453293313,142,1,1.0,0.0,0.0,0.0,0.0,365.79466230936816,366.14419051154795,943.0,54.0,170.23529411764704,12,14,10.3.24.178,23.81.246.152,54699,443,6,17,xedefeg.com,t12d190700_d83cc789557e_2dae41c691ec,ae4edc6faf64d08308082ad26be607671291,c2_beaconing,mta_pikabot,Pikabot_2023-10-03.pcap,10.1.2.147:49424-179.60.149.244:443-6-1696349621507,441.64516129032273,589.2573036394824,1450,60,351.2352941176471,540.7953089445863,1450,60,5971,14.033333333333331,28.61815596041633,89,0,26.312499999999996,41.83095942799623,126,0,27.30769230769231,36.95579479906729,90,0,48.0,0.0,0.0,0.0,0.0,650.4787807596157,584.5308044107945,1450.0,60.0,441.64516129032273,15,16,10.1.2.147,179.60.149.244,49424,443,6,31,zzerxc.com,t12d190700_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b71301,c2_beaconing,mta_gozi,Gozi_2023-07-12.pcap,10.7.12.121:50774-170.130.55.162:443-6-1689206339389,373.54545454545456,549.5017420374248,1514,54,153.2,200.96201962891726,636,54,1532,530.5714285714286,2261.7105378767765,10383,0,1238.0,3435.561926381185,10383,1,1009.909090909091,3114.786010452258,10384,0,1.0,0.0,0.0,0.0,0.0,545.5457912457913,557.0253582839282,1514.0,54.0,373.54545454545456,13,15,10.7.12.121,170.130.55.162,50774,443,6,22,iamupdate.com,t12d190700_d83cc789557e_2dae41c691ec,4ce0442e9d20d092d9d74e9ce54b363a1311,c2_beaconing,mta_icedid,IcedID_2022-12-20.pcap,10.3.24.178:54753-103.208.85.184:443-6-1671554015480,184.29411764705884,314.26516763433284,1356,54,115.99999999999999,88.66147496436737,266,54,928,3916.0,14946.841695377208,59941,0,8950.857142857143,22494.040858477543,59941,1,7807.125,21099.714970569763,60004,1,130.5,0.0,0.0,0.0,0.0,409.47712418300654,511.574658908555,1356.0,54.0,184.29411764705884,10,12,10.3.24.178,103.208.85.184,54753,443,6,17,artiwal.pics,t12d190800_d83cc789557e_7af1ed941c26,ec74a5c51106f0419184d0dd08fb05bc1320,benign,benign,ctu_normal20_win_2017_https.pcap,10.0.2.15:49599-31.13.84.4:443-6-2380545,564.1077844311377,639.0409043787088,1474,54,108.63492063492065,72.27173221259976,330,54,6844,446.83734939759034,4898.965244242251,62747,0,1196.3709677419354,8002.044196275307,62751,2,719.8932038834952,6236.570374613148,62966,0,4.0,0.0,0.0,0.0,0.0,550.3068817594766,555.0888286764707,1474.0,54.0,330.0,135,137,10.0.2.15,31.13.84.4,49599,443,6,167,external-vie1-1.xx.fbcdn.net,t12d1509h2_073e58a039a6_e70312a1ce2c,2d1eb5817ece335c24904f516ad5da121331,c2_beaconing,mta_gozi,Gozi_2023-07-12.pcap,10.7.12.121:50046-170.130.55.162:443-6-1689202973676,339.43999999999994,514.7650014003153,1514,54,136.66666666666666,185.8329324632176,636,54,1640,450.62500000000006,2125.080434539095,10424,0,983.1818181818184,3132.2138757812127,10424,1,898.4166666666666,3000.814479083768,10424,0,1.5,0.0,0.0,0.0,0.0,536.5246723646724,559.5760834166458,1514.0,54.0,339.43999999999994,18,20,10.7.12.121,170.130.55.162,50046,443,6,25,iamupdate.com,t12d190700_d83cc789557e_2dae41c691ec,4ce0442e9d20d092d9d74e9ce54b363a1341,exfil,mta_lumma,Lumma_2024-09-19.pcap,10.9.19.101:60945-34.36.36.12:443-6-1726768705902,433.0526315789473,494.1896255132358,1430,60,146.0,151.20185184051152,489,60,1168,18.944444444444446,29.149658906736544,81,0,48.714285714285715,33.9887936714161,81,1,28.7,46.339448037762004,130,0,29.5,0.0,0.0,0.0,0.0,527.7634237107922,522.142389856702,1430.0,60.0,433.0526315789473,16,17,10.9.19.101,34.36.36.12,60945,443,6,19,blockstream.info,t12d180700_4b22cbed5bed_2dae41c691ec,b44baa8a20901c5663b3a9664ba8a7671350,benign,benign,ctu_normal14_win_full_2017.pcap,10.0.2.15:51210-40.77.226.194:443-6-2706637,383.26923076923083,547.8583435664593,1514,54,263.0833333333333,426.39641358148344,1514,54,3157,158.59999999999997,665.1328814605395,3343,0,360.4545454545455,993.5744927921976,3343,0,300.69230769230774,974.9090884637554,3543,0,27.5,0.0,0.0,0.0,0.0,644.0709198209198,622.2675194283753,1514.0,54.0,383.26923076923083,18,20,10.0.2.15,40.77.226.194,51210,443,6,26,client-s.gateway.messenger.live.com,t12d1710h2_67e6df579eba_4a7a952b215a,4fd467dd264720762ffe286277c00f571360,benign,benign,ctu_normal20_win_2017_https.pcap,10.0.2.15:52429-94.31.29.32:443-6-8264799,155.5384615384616,300.8816733809459,1474,54,93.26315789473685,58.229280631028054,246,54,1772,5564.526315789475,18094.21613984715,68111,0,11747.333333333332,25212.65300458109,68111,4,11128.052631578948,24751.89105564279,68325,0,20.0,0.0,0.0,0.0,0.0,424.38906882591095,564.9628880621704,1474.0,54.0,155.5384615384616,32,34,10.0.2.15,94.31.29.32,52429,443,6,39,cdn.trackjs.com,t12d1509h2_073e58a039a6_e70312a1ce2c,b898351eb5e266aefd3723d4669354941370,benign,benign,ctu_normal21_kali_2017.pcap,192.168.1.191:55264-104.244.43.144:443-6-1493726775200,152.7058823529412,178.90771528426407,583,66,177.44444444444446,206.30808946276875,583,66,1597,662.3125,2489.995039319021,9998,0,1321.25,3506.2401005717143,9998,13,1504.7142857142858,3752.6912438180384,10010,0,64.0,0.0,0.0,0.0,0.0,257.4472585330428,214.66707159867948,583.0,66.0,152.7058823529412,8,9,192.168.1.191,104.244.43.144,55264,443,6,17,static.ads-twitter.com,t12d1110h2_43e74fd21232_205f67e4d9f4,1381,c2_beaconing,mta_icedid,IcedID_2022-01-12.pcap,10.22.5.47:50103-104.168.44.45:443-6-1642007237245,937.9315525876476,645.0784819039299,1415,60,1377.9271356783902,212.87144976079136,1415,60,548415,4.571906354515052,27.137481359130952,252,0,6.886649874055417,37.83289611429159,378,0,12.49,43.247794843135864,253,0,2.0,0.0,0.0,0.0,0.0,728.5061339643304,612.5087327269028,1415.0,60.0,937.9315525876476,164,165,10.22.5.47,104.168.44.45,50103,443,6,599,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b71391,c2_beaconing,mta_remcos,Remcos_2023-05-29.pcap,10.5.29.101:50122-146.70.158.105:9138-6-1685384507550,629.792307692308,694.1490211087684,1514,54,1194.9692307692305,563.8550059975186,1514,54,77673,18.186046511627918,114.32169300390487,937,0,36.640625,166.41746771750834,991,0,34.828125,160.9846245924086,937,0,5.0,0.0,0.0,0.0,0.0,628.597435897436,596.2639547392045,1514.0,54.0,578.0,35,37,10.5.29.101,146.70.158.105,50122,9138,6,130,,t13i010400_0f2cb44170f4_5c4c70b73fa0,eb1d94daa7e0344597e756a1fb6e70541401,c2_beaconing,mta_icedid,IcedID_2022-12-20.pcap,10.3.24.178:54763-103.208.85.184:443-6-1671554923242,184.29411764705884,314.26516763433284,1356,54,115.99999999999999,88.66147496436737,266,54,928,3916.2499999999995,14954.0666821214,59969,0,8951.42857142857,22505.677230846613,59969,1,7807.75,21104.854057436984,60018,1,198.0,0.0,0.0,0.0,0.0,409.47712418300654,511.574658908555,1356.0,54.0,184.29411764705884,10,12,10.3.24.178,103.208.85.184,54763,443,6,17,artiwal.pics,t12d190800_d83cc789557e_7af1ed941c26,ec74a5c51106f0419184d0dd08fb05bc1411,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:51720-194.165.16.90:443-6-1668459982164,466.32,610.5326035520134,1514,54,493.1666666666667,647.6681014971864,1514,54,5918,65.66666666666669,164.86639298605365,573,0,143.27272727272728,224.7550181460209,575,0,112.91666666666666,218.9377073438235,573,0,1.0,0.0,0.0,0.0,0.0,678.3361253561253,614.6092548983562,1514.0,54.0,466.32,14,16,172.16.24.174,194.165.16.90,51720,443,6,25,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b71420,c2_beaconing,mta_icedid,IcedID_2023-09-28.pcap,10.10.20.147:51031-52.185.211.133:443-6-1695924196758,285.11999999999995,438.21012083246086,1514,54,185.72727272727272,277.4433603130884,992,54,2043,15.750000000000004,23.81495693703945,59,0,37.800000000000004,34.30840518978792,96,0,26.000000000000004,34.916567223406524,110,0,40.0,0.0,0.0,0.0,0.0,557.3401731601732,580.1593683365271,1514.0,54.0,285.11999999999995,17,19,10.10.20.147,52.185.211.133,51031,443,6,25,settings-win.data.microsoft.com,t12d1909h2_d83cc789557e_7af1ed941c26,2fe9b0e731d3d41b2b84e8e1d61868361431,c2_beaconing,mta_gozi,Gozi_2023-07-12.pcap,10.7.12.121:50623-170.130.55.162:443-6-1689205662704,347.79166666666663,530.5418869802645,1514,54,144.18181818181816,192.9812520333611,636,54,1586,469.4782608695652,2148.2935483682104,10318,0,1079.8,3247.9643813044227,10318,0,896.75,2968.803956447475,10318,0,17.0,0.0,0.0,0.0,0.0,537.5611564361565,558.6805362074457,1514.0,54.0,347.79166666666663,15,17,10.7.12.121,170.130.55.162,50623,443,6,24,iamupdate.com,t12d190700_d83cc789557e_2dae41c691ec,4ce0442e9d20d092d9d74e9ce54b363a1440,benign,benign,ctu_normal14_win_full_2017.pcap,10.0.2.15:52353-54.229.78.38:443-6-3546902,330.59259259259255,511.33432231152756,1474,54,151.63636363636365,213.95900202014064,755,54,1668,207.15384615384616,713.2331283560904,3586,0,538.6,1207.3535061815528,3886,0,352.46666666666664,1002.3184457380132,3803,0,47.5,0.0,0.0,0.0,0.0,533.4282173587729,547.8518374329492,1474.0,54.0,330.59259259259255,19,21,10.0.2.15,54.229.78.38,52353,443,6,27,ml314.com,t12d1711h2_67e6df579eba_de5ccbe16bdd,303951d4c50efb2e991652225a6f02b11450,benign,benign,ctu_normal21_kali_2017.pcap,192.168.1.191:59346-104.199.104.168:443-6-1493726956699,307.36363636363626,480.8601960430164,1474,66,139.33333333333334,152.63404441719914,583,66,1672,254.42857142857142,869.9123272737645,4016,0,485.72727272727275,1256.3989884514465,4249,0,574.1111111111111,1317.4945393097883,4039,0,154.0,0.0,0.0,0.0,0.0,520.5218855218855,540.8623652167923,1474.0,66.0,307.36363636363626,13,15,192.168.1.191,104.199.104.168,59346,443,6,22,s.pubmine.com,t12d1110h2_43e74fd21232_205f67e4d9f4,30e7675adab2c5b915e4bb356e9e1cc11461,c2_beaconing,mta_gozi,Gozi_2023-07-12.pcap,10.7.12.121:50587-170.130.55.162:443-6-1689205476450,349.5833333333333,513.5440302588404,1514,54,144.18181818181816,192.9812520333611,636,54,1586,469.5652173913044,2178.523954551191,10461,0,1080.0,3296.775697556629,10461,1,897.1666666666666,3012.4366106747098,10461,0,17.5,0.0,0.0,0.0,0.0,538.1277518777518,558.6025284573929,1514.0,54.0,349.5833333333333,17,19,10.7.12.121,170.130.55.162,50587,443,6,24,iamupdate.com,t12d190700_d83cc789557e_2dae41c691ec,4ce0442e9d20d092d9d74e9ce54b363a1471,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:50946-194.165.16.90:443-6-1668458961822,466.32,610.5326035520134,1514,54,493.1666666666667,647.6681014971864,1514,54,5918,58.20833333333334,140.44370036072993,482,0,127.00000000000003,189.46609195315133,483,0,97.75,183.43793847709713,482,0,1.0,0.0,0.0,0.0,0.0,678.3361253561253,614.6092548983562,1514.0,54.0,466.32,14,16,172.16.24.174,194.165.16.90,50946,443,6,25,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b71480,exfil,mta_koistealer,KoiStealer_2025-07-08.pcap,10.7.8.101:54887-40.118.171.167:443-6-1752006965370,434.28,570.6783624190891,1514,54,292.72727272727275,439.7476755843266,1514,54,3220,5192.25,24459.431546684737,119962,0,12461.4,37792.19680245587,119962,0,9270.923076923076,33271.21763492067,120004,0,72.0,0.0,0.0,0.0,0.0,664.0563636363636,622.5803774814759,1514.0,54.0,434.28,16,18,10.7.8.101,40.118.171.167,54887,443,6,25,checkappexec.microsoft.com,t12d180700_4b22cbed5bed_2dae41c691ec,098e26e2609212ac1bfac552fbe041271491,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:52088-194.165.16.90:443-6-1668460580241,466.32,610.5326035520134,1514,54,493.1666666666667,647.6681014971864,1514,54,5918,63.541666666666664,158.8718321728903,600,0,138.63636363636365,216.1926329583285,600,0,108.25,210.2380144675856,600,0,1.0,0.0,0.0,0.0,0.0,678.3361253561253,614.6092548983562,1514.0,54.0,466.32,14,16,172.16.24.174,194.165.16.90,52088,443,6,25,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b71500,benign,benign,ctu_normal21_kali_2017.pcap,192.168.1.191:33330-172.217.23.194:443-6-1493727337315,113.66666666666666,109.16786701408888,583,66,131.2307692307692,142.53897352780035,583,66,1706,44.65217391304348,79.49534502990049,370,0,85.58333333333333,126.13085437054022,451,0,95.3,135.37852283299756,446,0,49.0,0.0,0.0,0.0,0.0,213.31183631183632,202.6563236069642,583.0,66.0,113.66666666666666,17,18,192.168.1.191,172.217.23.194,33330,443,6,24,pagead2.googlesyndication.com,t12d1110h2_43e74fd21232_205f67e4d9f4,554786d4c84f8a7953b7e453c63710671511,c2_beaconing,mta_pikabot,Pikabot_2023-11-02.pcap,10.11.2.101:52776-51.68.147.114:2083-6-1698937815541,248.09999999999994,362.62825680244356,1430,60,160.8181818181818,218.34047640408693,748,60,1769,3731.473684210526,15770.6425056475,68850,0,7089.8,21703.23693113285,68850,0,8837.874999999998,24320.236861143905,69023,0,133.0,0.0,0.0,0.0,0.0,505.74399551066216,534.5189393019615,1430.0,60.0,248.09999999999994,12,13,10.11.2.101,51.68.147.114,52776,2083,6,20,,t12i190700_d83cc789557e_7af1ed941c26,ec74a5c51106f0419184d0dd08fb05bc1521,c2_beaconing,mta_bumblebee,BumbleBee_2022-06-14.pcap,10.6.14.101:65497-193.233.203.156:443-6-1655229159587,172.8888888888889,286.00655872547213,1270,60,123.88888888888889,105.59527030653935,370,60,1115,89.58823529411767,133.1484410458537,437,0,190.375,226.91655955438773,693,0,165.25000000000003,153.31922812969583,437,0,10.0,0.0,0.0,0.0,0.0,400.962962962963,473.87668633790724,1270.0,60.0,172.8888888888889,11,14,10.6.14.101,193.233.203.156,65497,443,6,18,,t12i210600_76e208dd3e22_2dae41c691ec,76c691f46143bf86e2d1bb73c61877671530,benign,benign,ctu_normal20_win_2017_https.pcap,10.0.2.15:65216-151.101.113.171:443-6-10035628,314.32000000000005,521.3390387582091,1474,54,86.72727272727273,64.56019037935205,245,54,954,367.45833333333337,1197.3337037720128,5724,0,881.6,1780.6398475454455,5724,1,676.9230769230769,1660.9613411886132,5972,0,19.0,0.0,0.0,0.0,0.0,472.13223665223666,553.5194385635671,1474.0,54.0,245.0,15,17,10.0.2.15,151.101.113.171,65216,443,6,25,static.isu.pub,t12d1509h2_073e58a039a6_e70312a1ce2c,860fcf58fd757e26aa8911e5eaff6b531540,c2_beaconing,mta_emotet,Emotet_2022-07-07.pcap,10.7.7.101:57309-52.109.8.21:443-6-1657217963860,748.0307692307691,607.4017916819653,1514,54,96.49999999999999,139.40494657807085,707,54,2316,553.921875,4387.461341772214,35105,0,1541.3478260869565,7316.6499699390215,35105,0,6.675000000000001,15.706257939481906,63,0,2.0,0.0,0.0,0.0,0.0,652.3272670419011,587.6176882220359,1514.0,54.0,707.0,46,48,10.7.7.101,52.109.8.21,57309,443,6,65,nexusrules.officeapps.live.com,t12d190800_d83cc789557e_7af1ed941c26,986571066668055ae9481cb84fda634a1550,benign,benign,ctu_normal21_kali_2017.pcap,192.168.1.191:43948-87.248.118.22:443-6-1493726779056,760.8814814814814,703.1137999636201,1514,54,76.52631578947373,56.409885551824374,410,54,4362,2.485074626865672,7.53511586155253,52,0,5.946428571428574,12.267354523815925,66,0,4.168831168831169,11.765697909604361,70,0,2.0,0.0,0.0,0.0,0.0,634.4883307509039,606.8485621058264,1514.0,54.0,410.0,110,115,192.168.1.191,87.248.118.22,43948,443,6,135,s.yimg.com,t12d1109h2_43e74fd21232_fed6c16fddd0,76cc3e2d3028143b23ec18e27dbd7ca91561,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:50509-194.165.16.90:443-6-1668458311950,435.7777777777777,592.4256093081244,1514,54,459.3846153846154,631.944425096271,1514,54,5972,61.576923076923066,162.51133451594646,659,0,133.41666666666666,222.82829032619927,659,0,105.92307692307692,216.56502546904994,659,0,1.0,0.0,0.0,0.0,0.0,668.1132817799485,618.2566902665315,1514.0,54.0,435.7777777777777,16,18,172.16.24.174,194.165.16.90,50509,443,6,27,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b71571,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:50574-194.165.16.90:443-6-1668458406452,466.32,610.5326035520134,1514,54,493.1666666666667,647.6681014971864,1514,54,5918,63.0,154.71544708017166,555,0,137.45454545454547,209.5430092541212,556,0,102.5,200.04703992265965,555,0,1.0,0.0,0.0,0.0,0.0,678.3361253561253,614.6092548983562,1514.0,54.0,466.32,14,16,172.16.24.174,194.165.16.90,50574,443,6,25,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b71581,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:51035-194.165.16.90:443-6-1668459100966,466.32,610.5326035520134,1514,54,493.1666666666667,647.6681014971864,1514,54,5918,75.58333333333334,191.68881409533356,714,0,164.90909090909093,261.55743328969055,714,0,133.66666666666669,256.5035294222296,714,0,1.0,0.0,0.0,0.0,0.0,678.3361253561253,614.6092548983562,1514.0,54.0,466.32,14,16,172.16.24.174,194.165.16.90,51035,443,6,25,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b71591,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:51868-194.165.16.90:443-6-1668460232827,466.32,610.5326035520134,1514,54,493.1666666666667,647.6681014971864,1514,54,5918,70.70833333333333,173.27170901485198,612,0,154.27272727272725,234.8497779045537,613,0,119.58333333333334,227.6917606739161,612,0,1.0,0.0,0.0,0.0,0.0,678.3361253561253,614.6092548983562,1514.0,54.0,466.32,14,16,172.16.24.174,194.165.16.90,51868,443,6,25,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b71601,c2_beaconing,mta_pikabot,Pikabot_2023-10-03.pcap,10.1.2.147:49547-179.60.149.244:443-6-1696349860814,420.20588235294116,580.4759687251313,1450,60,320.57894736842104,518.0697417432729,1450,60,6091,12.818181818181817,27.57541312638687,84,0,23.5,39.89434575888433,118,0,25.357142857142858,35.74182454741255,85,0,22.0,0.0,0.0,0.0,0.0,644.1316477468181,587.3146599754382,1450.0,60.0,420.20588235294116,15,16,10.1.2.147,179.60.149.244,49547,443,6,34,zzerxc.com,t12d190700_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b71611,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:51704-194.165.16.90:443-6-1668459962475,435.7777777777777,592.4256093081244,1514,54,459.3846153846154,631.944425096271,1514,54,5972,55.1923076923077,137.61308636340345,480,0,119.58333333333334,186.791793830522,480,0,92.46153846153847,179.63231677726932,480,0,1.5,0.0,0.0,0.0,0.0,668.1132817799485,618.2566902665315,1514.0,54.0,435.7777777777777,16,18,172.16.24.174,194.165.16.90,51704,443,6,27,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b71620,exfil,mta_xloader,XLoader_2025-01-30.pcap,10.1.30.242:65326-52.191.219.104:443-6-1738201864803,340.03846153846155,484.5810133110236,1450,54,250.5714285714286,405.35316307287746,1450,60,3508,24.040000000000003,38.34653395897296,98,0,46.23076923076923,53.27155877538196,146,0,47.272727272727266,53.156544110938796,126,0,38.0,0.0,0.0,0.0,0.0,614.7807285307285,599.4119592658126,1450.0,54.0,340.03846153846155,17,18,10.1.30.242,52.191.219.104,65326,443,6,26,settings-win.data.microsoft.com,t12d1809h2_4b22cbed5bed_7af1ed941c26,2fe9b0e731d3d41b2b84e8e1d61868361631,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:51582-194.165.16.90:443-6-1668459887567,466.32,610.5326035520134,1514,54,493.1666666666667,647.6681014971864,1514,54,5918,57.333333333333336,139.94305260002903,491,0,125.0,189.55737917580524,492,0,96.16666666666667,183.28062603228926,491,0,1.0,0.0,0.0,0.0,0.0,678.3361253561253,614.6092548983562,1514.0,54.0,466.32,14,16,172.16.24.174,194.165.16.90,51582,443,6,25,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b71640,benign,benign,ctu_normal21_kali_2017.pcap,192.168.1.191:37142-54.225.176.102:443-6-1493726637900,141.74074074074073,212.37767385786185,947,66,144.26666666666665,230.1702682384334,947,66,2164,2340.4230769230767,4228.806178325764,10027,0,4346.500000000001,5102.684794829543,10272,0,5521.454545454546,5174.906750147993,10269,3,116.5,0.0,0.0,0.0,0.0,363.2878600823045,372.0813867699739,947.0,66.0,141.74074074074073,11,12,192.168.1.191,54.225.176.102,37142,443,6,27,925388773.log.optimizely.com,t12d1109h2_43e74fd21232_fed6c16fddd0,303951d4c50efb2e991652225a6f02b11651,c2_beaconing,mta_bumblebee,BumbleBee_2022-06-14.pcap,10.6.14.101:49158-172.93.181.105:443-6-1655229941128,157.94444444444446,190.450695247514,714,60,145.11111111111111,174.64209432754495,578,60,1306,25.058823529411768,39.15908353791507,92,0,43.5,46.09927176369337,96,0,42.5,45.12522259541458,95,0,38.0,0.0,0.0,0.0,0.0,295.53703703703707,269.4779869665305,714.0,60.0,157.94444444444446,12,13,10.6.14.101,172.93.181.105,49158,443,6,18,hocavopeh.com,t12d190700_d83cc789557e_2dae41c691ec,ae4edc6faf64d08308082ad26be607671660,c2_beaconing,mta_qakbot,Qakbot_2022-06-27_1.pcap,10.6.27.101:49774-64.233.180.108:993-6-1656361058825,56.28571428571429,4.535573676110729,66,54,57.0,6.0,66,54,228,98.66666666666667,186.19308973929904,473,0,197.33333333333334,239.88816838963388,473,36,277.5,276.4787514439401,473,82,59.0,0.0,0.0,0.0,0.0,57.84656084656085,4.556289846124098,66.0,54.0,56.28571428571429,0,2,10.6.27.101,64.233.180.108,49774,993,6,7,,,1671,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:51236-194.165.16.90:443-6-1668459399690,466.32,610.5326035520134,1514,54,493.1666666666667,647.6681014971864,1514,54,5918,70.33333333333333,172.97339998233625,630,0,153.45454545454547,234.27862200224914,630,0,120.83333333333333,228.63739984101596,630,0,119.5,0.0,0.0,0.0,0.0,678.3361253561253,614.6092548983562,1514.0,54.0,466.32,14,16,172.16.24.174,194.165.16.90,51236,443,6,25,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b71681,c2_beaconing,mta_icedid,IcedID_2022-10-31_1.pcap,172.16.0.153:57919-198.44.140.67:8008-6-1667231659957,292.80000000000007,404.28736522949924,1354,60,297.99999999999994,428.1736407891857,1354,60,2980,39.473684210526315,66.88411904269172,150,0,66.88888888888889,78.61209265190129,151,0,66.66666666666666,78.35017549437907,150,0,1.5,0.0,0.0,0.0,0.0,568.9333333333334,563.2082070109103,1354.0,60.0,292.80000000000007,14,15,172.16.0.153,198.44.140.67,57919,8008,6,20,clouditsoft.com,t12d190700_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b71690,c2_beaconing,mta_qakbot,Qakbot_2022-09-29.pcap,10.9.29.201:50001-197.203.142.42:443-6-1664414566175,64.0,4.898979485566356,66,54,66.0,0.0,66,66,330,15000.6,25272.284400109147,59952,1008,3762.75,3107.4095722965135,8030,1008,0.0,0.0,0,0,4013.0,0.0,0.0,0.0,0.0,60.44444444444444,5.7948465824023545,66.0,54.0,64.0,0,1,10.9.29.201,197.203.142.42,50001,443,6,6,,,1701,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:51280-194.165.16.90:443-6-1668459471425,466.32,610.5326035520134,1514,54,493.1666666666667,647.6681014971864,1514,54,5918,59.54166666666668,146.4563977751582,494,0,129.9090909090909,198.2954636624119,494,0,99.83333333333333,191.99045115143963,494,0,1.0,0.0,0.0,0.0,0.0,678.3361253561253,614.6092548983562,1514.0,54.0,466.32,14,16,172.16.24.174,194.165.16.90,51280,443,6,25,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b71710,benign,benign,ctu_normal21_kali_2017.pcap,192.168.1.191:42764-54.192.93.153:443-6-1493727001655,183.45098039215685,296.7167884515799,1514,66,102.53333333333333,61.33274612412554,290,66,3076,5271.48,16234.029097685201,58992,0,9088.758620689656,20641.024139969366,58992,0,13172.849999999999,23911.543145683732,59019,0,117.0,0.0,0.0,0.0,0.0,455.6702147525677,572.1731210040344,1514.0,66.0,183.45098039215685,40,43,192.168.1.191,54.192.93.153,42764,443,6,51,rules.quantcount.com,t12d1109h2_43e74fd21232_fed6c16fddd0,76cc3e2d3028143b23ec18e27dbd7ca91721,c2_beaconing,mta_pikabot,Pikabot_2023-11-02.pcap,10.11.2.101:52977-154.221.30.136:13724-6-1698958007022,148.06818181818178,259.7203682072964,1430,60,111.17391304347827,155.42512145546692,750,60,2557,2778.186046511628,4500.160559335707,10444,0,5417.272727272726,5060.632081562051,10444,0,5959.699999999999,4985.171570715865,10445,0,294.0,0.0,0.0,0.0,0.0,470.85758725976115,551.517632685182,1430.0,60.0,148.06818181818178,37,39,10.11.2.101,154.221.30.136,52977,13724,6,44,,t12i190700_d83cc789557e_7af1ed941c26,ec74a5c51106f0419184d0dd08fb05bc1730,benign,benign,ctu_normal14_win_full_2017.pcap,10.0.2.15:52027-52.31.67.165:443-6-3387631,283.6666666666667,462.5273356590766,1474,54,197.20000000000002,338.8899526394962,1140,54,1972,372.1739130434783,1637.8609013026137,7881,0,951.1111111111111,2600.582744523064,7881,0,653.7692307692308,2250.9996725101996,8145,0,34.0,0.0,0.0,0.0,0.0,564.0328042328042,580.151175459224,1474.0,54.0,283.6666666666667,16,18,10.0.2.15,52.31.67.165,52027,443,6,24,dpm.demdex.net,t12d1711h2_67e6df579eba_de5ccbe16bdd,303951d4c50efb2e991652225a6f02b11740,benign,benign,ctu_normal21_kali_2017.pcap,192.168.1.191:56414-192.0.77.2:443-6-1493726880736,233.27403846153842,423.6080095987003,1514,54,85.09599999999999,79.38548498186837,751,54,10637,1631.3671497584546,4727.933699665235,58840,0,2723.306451612902,5869.530174931344,58840,0,4117.280487804878,6923.819058327136,58944,0,80.0,0.0,0.0,0.0,0.0,523.9781970445886,573.1155111245836,1514.0,54.0,233.27403846153842,149,151,192.168.1.191,192.0.77.2,56414,443,6,208,i1.wp.com,t12d1110h2_43e74fd21232_205f67e4d9f4,d199ba0af2b08e204c73d6d81a1fd2601751,c2_beaconing,mta_icedid,IcedID_2022-01-12.pcap,10.22.5.47:50008-104.168.44.45:443-6-1642006897229,278.66666666666663,413.10431669323935,1279,60,226.4,389.63920633210296,1279,60,2264,64.05882352941175,100.92848370767003,227,0,95.77777777777777,112.26729018037464,221,0,126.00000000000001,116.77185734014282,228,0,4.0,0.0,0.0,0.0,0.0,527.8962962962963,513.8693710274136,1279.0,60.0,278.66666666666663,12,13,10.22.5.47,104.168.44.45,50008,443,6,18,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b71760,benign,benign,ctu_normal20_win_2017_https.pcap,10.0.2.15:64843-192.185.178.103:443-6-9456891,354.00000000000006,538.0090683025312,1474,54,173.42857142857142,311.6720945248299,1146,54,2428,221.87878787878788,651.8745928846167,3332,0,563.0769230769231,990.8689336081455,3332,6,377.7894736842105,834.7141612517138,3337,0,10.0,0.0,0.0,0.0,0.0,584.8698412698412,574.9337206577884,1474.0,54.0,354.00000000000006,28,30,10.0.2.15,192.185.178.103,64843,443,6,34,chat.bluehost.com,t12d1510h2_073e58a039a6_60bf0a45ed8c,fbe78c619e7ea20046131294ad087f051771,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:51074-194.165.16.90:443-6-1668459159857,435.7777777777777,592.4256093081244,1514,54,459.3846153846154,631.944425096271,1514,54,5972,63.153846153846146,160.77927535791227,552,0,136.83333333333331,219.42811344423706,554,0,109.07692307692307,213.25198769627036,552,0,1.0,0.0,0.0,0.0,0.0,668.1132817799485,618.2566902665315,1514.0,54.0,435.7777777777777,16,18,172.16.24.174,194.165.16.90,51074,443,6,27,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b71781,c2_beaconing,mta_gozi,Gozi_2023-07-12.pcap,10.7.12.121:50329-170.130.55.162:443-6-1689204318842,391.80952380952385,575.5847130568721,1514,54,164.2222222222222,209.92187700295662,636,54,1478,540.6999999999999,2305.0230299112095,10328,0,1351.75,3628.832269871004,10328,0,979.3636363636364,3102.325878199364,10328,0,42.0,0.0,0.0,0.0,0.0,549.3924162257496,555.5815419862272,1514.0,54.0,391.80952380952385,11,13,10.7.12.121,170.130.55.162,50329,443,6,21,iamupdate.com,t12d190700_d83cc789557e_2dae41c691ec,4ce0442e9d20d092d9d74e9ce54b363a1791,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:50384-194.165.16.90:443-6-1668458118152,466.32,610.5326035520134,1514,54,493.1666666666667,647.6681014971864,1514,54,5918,84.41666666666666,210.21188413570738,773,0,184.18181818181816,285.7827210248437,773,0,143.33333333333334,277.6237916623316,773,0,1.0,0.0,0.0,0.0,0.0,678.3361253561253,614.6092548983562,1514.0,54.0,466.32,14,16,172.16.24.174,194.165.16.90,50384,443,6,25,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b71801,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:51658-194.165.16.90:443-6-1668459894187,409.44827586206895,572.4708093747723,1514,54,430.42857142857144,616.7435215943265,1514,54,6026,48.82142857142858,129.8252539410055,490,0,105.15384615384617,177.82240492217986,491,0,83.35714285714286,171.98819599158415,490,0,7.0,0.0,0.0,0.0,0.0,659.3048348841452,621.6557528775471,1514.0,54.0,409.44827586206895,18,20,172.16.24.174,194.165.16.90,51658,443,6,29,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b71811,c2_beaconing,mta_icedid,IcedID_2023-09-28.pcap,10.10.20.147:50981-141.98.80.158:443-6-1695923235214,423.5294117647059,573.0636558482739,1514,54,105.94444444444446,156.4433640132775,705,54,1907,30.06060606060606,61.55431513810556,166,0,58.352941176470594,76.69007528395589,166,0,56.0,76.04322079299001,166,0,7.0,0.0,0.0,0.0,0.0,578.3651506899056,565.6734747480343,1514.0,54.0,423.5294117647059,27,29,10.10.20.147,141.98.80.158,50981,443,6,34,umomrmwa.com,t12d190800_d83cc789557e_7af1ed941c26,f176ba63b4d68e576b5ba345bec2c7b71820,benign,benign,ctu_normal14_win_full_2017.pcap,10.0.2.15:49926-45.55.217.192:443-6-1088286,114.41666666666666,149.58394319112617,571,54,150.66666666666666,206.86581802382594,571,54,904,42.18181818181818,59.30736578506617,138,0,92.8,83.94760270549719,169,1,62.4,66.6243198839583,138,3,21.0,0.0,0.0,0.0,0.0,204.69444444444446,201.01362738645787,571.0,54.0,114.41666666666666,5,7,10.0.2.15,45.55.217.192,49926,443,6,12,anon-sms.com,t12d1712h2_67e6df579eba_88be6878e1da,c6227321ea7621862dc7b7351771a62c1831,c2_beaconing,mta_icedid,IcedID_2023-09-28.pcap,10.10.20.147:50899-157.245.106.203:443-6-1695916558500,168.45000000000007,291.42598139421085,1356,54,113.88888888888889,86.14151792899351,274,54,1025,3538.000000000001,14853.357974246464,64861,0,8402.75,22817.461382208396,64862,0,6686.599999999999,20463.17600091551,64914,0,29.5,0.0,0.0,0.0,0.0,404.82553310886647,513.4952565763425,1356.0,54.0,168.45000000000007,12,14,10.10.20.147,157.245.106.203,50899,443,6,20,feekstokandy.com,t12d190800_d83cc789557e_7af1ed941c26,ec74a5c51106f0419184d0dd08fb05bc1841,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:51343-194.165.16.90:443-6-1668459571739,466.32000000000005,609.890203233336,1514,54,493.1666666666667,647.6681014971864,1514,54,5918,59.625,147.41299939728637,540,0,130.0,199.91098018868297,540,0,99.33333333333334,192.96741756686347,540,0,105.0,0.0,0.0,0.0,0.0,678.3361253561254,614.6092548983562,1514.0,54.0,466.32000000000005,15,17,172.16.24.174,194.165.16.90,51343,443,6,25,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b71850,exfil,mta_lumma,Lumma_2025-02-13.pcap,10.2.14.101:64077-23.217.116.178:443-6-1739488834743,416.75,500.9941563899145,1514,54,297.75,358.51987392611863,868,54,2382,21.526315789473685,27.33204960614031,79,0,58.42857142857142,42.41798809804297,131,6,28.0,29.192464781172557,79,0,49.0,0.0,0.0,0.0,0.0,585.3981481481482,554.8552736138176,1514.0,54.0,416.75,16,18,10.2.14.101,23.217.116.178,64077,443,6,20,cdn-dynmedia-1.microsoft.com,t12d180700_4b22cbed5bed_2dae41c691ec,4b7d5f58af981be54baeda917533e5d81860,c2_beaconing,mta_qakbot,Qakbot_2022-06-27_1.pcap,10.6.27.101:49782-64.233.180.108:993-6-1656361086481,56.28571428571429,4.535573676110729,66,54,57.0,6.0,66,54,228,63.99999999999999,120.475723695689,307,0,128.0,155.19987113396712,307,31,176.0,186.67619023324855,308,44,31.0,0.0,0.0,0.0,0.0,57.84656084656085,4.556289846124098,66.0,54.0,56.28571428571429,0,2,10.6.27.101,64.233.180.108,49782,993,6,7,,,1871,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:52192-213.91.235.146:443-6-1668462243647,172.4736842105263,277.73215882713987,1061,54,154.0,227.6422632113817,782,54,1694,6056.277777777778,19232.123176068657,77996,0,10901.300000000001,25297.685256648372,77996,0,15526.285714285714,29610.880515526078,77998,1,139.0,0.0,0.0,0.0,0.0,398.92763157894734,412.58566655712133,1061.0,54.0,172.4736842105263,12,14,172.16.24.174,213.91.235.146,52192,443,6,19,,t12i190600_d83cc789557e_2dae41c691ec,fd4bc6cea4877646ccd62f0792ec0b621880,benign,benign,ctu_normal20_win_2017_https.pcap,10.0.2.15:65511-172.217.22.228:443-6-10923673,291.87254901960785,466.5547344407531,1474,54,155.54761904761907,243.61937549411797,1315,54,6533,4468.11881188119,15152.186088671911,66304,0,11006.829268292682,22365.646814816737,66305,2,7648.203389830511,19309.648939450348,66305,0,7.0,0.0,0.0,0.0,0.0,584.4133520074696,602.6663203005206,1474.0,54.0,291.87254901960785,88,90,10.0.2.15,172.217.22.228,65511,443,6,102,www.google.com,t12d1510h2_073e58a039a6_60bf0a45ed8c,67619a80665d7ab92d1041b1d11f91641891,c2_beaconing,mta_bumblebee,BumbleBee_2022-06-14.pcap,10.6.14.101:49233-193.233.203.156:443-6-1655231124169,162.88235294117646,290.8590471244064,1270,60,89.44444444444444,52.48359532061212,207,60,805,51.31249999999999,89.54977666080468,213,0,102.625,109.56529364460525,213,0,86.85714285714285,105.04035505688368,208,0,6.0,0.0,0.0,0.0,0.0,380.5363108206245,479.69657827340194,1270.0,60.0,162.88235294117646,9,12,10.6.14.101,193.233.203.156,49233,443,6,17,,t12i210600_76e208dd3e22_2dae41c691ec,76c691f46143bf86e2d1bb73c61877671901,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:51233-194.165.16.90:443-6-1668459396674,466.32,610.5326035520134,1514,54,493.1666666666667,647.6681014971864,1514,54,5918,57.16666666666666,137.1846317500827,454,0,124.72727272727272,184.91678718228417,455,0,94.83333333333333,178.0213640566942,454,0,117.5,0.0,0.0,0.0,0.0,678.3361253561253,614.6092548983562,1514.0,54.0,466.32,14,16,172.16.24.174,194.165.16.90,51233,443,6,25,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b71911,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:50034-194.165.16.90:443-6-1668457591083,466.32,610.5326035520134,1514,54,493.1666666666667,647.6681014971864,1514,54,5918,70.0,177.92841745806217,643,0,152.63636363636365,242.8786827728085,643,0,122.08333333333334,237.53907174623,643,0,1.0,0.0,0.0,0.0,0.0,678.3361253561253,614.6092548983562,1514.0,54.0,466.32,14,16,172.16.24.174,194.165.16.90,50034,443,6,25,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b71921,c2_beaconing,mta_pikabot,Pikabot_2023-11-02.pcap,10.11.2.101:52773-15.235.202.109:2226-6-1698937452963,233.0,350.39936399159495,1430,60,152.5,210.46161386127142,749,60,1830,4935.428571428571,16939.177561414926,74956,0,9391.181818181818,22981.49204824692,74956,0,11480.333333333334,25201.82485952158,74956,0,331.0,0.0,0.0,0.0,0.0,500.4555555555556,536.8302589399933,1430.0,60.0,233.0,15,16,10.11.2.101,15.235.202.109,52773,2226,6,22,,t12i190700_d83cc789557e_7af1ed941c26,ec74a5c51106f0419184d0dd08fb05bc1931,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:50347-194.165.16.90:443-6-1668458053699,422.1428571428571,581.95645212448,1514,54,430.4285714285715,616.7435215943265,1514,54,6026,53.44444444444444,140.05365272289632,528,0,111.0,189.0890442798489,530,0,93.15384615384615,187.28803403396518,528,0,1.0,0.0,0.0,0.0,0.0,663.3809523809524,619.9837354314599,1514.0,54.0,422.1428571428571,18,20,172.16.24.174,194.165.16.90,50347,443,6,28,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b71940,benign,benign,ctu_normal14_win_full_2017.pcap,10.0.2.15:50882-172.217.23.193:443-6-2355369,120.39999999999999,145.71684871695516,589,54,149.375,192.81889170929284,589,54,1195,344.92857142857144,1163.961238072928,4380,0,689.8571428571429,1631.2437410936304,4380,0,801.0,1899.8708377150274,4679,6,23.0,0.0,0.0,0.0,0.0,212.34007936507936,207.36952063632515,589.0,54.0,120.39999999999999,7,9,10.0.2.15,172.217.23.193,50882,443,6,15,ci6.googleusercontent.com,t12d1711h2_67e6df579eba_de5ccbe16bdd,f75d3cb3274309c4b0eeaad4f9d4f7c21950,c2_beaconing,mta_emotet,Emotet_2022-04-25.pcap,10.4.25.101:49978-74.208.5.13:465-6-1650907770084,63.0,3.1622776601683795,66,60,66.0,0.0,66,66,330,263.1111111111111,235.6790425793331,517,61,574.5,4.725815626252614,578,568,576.0,8.04155872120988,582,565,70.0,0.0,0.0,0.0,0.0,63.0,2.8284271247461903,66.0,60.0,63.0,0,9,10.4.25.101,74.208.5.13,49978,465,6,10,,,1960,benign,benign,ctu_normal21_kali_2017.pcap,192.168.1.191:49472-54.192.93.241:443-6-1493726510268,315.4222222222223,506.3541470376462,1514,66,104.54166666666667,80.31512888326975,414,66,2509,4124.52272727273,14916.474757311726,59049,0,7887.739130434782,20107.029248538456,59049,0,9058.6,21378.875516684566,59069,0,50.0,0.0,0.0,0.0,0.0,512.9324955908289,559.8602194740486,1514.0,66.0,315.4222222222223,32,33,192.168.1.191,54.192.93.241,49472,443,6,45,b-code.liadm.com,t12d1109h2_43e74fd21232_fed6c16fddd0,76cc3e2d3028143b23ec18e27dbd7ca91971,c2_beaconing,mta_qakbot,Qakbot_2022-09-29.pcap,10.9.29.201:50250-85.86.242.245:443-6-1664426341817,62.57142857142857,5.855400437691199,66,54,66.0,0.0,66,66,330,2423.5,1990.891533961607,5639,505,2225.5,1268.7667240277071,4008,1008,6144.0,0.0,6144,6144,1690.5,0.0,0.0,0.0,0.0,60.285714285714285,5.714285714285714,66.0,54.0,62.57142857142857,0,3,10.9.29.201,85.86.242.245,50250,443,6,7,,,1980,benign,benign,ctu_normal20_win_2017_https.pcap,10.0.2.15:51271-54.228.252.200:443-6-5587554,203.20833333333331,395.8924951973997,1474,54,86.54545454545455,64.07084147467339,243,54,952,318.8695652173913,1235.6331576949758,5955,0,733.4000000000001,1843.1116925219458,5955,1,607.1666666666666,1763.7929085474927,6182,0,8.0,0.0,0.0,0.0,0.0,438.29742942242945,560.173441104777,1474.0,54.0,203.20833333333331,16,18,10.0.2.15,54.228.252.200,51271,443,6,24,a.centrum.cz,t12d1509h2_073e58a039a6_e70312a1ce2c,303951d4c50efb2e991652225a6f02b11991,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:52213-104.18.32.150:443-6-1668462813001,352.4285714285714,533.5012250621896,1514,54,142.22222222222223,158.065475181788,420,54,1280,5483.549999999999,24483.416528174846,109502,0,13708.875000000002,38706.287220692124,109502,1,9968.727272727272,33011.80164150666,109503,0,1.0,0.0,0.0,0.0,0.0,512.7482363315696,558.5657506952008,1514.0,54.0,352.4285714285714,12,14,172.16.24.174,104.18.32.150,52213,443,6,21,www.broadcom.com,t12d190700_d83cc789557e_2dae41c691ec,1249fb68f48c0444718e4d3b48b271882000,benign,benign,ctu_normal20_win_2017_https.pcap,10.0.2.15:65231-52.71.6.111:443-6-10068860,166.60714285714286,290.86152147598466,1474,54,136.03703703703704,170.79868525018242,616,54,3673,2334.6909090909085,4175.465340546011,10764,0,4938.769230769231,4931.586838393438,10766,106,4581.214285714285,5004.721980343074,10766,0,133.0,0.0,0.0,0.0,0.0,469.301460601269,561.3156339749642,1474.0,54.0,166.60714285714286,48,50,10.0.2.15,52.71.6.111,65231,443,6,56,pingback.issuu.com,t12d1509h2_073e58a039a6_e70312a1ce2c,303951d4c50efb2e991652225a6f02b12010,exfil,mta_lumma,Lumma_2025-02-13.pcap,10.2.14.101:64136-23.46.239.91:443-6-1739488894838,819.0909090909092,675.8308480879464,1514,54,185.3,313.14677070025806,1059,54,1853,8.156250000000002,18.00736296540229,57,0,29.0,27.663152387246107,64,0,9.545454545454547,19.01309642056852,57,0,19.0,0.0,0.0,0.0,0.0,705.3381203337725,590.725882400826,1514.0,54.0,819.0909090909092,22,24,10.2.14.101,23.46.239.91,64136,443,6,33,assets.msn.com,t12d180700_4b22cbed5bed_2dae41c691ec,4b7d5f58af981be54baeda917533e5d82020,benign,benign,ctu_normal20_win_2017_https.pcap,10.0.2.15:51508-54.154.139.163:443-6-5991009,258.32,463.912412710273,1474,54,87.18181818181819,65.79182043661382,250,54,959,301.24999999999994,1183.2048317654233,5818,0,723.0,1809.5726935752907,5818,0,552.6153846153845,1668.2791801964452,6075,0,6.5,0.0,0.0,0.0,0.0,455.3652813852814,555.6770298722249,1474.0,54.0,250.0,16,18,10.0.2.15,54.154.139.163,51508,443,6,25,insights.hotjar.com,t12d1509h2_073e58a039a6_e70312a1ce2c,303951d4c50efb2e991652225a6f02b12030,benign,benign,ctu_normal14_win_full_2017.pcap,10.0.2.15:51804-23.2.236.181:443-6-3362257,344.61904761904765,484.1223477789965,1474,54,178.44444444444446,251.9578888976842,818,54,1606,444.15000000000003,1900.0570704725246,8516,0,1110.375,2992.486254294722,8516,3,804.0,2557.882757281889,8516,0,39.0,0.0,0.0,0.0,0.0,546.7014991181658,548.136388947181,1474.0,54.0,344.61904761904765,16,18,10.0.2.15,23.2.236.181,51804,443,6,21,dsum-sec.casalemedia.com,t12d1711h2_67e6df579eba_de5ccbe16bdd,2b33c1374db4ddf06942f92373c0b54b2040,benign,benign,ctu_normal21_kali_2017.pcap,192.168.1.191:34638-37.252.172.42:443-6-1493727314538,519.1666666666667,620.214094477468,1514,66,411.1875,558.4401154107752,1514,66,6579,49.86206896551724,203.03144093921077,1099,0,94.60000000000001,279.8529716016711,1099,0,110.0,317.126946190323,1160,0,18.5,0.0,0.0,0.0,0.0,701.4361772486773,606.7260806044936,1514.0,66.0,519.1666666666667,22,23,192.168.1.191,37.252.172.42,34638,443,6,30,secure.adnxs.com,t12d1110h2_43e74fd21232_205f67e4d9f4,30553045c697c20ead22a41ae6655ff12051,exfil,mta_lumma,Lumma_2024-03-07_0.pcap,10.3.7.135:49827-104.21.41.147:443-6-1709846485351,145.42105263157896,197.4330592010798,778,54,140.0,165.96585994314214,480,54,1400,6113.38888888889,25466.142337341786,108141,0,12226.777777777777,35972.55048914997,108141,0,13751.0,38144.712249162774,108142,0,17.0,0.0,0.0,0.0,0.0,292.76283300844705,287.13295696542474,778.0,54.0,145.42105263157896,12,14,10.3.7.135,104.21.41.147,49827,443,6,19,popfealt.one,t12d190800_d83cc789557e_7af1ed941c26,1249fb68f48c0444718e4d3b48b271882061,exfil,mta_stealc,StealC_2025-08-20.pcap,10.8.20.101:53211-45.61.150.28:443-6-1755712229210,1421.9438283015,331.03285692576804,1514,54,54.471485943775136,8.813093050944216,253,54,67817,0.3442987710950604,29.346356649539242,4623,0,8.085209003215432,142.13020490768417,4624,0,0.3573369565217398,29.998905102996208,4624,0,1.0,0.0,0.0,0.0,0.0,711.3589129398267,693.3410977674778,1514.0,54.0,253.0,4389,4391,10.8.20.101,45.61.150.28,53211,443,6,29214,cf-2-up.com,t12d180700_4b22cbed5bed_2dae41c691ec,fd4bc6cea4877646ccd62f0792ec0b622070,benign,benign,ctu_normal21_kali_2017.pcap,192.168.1.191:40640-23.64.15.41:443-6-1493726744357,1018.8391061452509,679.2590159675831,1514,54,84.67669172932334,89.7485417023212,583,54,22524,321.3881431767334,1716.2360448394552,10026,0,1084.2301886792447,3042.6859140917695,10656,0,457.4777070063696,2048.668287520774,10644,0,9.5,0.0,0.0,0.0,0.0,700.2673444379275,629.4079113152671,1514.0,54.0,583.0,465,470,192.168.1.191,23.64.15.41,40640,443,6,895,crtvimg-a.akamaihd.net,t12d1110h2_43e74fd21232_205f67e4d9f4,73c5401bc2544038f608637524b63c6a2081,c2_beaconing,mta_emotet,Emotet_2022-04-25.pcap,10.4.25.101:49833-49.231.16.102:8080-6-1650905679038,343.9130434782608,496.86443304198616,1434,60,417.6,553.6067196123977,1434,60,6264,4366.090909090909,19443.079042631307,91368,0,6861.0,24336.620724901233,91368,0,629.7142857142857,1089.7011385827636,3016,3,4.5,0.0,0.0,0.0,0.0,567.4736714975845,553.0458784854757,1434.0,60.0,343.9130434782608,13,14,10.4.25.101,49.231.16.102,49833,8080,6,23,,t12i190600_d83cc789557e_2dae41c691ec,fd4bc6cea4877646ccd62f0792ec0b622091,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:50274-194.165.16.90:443-6-1668457943150,466.32,610.5326035520134,1514,54,493.1666666666667,647.6681014971864,1514,54,5918,57.875000000000014,139.04685244158907,459,0,126.27272727272728,187.23466073838512,459,0,96.5,180.8975099079838,459,0,231.0,0.0,0.0,0.0,0.0,678.3361253561253,614.6092548983562,1514.0,54.0,466.32,14,16,172.16.24.174,194.165.16.90,50274,443,6,25,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b72101,c2_beaconing,mta_pikabot,Pikabot_2023-12-15.pcap,10.12.15.101:51167-57.128.109.221:13724-6-1702659490287,433.32142857142856,569.5186436366553,1514,54,606.2142857142858,655.4891513004067,1514,54,8487,130.25925925925924,399.122941594595,1945,0,270.53846153846155,551.8507671742146,1946,0,228.84615384615384,549.6451652587401,1945,0,5.0,0.0,0.0,0.0,0.0,667.1071428571429,623.8887722289757,1514.0,54.0,433.32142857142856,15,17,10.12.15.101,57.128.109.221,51167,13724,6,28,,t12i180700_4b22cbed5bed_7af1ed941c26,ec74a5c51106f0419184d0dd08fb05bc2111,c2_beaconing,mta_gozi,Gozi_2023-07-12.pcap,10.7.12.121:50555-170.130.55.162:443-6-1689205316540,378.3636363636364,558.7570002079485,1514,54,153.2,200.96201962891726,636,54,1532,543.5238095238096,2344.0806432170293,10766,0,1268.2222222222222,3564.135581658538,10766,0,1032.7272727272727,3230.8667905349826,10767,0,17.5,0.0,0.0,0.0,0.0,547.0626262626263,556.888541395858,1514.0,54.0,378.3636363636364,13,15,10.7.12.121,170.130.55.162,50555,443,6,22,iamupdate.com,t12d190700_d83cc789557e_2dae41c691ec,4ce0442e9d20d092d9d74e9ce54b363a2120,benign,benign,ctu_normal14_win_full_2017.pcap,10.0.2.15:52813-35.156.23.61:443-6-3855912,294.8636363636364,488.47569471674257,1514,54,240.6,452.7859931088367,1514,54,2406,29.476190476190478,51.07506147585046,210,0,68.77777777777777,97.58173212463717,291,0,53.18181818181818,61.881852237660404,210,0,35.0,0.0,0.0,0.0,0.0,615.5052188552188,633.9195118658905,1514.0,54.0,294.8636363636364,15,17,10.0.2.15,35.156.23.61,52813,443,6,22,d.agkn.com,t12d1711h2_67e6df579eba_de5ccbe16bdd,303951d4c50efb2e991652225a6f02b12130,c2_beaconing,mta_qakbot,Qakbot_2022-12-09.pcap,10.12.9.101:49827-20.112.52.29:443-6-1670630680538,427.9545454545455,558.3297777233815,1514,54,115.4,112.83143769948751,392,54,1154,17.428571428571427,35.85885027238245,101,0,40.666666666666664,46.877499933336885,102,0,25.636363636363637,42.20491139019896,101,0,5.0,0.0,0.0,0.0,0.0,534.863468013468,561.9878799781583,1514.0,54.0,392.0,18,20,10.12.9.101,20.112.52.29,49827,443,6,22,microsoft.com,t12d190700_d83cc789557e_2dae41c691ec,ec74a5c51106f0419184d0dd08fb05bc2140,c2_beaconing,mta_pikabot,Pikabot_2024-02-08.pcap,10.2.8.101:53281-13.107.219.66:443-6-1707417094823,474.73913043478245,566.2636084972265,1430,60,149.55555555555554,107.50710570831018,292,60,1346,2989.818181818182,13959.623431393855,65490,0,35.75,32.47306576225903,99,0,5057.2307692307695,18171.02557256949,65534,0,32.0,0.0,0.0,0.0,0.0,515.5644889195613,527.9846724533174,1430.0,60.0,292.0,16,17,10.2.8.101,13.107.219.66,53281,443,6,23,otelrules.azureedge.net,t12d190800_d83cc789557e_7af1ed941c26,71d9ce75f347e6cf54268d7114ae69252150,exfil,mta_xloader,XLoader_2025-01-30.pcap,10.1.30.242:49229-20.96.153.111:443-6-1738202857299,367.5652173913044,526.9598765204527,1430,54,121.50000000000001,135.99030714122108,527,60,1458,26.499999999999996,45.017192482957206,145,0,53.0,63.21392251711643,185,0,35.5,45.52959965170399,111,0,4.0,0.0,0.0,0.0,0.0,520.0072463768116,526.79909858992,1430.0,54.0,367.5652173913044,14,15,10.1.30.242,20.96.153.111,49229,443,6,23,fd.api.iris.microsoft.com,t13d2012h2_2b729b4bf6f3_9e7b989ebec8,67bfe5d15ae567fb35fd7837f0116eec2161,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:51143-194.165.16.90:443-6-1668459259327,466.32,610.5326035520134,1514,54,493.1666666666667,647.6681014971864,1514,54,5918,65.16666666666667,159.77339024970354,574,0,142.18181818181822,216.41525740197625,575,0,108.41666666666666,208.6399501243201,574,0,121.0,0.0,0.0,0.0,0.0,678.3361253561253,614.6092548983562,1514.0,54.0,466.32,14,16,172.16.24.174,194.165.16.90,51143,443,6,25,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b72171,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:51380-194.165.16.90:443-6-1668459625851,435.77777777777777,589.6705294767014,1514,54,459.3846153846154,631.944425096271,1514,54,5972,62.576923076923094,161.82562790285675,611,0,135.5,220.9843680197559,611,0,108.76923076923079,215.5103067319341,611,0,1.0,0.0,0.0,0.0,0.0,668.1132817799485,618.2566902665315,1514.0,54.0,435.77777777777777,16,18,172.16.24.174,194.165.16.90,51380,443,6,27,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b72181,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:50823-78.31.67.7:443-6-1668460584928,60.5,6.527253788294639,67,54,60.5,6.55485329316494,67,54,3630,14686.554621848736,25803.569783812723,59971,0,29622.03389830509,30076.142145862752,59971,203,29620.983050847462,30126.414266697473,60018,161,184.0,0.0,0.0,0.0,0.0,60.5,5.307227776030219,67.0,54.0,60.5,119,119,172.16.24.174,78.31.67.7,50823,443,6,120,,,2190,benign,benign,ctu_normal14_win_full_2017.pcap,10.0.2.15:52015-31.13.90.36:443-6-3386979,273.89473684210526,447.32524765877287,1474,54,92.66666666666667,76.3740793725201,264,54,834,511.4444444444444,2082.942975193631,8857,0,1150.75,3114.086600777643,8857,0,1016.3333333333334,2969.2083540903627,8934,0,36.5,0.0,0.0,0.0,0.0,464.1734892787524,553.7003987956351,1474.0,54.0,264.0,11,13,10.0.2.15,31.13.90.36,52015,443,6,19,www.facebook.com,t12d1711h2_67e6df579eba_de5ccbe16bdd,2d1eb5817ece335c24904f516ad5da122200,c2_beaconing,mta_qakbot,Qakbot_2022-09-29.pcap,10.9.29.201:49985-186.154.92.181:443-6-1664414260505,64.0,4.898979485566356,66,54,66.0,0.0,66,66,330,15000.8,25293.300747431127,59992,996,3753.0,3095.381182773241,8002,996,0.0,0.0,0,0,4001.0,0.0,0.0,0.0,0.0,60.44444444444444,5.7948465824023545,66.0,54.0,64.0,0,1,10.9.29.201,186.154.92.181,49985,443,6,6,,,2210,benign,benign,ctu_normal14_win_full_2017.pcap,10.0.2.15:51421-90.182.114.18:443-6-3001834,1154.6098901098917,580.6066566064534,1474,54,60.870503597122294,38.30102631015543,419,54,8461,5.591471801925718,77.85431463531708,1821,0,29.45652173913044,179.99055610121218,1821,0,6.880952380952382,86.65683231670992,1821,0,1.0,0.0,0.0,0.0,0.0,684.1339279180214,636.8262400625779,1474.0,54.0,419.0,283,285,10.0.2.15,90.182.114.18,51421,443,6,728,video.fprg1-1.fna.fbcdn.net,t12d1711h2_67e6df579eba_de5ccbe16bdd,2d1eb5817ece335c24904f516ad5da122221,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:51105-104.93.13.244:443-6-1668459207609,1057.2064777327935,618.572972440836,1514,54,85.3389830508475,160.7512117366773,1228,54,5035,4.617886178861788,42.77048769366955,659,0,19.58620689655172,87.16611173204159,660,0,5.898395721925129,48.9708641443753,659,0,1.0,0.0,0.0,0.0,0.0,769.1947675102392,646.0784346469534,1514.0,54.0,1057.2064777327935,162,164,172.16.24.174,104.93.13.244,51105,443,6,247,www.xfinity.com,t12d190700_d83cc789557e_2dae41c691ec,d227a8dd2bb7d7ee4f648c1af087578a2231,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:51837-194.165.16.90:443-6-1668460181450,466.32,610.5326035520134,1514,54,493.1666666666667,647.6681014971864,1514,54,5918,73.79166666666669,183.99361500421378,625,0,161.0,250.04879523804948,625,0,129.08333333333331,244.9654737576978,625,0,1.0,0.0,0.0,0.0,0.0,678.3361253561253,614.6092548983562,1514.0,54.0,466.32,14,16,172.16.24.174,194.165.16.90,51837,443,6,25,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b72240,exfil,mta_koistealer,KoiStealer_2025-07-08.pcap,10.7.8.101:53361-52.165.164.15:443-6-1752007023769,1274.0562287930193,498.04440526974537,1514,54,104.35177865612651,257.5532591839371,1514,54,26401,0.6551891367604268,8.834338177891816,367,0,5.361111111111111,25.225369738455544,369,0,0.7092316196793826,9.302174543325158,367,0,1.0,0.0,0.0,0.0,0.0,835.5515956711449,691.4312544222976,1514.0,54.0,1274.0562287930193,739,741,10.7.8.101,52.165.164.15,53361,443,6,2063,fe3cr.delivery.mp.microsoft.com,t12d180700_4b22cbed5bed_2dae41c691ec,8afb62c9ee65d74f27da7afd3aba27c02250,benign,benign,ctu_normal14_win_full_2017.pcap,10.0.2.15:51805-23.2.236.181:443-6-3362257,304.00000000000006,455.4196344891828,1474,54,163.7,233.87653437943132,795,54,1637,386.34782608695656,1771.6921702838388,8513,0,987.3333333333334,2822.310312492232,8513,0,680.4615384615385,2354.113832400089,8515,0,36.5,0.0,0.0,0.0,0.0,530.7682539682539,551.0891664080556,1474.0,54.0,304.00000000000006,16,18,10.0.2.15,23.2.236.181,51805,443,6,24,dsum-sec.casalemedia.com,t12d1711h2_67e6df579eba_de5ccbe16bdd,2b33c1374db4ddf06942f92373c0b54b2261,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:51156-194.165.16.90:443-6-1668459278547,435.77777777777777,589.6705294767014,1514,54,459.3846153846154,631.944425096271,1514,54,5972,61.11538461538461,156.50107397026434,611,0,132.41666666666666,213.17873778222875,611,0,104.61538461538463,207.2267431508855,611,0,2.0,0.0,0.0,0.0,0.0,668.1132817799485,618.2566902665315,1514.0,54.0,435.77777777777777,16,18,172.16.24.174,194.165.16.90,51156,443,6,27,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b72271,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:50418-194.165.16.90:443-6-1668458180214,409.448275862069,574.972147537035,1514,54,405.3333333333334,602.2040075146185,1514,54,6080,55.35714285714286,149.1114955167377,562,0,110.64285714285712,199.2777756503014,562,0,100.69230769230766,203.35616727611378,562,0,1.5,0.0,0.0,0.0,0.0,648.5154168947272,607.5391640654519,1514.0,54.0,409.448275862069,19,21,172.16.24.174,194.165.16.90,50418,443,6,29,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b72281,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:50774-194.165.16.90:443-6-1668458705300,435.77777777777777,589.6705294767014,1514,54,459.3846153846154,631.944425096271,1514,54,5972,65.49999999999999,173.04016874702822,629,0,141.83333333333331,237.62033634018835,629,0,113.69230769230771,231.20387273839242,629,0,1.0,0.0,0.0,0.0,0.0,668.1132817799485,618.2566902665315,1514.0,54.0,435.77777777777777,16,18,172.16.24.174,194.165.16.90,50774,443,6,27,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b72291,c2_beaconing,mta_icedid,IcedID_2023-05-10.pcap,172.16.10.73:50303-81.224.201.143:2222-6-1683738129933,185.52631578947373,238.29798535564962,771,54,185.1,258.3634176031033,771,54,1851,5764.222222222222,18291.093112272705,73675,0,11528.444444444445,25222.946636501012,73675,1,12947.0,26578.286438369196,73676,1,84.5,0.0,0.0,0.0,0.0,332.73625730994155,306.09426135184185,771.0,54.0,185.52631578947373,14,16,172.16.10.73,81.224.201.143,50303,2222,6,19,,t13i201100_2b729b4bf6f3_2e4f304f1f45,2253c82f03b621c5144709b393fde2c92301,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:50541-194.165.16.90:443-6-1668458361200,466.32,610.5326035520134,1514,54,493.1666666666667,647.6681014971864,1514,54,5918,66.91666666666666,164.04345041234777,573,0,146.0,222.7442479616477,574,0,116.16666666666666,217.32415392401248,573,0,1.0,0.0,0.0,0.0,0.0,678.3361253561253,614.6092548983562,1514.0,54.0,466.32,14,16,172.16.24.174,194.165.16.90,50541,443,6,25,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b72311,c2_beaconing,mta_icedid,IcedID_2023-09-28.pcap,10.10.20.147:50861-172.86.75.88:443-6-1695916166133,327.73892240482667,517.9784891766133,1514,54,630.5803991926447,631.1129359258739,1514,54,2811758,19.572453968584202,767.8898576066056,66597,0,42.20502467474197,1128.6350846380094,66641,0,36.47031431897546,1049.8009181638315,66641,0,11.0,0.0,0.0,0.0,0.0,625.7894191795444,631.4643116736321,1514.0,54.0,327.73892240482667,7546,7548,10.10.20.147,172.86.75.88,50861,443,6,9614,,,2321,c2_beaconing,mta_qakbot,Qakbot_2022-09-29.pcap,10.9.29.201:50486-193.3.19.137:443-6-1664441597305,179.76190476190476,251.3986684057624,958,54,156.41666666666666,221.00656441642525,694,54,1877,1894.5499999999995,6797.384880076656,29911,0,3444.636363636364,9050.692407465047,29911,0,4718.375,10498.611050141006,29911,1,136.0,0.0,0.0,0.0,0.0,368.7852733686067,365.6263178573792,958.0,54.0,179.76190476190476,14,16,10.9.29.201,193.3.19.137,50486,443,6,21,,t13i201000_2b729b4bf6f3_533b6d20482b,2253c82f03b621c5144709b393fde2c92331,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:50795-194.165.16.90:443-6-1668458737457,435.77777777777777,589.6705294767014,1514,54,459.3846153846154,631.944425096271,1514,54,5972,54.88461538461538,142.42228110041682,510,0,118.91666666666666,194.40560145939182,510,0,92.61538461538461,188.01264960171272,510,0,208.0,0.0,0.0,0.0,0.0,668.1132817799485,618.2566902665315,1514.0,54.0,435.77777777777777,16,18,172.16.24.174,194.165.16.90,50795,443,6,27,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b72340,benign,benign,ctu_normal14_win_full_2017.pcap,10.0.2.15:52118-151.101.1.164:443-6-3408177,342.04347826086956,538.7300283799492,1474,54,89.2,74.10623005748796,268,54,892,365.9090909090909,1605.7675485304278,7552,0,894.4444444444445,2497.8644434351872,7552,0,666.9166666666666,2237.344995477425,7771,0,33.0,0.0,0.0,0.0,0.0,482.86465997770347,551.7974047533111,1474.0,54.0,268.0,14,16,10.0.2.15,151.101.1.164,52118,443,6,23,regilite.nytimes.com,t12d1711h2_67e6df579eba_de5ccbe16bdd,860fcf58fd757e26aa8911e5eaff6b532351,c2_beaconing,mta_pikabot,Pikabot_2023-11-02.pcap,10.11.2.101:52884-15.235.47.80:23399-6-1698948212093,298.99999999999994,430.16909994263256,1430,60,152.41666666666666,210.20399543531445,748,60,1829,5644.772727272727,18482.472396794437,74956,0,11283.0,25445.194894124903,74956,0,12409.7,26544.429062108935,74956,0,88.0,0.0,0.0,0.0,0.0,522.0361952861953,530.2658967491693,1430.0,60.0,298.99999999999994,15,16,10.11.2.101,15.235.47.80,52884,23399,6,23,,t12i190700_d83cc789557e_7af1ed941c26,ec74a5c51106f0419184d0dd08fb05bc2361,c2_beaconing,mta_gozi,Gozi_2023-07-12.pcap,10.7.12.121:50584-170.130.55.162:443-6-1689205458745,316.7407407407407,497.33277766289615,1514,54,130.3076923076923,179.39267200538256,636,54,1694,423.61538461538464,2054.585585015588,10492,0,917.8333333333333,3016.4770792593417,10492,0,844.0,2900.2399038700228,10492,0,33.0,0.0,0.0,0.0,0.0,529.2117306561751,561.1808293580378,1514.0,54.0,316.7407407407407,19,21,10.7.12.121,170.130.55.162,50584,443,6,27,iamupdate.com,t12d190700_d83cc789557e_2dae41c691ec,4ce0442e9d20d092d9d74e9ce54b363a2371,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:50197-194.165.16.90:443-6-1668457825991,450.4615384615385,596.2930307001236,1514,54,493.1666666666667,647.6681014971864,1514,54,5918,57.28,144.6131390987693,531,0,130.18181818181816,199.86886610066023,532,0,93.15384615384615,187.59124275662327,531,0,111.0,0.0,0.0,0.0,0.0,673.498371998372,616.4722377887126,1514.0,54.0,450.4615384615385,15,17,172.16.24.174,194.165.16.90,50197,443,6,26,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b72380,benign,benign,ctu_normal21_kali_2017.pcap,192.168.1.191:39328-173.241.240.143:443-6-1493727305121,238.7391304347826,410.9107641891146,1514,54,122.07142857142858,160.736508842034,645,54,1709,48.72727272727273,150.16219225452184,713,0,82.46153846153848,191.2448759159381,713,0,126.75,294.06352569276106,851,0,41.0,0.0,0.0,0.0,0.0,512.8925312476038,566.6785081740636,1514.0,54.0,238.7391304347826,16,18,192.168.1.191,173.241.240.143,39328,443,6,23,r.openx.net,t12d1109h2_43e74fd21232_fed6c16fddd0,699a80bdb17efe157c861f92c5bf5d1d2391,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:50339-194.165.16.90:443-6-1668458040792,422.14285714285717,585.2161179956554,1514,54,430.42857142857144,616.7435215943265,1514,54,6026,54.29629629629629,138.9955214593441,485,0,112.76923076923076,186.74767015331759,486,0,95.53846153846155,185.53508894753367,485,0,1.0,0.0,0.0,0.0,0.0,663.3809523809524,619.9837354314599,1514.0,54.0,422.14285714285717,18,20,172.16.24.174,194.165.16.90,50339,443,6,28,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b72400,benign,benign,ctu_normal14_win_full_2017.pcap,10.0.2.15:51594-40.127.129.109:443-6-3266672,367.71999999999997,510.7352151555638,1474,54,235.1818181818182,313.4389312710909,987,54,2587,399.00000000000006,1779.3581646933455,8746,0,957.6000000000001,2739.813545967438,8746,0,732.5384615384617,2468.8663935561135,8945,0,54.0,0.0,0.0,0.0,0.0,574.6398845598845,554.7319349545363,1474.0,54.0,367.71999999999997,17,19,10.0.2.15,40.127.129.109,51594,443,6,25,browser.pipe.aria.microsoft.com,t12d1710h2_67e6df579eba_4a7a952b215a,4fd467dd264720762ffe286277c00f572411,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:51396-194.165.16.90:443-6-1668459652014,466.32,610.5326035520134,1514,54,493.1666666666667,647.6681014971864,1514,54,5918,66.0,164.9532213004381,583,0,143.99999999999997,224.84794862306393,584,0,114.33333333333333,219.30814076559176,583,0,1.0,0.0,0.0,0.0,0.0,678.3361253561253,614.6092548983562,1514.0,54.0,466.32,14,16,172.16.24.174,194.165.16.90,51396,443,6,25,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b72421,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:52097-194.165.16.90:443-6-1668460594617,435.7777777777777,592.4256093081244,1514,54,459.3846153846154,631.944425096271,1514,54,5972,65.84615384615384,171.43154722691906,655,0,142.66666666666669,234.7498991512353,656,0,115.30769230769229,228.98995051289353,655,0,2.5,0.0,0.0,0.0,0.0,668.1132817799485,618.2566902665315,1514.0,54.0,435.7777777777777,16,18,172.16.24.174,194.165.16.90,52097,443,6,27,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b72431,exfil,mta_stealc,StealC_2025-08-20.pcap,10.8.20.101:53051-172.86.90.13:443-6-1755712086747,94.09090909090908,68.35708382524015,256,54,98.16666666666667,79.80580597091084,256,54,589,12320.0,32494.725455748114,103050,0,24640.0,44680.59168699537,103050,11,5026.5,10010.353123974533,20042,3,11.0,0.0,0.0,0.0,0.0,127.82861952861953,79.74266241595527,256.0,54.0,94.09090909090908,7,9,10.8.20.101,172.86.90.13,53051,443,6,11,woop-bicks.com,t12d180700_4b22cbed5bed_2dae41c691ec,f14f2862ee2df5d0f63a88b60c8eee562441,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:50553-194.165.16.90:443-6-1668458379295,435.7777777777777,592.4256093081244,1514,54,459.3846153846154,631.944425096271,1514,54,5972,57.26923076923077,145.66909286250333,528,0,124.08333333333334,197.9441878791886,528,0,98.61538461538463,192.8918256698723,528,0,106.0,0.0,0.0,0.0,0.0,668.1132817799485,618.2566902665315,1514.0,54.0,435.7777777777777,16,18,172.16.24.174,194.165.16.90,50553,443,6,27,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b72451,c2_beaconing,mta_pikabot,Pikabot_2023-10-03.pcap,10.1.2.147:49429-179.60.149.244:443-6-1696349639160,426.27272727272737,587.8448600995457,1450,60,335.05555555555554,529.120187861524,1450,60,6031,12.4375,26.13357437621994,80,0,23.41176470588235,38.32437022236864,113,0,23.999999999999993,33.9501897581646,82,0,39.0,0.0,0.0,0.0,0.0,645.2290684624018,586.4010677826687,1450.0,60.0,426.27272727272737,16,17,10.1.2.147,179.60.149.244,49429,443,6,33,zzerxc.com,t12d190700_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b72461,c2_beaconing,mta_icedid,IcedID_2023-09-28.pcap,10.10.20.147:51072-157.245.106.203:443-6-1695927787684,174.68421052631578,298.2053827354524,1356,54,114.33333333333334,87.07611612836209,278,54,1029,3739.2777777777774,15284.08988537371,64968,0,8413.250000000002,22856.065932889047,64968,0,7441.111111111111,21593.8063194313,65013,0,175.5,0.0,0.0,0.0,0.0,407.7797270955166,512.3988173339925,1356.0,54.0,174.68421052631578,14,16,10.10.20.147,157.245.106.203,51072,443,6,19,feekstokandy.com,t12d190800_d83cc789557e_7af1ed941c26,ec74a5c51106f0419184d0dd08fb05bc2470,benign,benign,ctu_normal20_win_2017_https.pcap,10.0.2.15:51409-62.67.193.85:443-6-5669412,78.11111111111111,66.45382691095458,255,54,96.6,88.70062006547643,255,54,483,55.87500000000001,114.34338946474219,336,1,110.75,150.2051375064559,336,31,136.66666666666669,177.04330920239073,341,29,16.5,0.0,0.0,0.0,0.0,106.63456790123456,80.47189021685722,255.0,54.0,58.0,2,4,10.0.2.15,62.67.193.85,51409,443,6,9,pixel.rubiconproject.com,t12d1509h2_073e58a039a6_e70312a1ce2c,2481,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:50799-194.165.16.90:443-6-1668458743207,435.77777777777777,589.6705294767014,1514,54,459.3846153846154,631.944425096271,1514,54,5972,51.53846153846154,131.76561942152614,458,0,111.66666666666669,179.7262227709556,460,0,86.38461538461539,172.9699099369302,458,0,3.0,0.0,0.0,0.0,0.0,668.1132817799485,618.2566902665315,1514.0,54.0,435.77777777777777,16,18,172.16.24.174,194.165.16.90,50799,443,6,27,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b72491,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:50298-194.165.16.90:443-6-1668457979227,466.32,610.5326035520134,1514,54,493.1666666666667,647.6681014971864,1514,54,5918,67.95833333333334,166.2830167716074,613,0,148.27272727272728,225.12755980070094,613,0,117.25,219.97732321144542,613,0,1.0,0.0,0.0,0.0,0.0,678.3361253561253,614.6092548983562,1514.0,54.0,466.32,14,16,172.16.24.174,194.165.16.90,50298,443,6,25,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b72500,benign,benign,ctu_normal14_win_full_2017.pcap,10.0.2.15:52833-31.13.64.35:443-6-3858304,239.5384615384616,396.74019380007144,1474,54,169.11764705882356,235.8131893981286,901,54,2875,82.28947368421053,404.6212047652242,2491,0,195.4375,621.0303233337322,2491,0,147.04761904761907,604.7340304787284,2783,0,6.0,0.0,0.0,0.0,0.0,523.73451711687,564.6640228312314,1474.0,54.0,239.5384615384616,26,28,10.0.2.15,31.13.64.35,52833,443,6,39,www.facebook.com,t12d1711h2_67e6df579eba_de5ccbe16bdd,2d1eb5817ece335c24904f516ad5da122511,c2_beaconing,mta_darkgate,DarkGate_2023-12-07.pcap,10.11.28.11:52221-46.101.78.238:443-6-1701962498642,109.22222222222223,96.89398559479554,320,60,113.20000000000002,115.6339050624859,320,60,566,70.125,80.01328014773547,168,0,140.25,100.91704514104642,240,0,131.0,48.75448697299562,164,75,153.0,0.0,0.0,0.0,0.0,153.0746913580247,102.02725459294896,320.0,60.0,109.22222222222223,4,5,10.11.28.11,46.101.78.238,52221,443,6,9,cdn-uk.widgetsfordeploy.com,,2521,c2_beaconing,mta_icedid,IcedID_2022-01-12.pcap,10.22.5.47:50057-104.168.44.45:443-6-1642007090075,211.25,357.77026957179334,1279,60,198.66666666666669,358.34425635219276,1279,60,2384,587.5263157894736,2298.8155009922693,10072,0,1014.818181818182,3005.8766713949462,10072,0,1563.5714285714287,3846.9121754615458,10284,0,210.5,0.0,0.0,0.0,0.0,504.6712962962963,525.1658433105772,1279.0,60.0,211.25,13,14,10.22.5.47,104.168.44.45,50057,443,6,20,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b72530,c2_beaconing,mta_emotet,Emotet_2022-11-07_1.pcap,192.168.1.133:60318-118.82.91.80:465-6-1667841889085,246.6296296296296,414.9354118551416,1514,54,118.91666666666667,102.39802762068251,380,54,1427,244.96153846153848,1030.949755546573,5288,0,578.9999999999999,1564.3348746352233,5289,0,443.92857142857144,1396.4931057851645,5288,0,33.0,0.0,0.0,0.0,0.0,476.03847736625517,567.122865428228,1514.0,54.0,246.6296296296296,22,24,192.168.1.133,118.82.91.80,60318,465,6,27,,t12i280600_d943125447b4_a8cc486ca5dc,e1691a31bfe345d2692da75636ddfb002540,benign,benign,ctu_normal21_kali_2017.pcap,192.168.1.191:51142-52.94.218.7:443-6-1493726907763,251.39506172839512,236.88370981413777,750,54,237.1489361702128,240.87891408100387,594,54,11146,1188.5125,2914.278723947734,10019,0,2066.9782608695646,3635.0463759177087,10112,17,2870.030303030303,4445.234558524784,15403,0,110.0,0.0,0.0,0.0,0.0,335.0702481325251,272.65429589920865,750.0,54.0,251.39506172839512,62,64,192.168.1.191,52.94.218.7,51142,443,6,81,,,30553045c697c20ead22a41ae6655ff12551,c2_beaconing,mta_pikabot,Pikabot_2023-10-03.pcap,10.1.2.147:49506-179.60.149.244:443-6-1696349818976,429.3125000000001,579.0872928513761,1450,60,352.94444444444446,543.5990598855894,1450,60,6353,13.741935483870966,27.371478759145724,77,0,25.058823529411764,40.242189596608824,118,0,26.846153846153843,33.68938050742933,76,0,4.0,0.0,0.0,0.0,0.0,646.6396604938271,585.4295288084827,1450.0,60.0,429.3125000000001,17,18,10.1.2.147,179.60.149.244,49506,443,6,32,zzerxc.com,t12d190700_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b72560,benign,benign,ctu_normal14_win_full_2017.pcap,10.0.2.15:49839-52.36.148.172:443-6-1071531,315.4857142857144,406.52569352477377,1474,54,222.37500000000006,253.2284541673783,634,54,3558,4540.794117647058,11676.479756407001,44808,0,10292.466666666665,16066.794505913062,44808,2,8565.722222222223,15246.11143405023,45002,0,201.0,0.0,0.0,0.0,0.0,519.5283834586467,540.6789219000381,1474.0,54.0,315.4857142857144,28,30,10.0.2.15,52.36.148.172,49839,443,6,35,e.nexac.com,t12d1711h2_67e6df579eba_de5ccbe16bdd,303951d4c50efb2e991652225a6f02b12570,c2_beaconing,mta_icedid,IcedID_2022-01-12.pcap,10.22.5.47:50477-64.4.54.254:443-6-1642008037385,565.5789473684213,567.9638183936257,1415,60,612.6666666666666,585.430724623617,1415,60,12866,494.945945945946,1962.1777293205223,8646,0,915.6500000000001,2625.0413585714277,8646,0,1136.6250000000002,2978.4976945881067,8823,0,85.0,0.0,0.0,0.0,0.0,678.9619309712189,559.8886750198409,1415.0,60.0,565.5789473684213,29,30,10.22.5.47,64.4.54.254,50477,443,6,38,web.vortex.data.microsoft.com,t13d1516h2_8daaf6152771_e5627efa2ab1,9cac3f41e89d651cd76e7993816017682580,exfil,mta_lumma,Lumma_2025-02-13.pcap,10.2.14.101:49926-18.67.65.95:443-6-1739488730970,479.3636363636363,579.8392671745988,1514,54,162.0,227.2955124941977,746,54,1458,5553.190476190476,25378.040516594356,116312,0,14577.125,41107.10530322847,116312,2,9713.916666666668,33570.01279133813,116313,0,36.0,0.0,0.0,0.0,0.0,586.2711732711732,557.8702599836118,1514.0,54.0,479.3636363636363,16,18,10.2.14.101,18.67.65.95,49926,443,6,22,fonts.ub-assets.com,t12d180700_4b22cbed5bed_2dae41c691ec,2ab44dd8c27bdce434a961463587356a2591,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:51420-194.165.16.90:443-6-1668459689661,435.77777777777777,589.6705294767014,1514,54,459.3846153846154,631.944425096271,1514,54,5972,54.500000000000014,139.67140007889947,507,0,118.08333333333333,190.66460716200692,507,0,91.99999999999999,183.95153347190848,507,0,2.0,0.0,0.0,0.0,0.0,668.1132817799485,618.2566902665315,1514.0,54.0,435.77777777777777,16,18,172.16.24.174,194.165.16.90,51420,443,6,27,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b72601,c2_beaconing,mta_gozi,Gozi_2023-07-12.pcap,10.7.12.121:49915-170.130.55.162:443-6-1689202440819,360.56521739130443,557.9511893026744,1514,54,153.2,200.96201962891726,636,54,1532,485.7727272727273,2204.146523774769,10352,0,1187.4444444444443,3437.38272931278,10352,0,887.0,2981.650915485947,10353,0,16.5,0.0,0.0,0.0,0.0,539.9824600520253,557.5107380565333,1514.0,54.0,360.56521739130443,14,16,10.7.12.121,170.130.55.162,49915,443,6,23,iamupdate.com,t12d190700_d83cc789557e_2dae41c691ec,4ce0442e9d20d092d9d74e9ce54b363a2611,c2_beaconing,mta_qakbot,Qakbot_2023-05-10.pcap,172.16.10.73:50552-81.224.201.143:2222-6-1683742501947,194.952380952381,297.74930330573005,1195,54,163.25,239.20517058868865,771,54,1959,1884.3000000000004,6730.463877811567,29636,0,3426.0,8958.702986481916,29636,0,4690.75,10389.863078294838,29636,1,164.5,0.0,0.0,0.0,0.0,435.3805114638448,456.3337799111986,1195.0,54.0,194.952380952381,14,16,172.16.10.73,81.224.201.143,50552,2222,6,21,,t13i201100_2b729b4bf6f3_2e4f304f1f45,2253c82f03b621c5144709b393fde2c92620,benign,benign,ctu_normal14_win_full_2017.pcap,10.0.2.15:49822-77.238.185.35:443-6-1068717,208.88888888888894,370.62879217257483,1474,54,113.86666666666666,101.2492445592041,410,54,1708,3307.114285714286,11238.794342840883,45004,0,8267.785714285716,16917.11294781148,45004,0,5784.450000000001,14526.912275515617,45015,0,7.5,0.0,0.0,0.0,0.0,457.7241622574956,554.7566692982023,1474.0,54.0,208.88888888888894,26,28,10.0.2.15,77.238.185.35,49822,443,6,36,pr-bh.ybp.yahoo.com,t12d1711h2_67e6df579eba_de5ccbe16bdd,76cc3e2d3028143b23ec18e27dbd7ca92631,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:51706-194.165.16.90:443-6-1668459965304,435.7777777777777,592.4256093081244,1514,54,459.3846153846154,631.944425096271,1514,54,5972,52.34615384615385,134.5436560548857,468,0,113.33333333333334,183.65448455447446,469,0,88.38461538461539,177.31776488437288,468,0,2.0,0.0,0.0,0.0,0.0,668.1132817799485,618.2566902665315,1514.0,54.0,435.7777777777777,16,18,172.16.24.174,194.165.16.90,51706,443,6,27,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b72641,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:50221-194.165.16.90:443-6-1668457860945,422.14285714285717,585.2161179956554,1514,54,430.42857142857144,616.7435215943265,1514,54,6026,55.703703703703695,147.18298783769782,568,0,115.6923076923077,198.7407794990687,568,0,98.23076923076924,197.91460862627676,568,0,111.5,0.0,0.0,0.0,0.0,663.3809523809524,619.9837354314599,1514.0,54.0,422.14285714285717,18,20,172.16.24.174,194.165.16.90,50221,443,6,28,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b72651,c2_beaconing,mta_bumblebee,BumbleBee_2022-06-14.pcap,10.6.14.101:49163-172.93.181.105:443-6-1655229947008,143.952380952381,179.06464648011237,714,60,129.63636363636363,159.95391381724468,578,60,1426,21.15,36.30756771919885,94,0,42.3,43.515131467877545,94,0,38.22222222222222,43.70577129446916,95,0,4.0,0.0,0.0,0.0,0.0,291.03208273208276,271.8682087058512,714.0,60.0,143.952380952381,13,14,10.6.14.101,172.93.181.105,49163,443,6,21,hocavopeh.com,t12d190700_d83cc789557e_2dae41c691ec,ae4edc6faf64d08308082ad26be607672660,c2_beaconing,mta_emotet,Emotet_2022-11-07_0.pcap,192.168.1.133:52334-182.162.143.56:443-6-1667838151392,201.73684210526318,327.65307569393565,1418,54,126.44444444444444,120.23322243780119,412,54,1138,268.27777777777777,728.2580994929779,2924,0,603.6249999999999,1035.8867750455577,2924,0,516.0,1008.2515807079103,2967,0,43.0,0.0,0.0,0.0,0.0,445.2979207277453,531.7313499997896,1418.0,54.0,201.73684210526318,14,16,192.168.1.133,182.162.143.56,52334,443,6,19,,t12i190700_d83cc789557e_7af1ed941c26,ec74a5c51106f0419184d0dd08fb05bc2670,benign,benign,ctu_normal14_win_full_2017.pcap,10.0.2.15:50812-216.58.201.78:443-6-2263352,119.74193548387099,122.26663969699871,585,54,155.28571428571433,162.05574946315835,585,54,2174,227.13333333333333,1220.4747446378603,6689,0,524.1538461538462,1852.3449033659044,6689,0,424.625,1670.520672325448,6689,0,2.5,0.0,0.0,0.0,0.0,219.38869311165328,206.39259340800416,585.0,54.0,119.74193548387099,23,25,10.0.2.15,216.58.201.78,50812,443,6,31,safebrowsing.google.com,t12d1711h2_67e6df579eba_de5ccbe16bdd,f75d3cb3274309c4b0eeaad4f9d4f7c22681,c2_beaconing,mta_qakbot,Qakbot_2022-09-29.pcap,10.9.29.201:50519-193.3.19.137:443-6-1664444459059,174.57142857142853,235.15921658071824,850,54,156.33333333333334,220.78551226075146,693,54,1876,1807.6499999999999,6704.817602409401,29757,0,3286.6363636363635,8948.339759673045,29758,0,4502.0,10401.986856914817,29758,2,1.0,0.0,0.0,0.0,0.0,342.7548500881834,328.48830514905353,850.0,54.0,174.57142857142853,14,16,10.9.29.201,193.3.19.137,50519,443,6,21,,t13i201000_2b729b4bf6f3_533b6d20482b,2253c82f03b621c5144709b393fde2c92691,c2_beaconing,mta_gozi,Gozi_2023-07-12.pcap,10.7.12.121:50149-170.130.55.162:443-6-1689203432793,391.80952380952385,575.5847130568721,1514,54,164.2222222222222,209.92187700295662,636,54,1478,549.65,2354.762682757068,10549,0,1374.1249999999998,3708.880980160997,10549,0,996.2727272727274,3170.131419702,10550,0,34.0,0.0,0.0,0.0,0.0,549.3924162257496,555.5815419862272,1514.0,54.0,391.80952380952385,11,13,10.7.12.121,170.130.55.162,50149,443,6,21,iamupdate.com,t12d190700_d83cc789557e_2dae41c691ec,4ce0442e9d20d092d9d74e9ce54b363a2701,c2_beaconing,mta_gozi,Gozi_2023-07-12.pcap,10.7.12.121:50360-170.130.55.162:443-6-1689204467203,364.2608695652174,556.522417860258,1514,54,153.2,200.96201962891726,636,54,1532,490.6818181818182,2199.616360194348,10334,0,1199.4444444444443,3426.992490184036,10334,0,896.4166666666667,2973.478907039036,10334,0,37.0,0.0,0.0,0.0,0.0,541.1195837978447,557.3570916670573,1514.0,54.0,364.2608695652174,14,16,10.7.12.121,170.130.55.162,50360,443,6,23,iamupdate.com,t12d190700_d83cc789557e_2dae41c691ec,4ce0442e9d20d092d9d74e9ce54b363a2710,exfil,mta_stealc,StealC_2025-06-18.pcap,172.16.1.128:57240-142.250.114.95:443-6-1750264095652,820.5098039215688,667.231934863703,1514,54,108.35294117647058,158.88908913786003,698,54,1842,7.779999999999998,18.728228175997987,79,0,24.312499999999996,29.227199090345053,79,1,9.90909090909091,20.33372143196437,79,0,4.0,0.0,0.0,0.0,0.0,665.9389978213508,592.3969984780085,1514.0,54.0,698.0,41,43,172.16.1.128,142.250.114.95,57240,443,6,51,ajax.googleapis.com,t12d180700_4b22cbed5bed_2dae41c691ec,84aaf6d03fc8c5bfb56d1d188735b2682720,c2_beaconing,mta_emotet,Emotet_2022-11-07_1.pcap,192.168.1.133:60785-103.35.65.182:465-6-1667842071114,708.8169014084519,715.6682511942582,1514,54,1402.1128805620626,348.334870092682,1514,54,2993511,4.087480118154963,35.71478978135003,1014,0,8.429709465791932,56.55118934740144,1015,0,7.8451015004412925,49.370897177744204,1014,0,1.0,0.0,0.0,0.0,0.0,763.4243403287338,675.8904440014609,1514.0,54.0,708.8169014084519,845,847,192.168.1.133,103.35.65.182,60785,465,6,4402,,t12i280600_d943125447b4_a8cc486ca5dc,e35df3e00ca4ef31d42b34bebaa2f86e2731,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:50782-194.165.16.90:443-6-1668458717972,466.32,610.5326035520134,1514,54,493.1666666666667,647.6681014971864,1514,54,5918,67.75,165.28532642202327,613,0,147.81818181818178,223.6728942817248,614,0,110.91666666666666,214.12802386904102,613,0,128.0,0.0,0.0,0.0,0.0,678.3361253561253,614.6092548983562,1514.0,54.0,466.32,14,16,172.16.24.174,194.165.16.90,50782,443,6,25,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b72741,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:50983-194.165.16.90:443-6-1668459015821,397.59999999999997,565.1215066172755,1514,54,405.3333333333334,602.2040075146184,1514,54,6080,50.86206896551724,136.88491624560575,519,0,105.28571428571429,185.31695450328777,520,0,86.71428571428572,181.0828236222006,519,0,1.0,0.0,0.0,0.0,0.0,655.2,623.2646601109435,1514.0,54.0,397.59999999999997,20,22,172.16.24.174,194.165.16.90,50983,443,6,30,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b72750,benign,benign,ctu_normal20_win_2017_https.pcap,10.0.2.15:49613-185.34.188.114:443-6-2430940,215.4642857142857,384.15086563241994,1474,54,132.92307692307693,186.75673193509496,723,54,1728,654.9999999999999,2277.7330835723483,9921,0,1473.75,3309.1956486296017,9921,1,1260.7142857142858,3150.241441994112,10161,0,2.0,0.0,0.0,0.0,0.0,496.48748473748475,558.2505411539875,1474.0,54.0,215.4642857142857,21,23,10.0.2.15,185.34.188.114,49613,443,6,28,cs.moz.com,t12d1509h2_073e58a039a6_e70312a1ce2c,959bfcf87532cbff1253e80a4ee813082761,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:50193-194.165.16.90:443-6-1668457820211,450.4615384615385,603.0142439955614,1514,54,459.3846153846154,631.944425096271,1514,54,5972,53.680000000000014,134.2301257790764,464,0,111.83333333333334,179.49010270679818,464,0,93.83333333333334,178.92397234241108,464,0,107.5,0.0,0.0,0.0,0.0,672.8205128205128,616.4463618420267,1514.0,54.0,450.4615384615385,16,18,172.16.24.174,194.165.16.90,50193,443,6,26,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b72770,exfil,mta_koistealer,KoiStealer_2025-07-08.pcap,10.7.8.101:54915-52.109.0.142:443-6-1752006992804,449.38888888888886,592.4999020986654,1514,54,145.42857142857142,117.83867099111556,345,54,1018,31.941176470588236,53.47250530440305,182,0,90.5,57.660211584766145,182,2,46.9,62.91519865837048,182,0,74.0,0.0,0.0,0.0,0.0,530.2928491261824,559.5221676882776,1514.0,54.0,345.0,13,15,10.7.8.101,52.109.0.142,54915,443,6,18,odc.officeapps.live.com,t12d180700_4b22cbed5bed_2dae41c691ec,ae4edc6faf64d08308082ad26be607672781,c2_beaconing,mta_gozi,Gozi_2023-07-12.pcap,10.7.12.121:50707-170.130.55.162:443-6-1689206004923,388.76190476190476,576.8025576193213,1514,54,164.2222222222222,209.92187700295662,636,54,1478,540.8000000000001,2305.6088498314393,10330,0,1352.0,3629.789683006047,10330,0,979.3636363636363,3103.517851494567,10331,0,35.0,0.0,0.0,0.0,0.0,548.4611992945327,555.6665933938945,1514.0,54.0,388.76190476190476,11,13,10.7.12.121,170.130.55.162,50707,443,6,21,iamupdate.com,t12d190700_d83cc789557e_2dae41c691ec,4ce0442e9d20d092d9d74e9ce54b363a2790,benign,benign,ctu_normal20_win_2017_https.pcap,10.0.2.15:49223-192.0.73.2:443-6-508204,306.55555555555554,502.62934296582455,1474,54,99.0,72.3966347786465,247,54,1188,5.115384615384617,11.140294154381824,49,0,11.818181818181818,17.186146640932527,49,0,8.5,14.851832313789536,51,0,1.0,0.0,0.0,0.0,0.0,470.57283950617284,552.6992243238686,1474.0,54.0,247.0,17,19,10.0.2.15,192.0.73.2,49223,443,6,27,www.gravatar.com,t12d1509h2_073e58a039a6_e70312a1ce2c,49b45fc1ab090aa3a159778313fc9b9e2801,c2_beaconing,mta_emotet,Emotet_2022-07-07.pcap,10.7.7.101:57359-164.90.222.65:443-6-1657218345800,760.1236240474169,613.8626246908004,1514,54,55.662650602409634,24.59299786251369,494,54,27720,59.50847457627118,1911.0826876261099,65584,0,141.28772635814892,2944.4607397781724,65584,0,102.9032258064516,2513.677358254092,65584,0,1.0,0.0,0.0,0.0,0.0,641.5064300611407,608.8953417407,1514.0,54.0,494.0,825,827,10.7.7.101,164.90.222.65,57359,443,6,1181,,t12i190600_d83cc789557e_2dae41c691ec,fd4bc6cea4877646ccd62f0792ec0b622811,c2_beaconing,mta_pikabot,Pikabot_2023-10-03.pcap,10.1.2.147:49634-167.86.96.3:2222-6-1696351038897,230.56521739130434,344.57217558840017,1430,60,144.3076923076923,201.00181782568728,744,60,1876,5458.499999999999,18052.14337293893,74999,0,10007.25,23927.212709020816,74999,0,13326.444444444445,27187.415241758048,74999,0,150.0,0.0,0.0,0.0,0.0,500.17476774433294,536.8624006346706,1430.0,60.0,230.56521739130434,14,15,10.1.2.147,167.86.96.3,49634,2222,6,23,,t12i190600_d83cc789557e_2dae41c691ec,ec74a5c51106f0419184d0dd08fb05bc2820,benign,benign,ctu_normal21_kali_2017.pcap,192.168.1.191:51856-52.94.224.134:443-6-1493726792986,131.0,176.38627397577972,781,54,159.29999999999998,228.9556240361389,781,54,1593,51.64705882352941,88.4003260574237,344,0,94.55555555555556,111.11155555466667,344,1,107.14285714285714,181.1587044292274,504,0,32.0,0.0,0.0,0.0,0.0,259.2138888888889,283.89240310936447,781.0,54.0,131.0,11,13,192.168.1.191,52.94.224.134,51856,443,6,18,api-cdn.amazon.com,t12d1109h2_43e74fd21232_fed6c16fddd0,d199ba0af2b08e204c73d6d81a1fd2602830,benign,benign,ctu_normal21_kali_2017.pcap,192.168.1.191:47216-72.21.207.148:443-6-1493726847983,84.56250000000001,64.88242571503217,277,54,94.62499999999999,76.05249596730631,277,54,757,351.93333333333334,1169.5371164125859,4569,0,752.4285714285714,1805.4943789391739,4844,1,738.2857142857143,1739.5645733234237,4675,0,61.5,0.0,0.0,0.0,0.0,131.07638888888889,90.26613707001762,277.0,54.0,84.56250000000001,8,10,192.168.1.191,72.21.207.148,47216,443,6,16,fls-na.amazon.com,t12d1109h2_43e74fd21232_fed6c16fddd0,d199ba0af2b08e204c73d6d81a1fd2602840,benign,benign,ctu_normal21_kali_2017.pcap,192.168.1.191:48622-208.100.17.188:443-6-1493727180677,156.75,171.66381874660328,580,66,153.77777777777777,174.8590702378474,580,66,1384,159.0,264.90052041150415,1046,0,280.875,319.317324258219,1046,38,374.16666666666663,462.75886449280114,1222,0,149.0,0.0,0.0,0.0,0.0,265.01102292768957,220.3350405009802,580.0,66.0,156.75,10,12,192.168.1.191,208.100.17.188,48622,443,6,16,ic.tynt.com,t12d1109h2_43e74fd21232_fed6c16fddd0,fbe78c619e7ea20046131294ad087f052850,exfil,mta_lumma,Lumma_2025-12-30.pcap,10.12.30.101:51638-23.221.220.70:443-6-1767064398945,323.66666666666663,490.6824984505911,1514,54,213.5294117647059,371.6046483911125,1514,54,3630,3439.9714285714285,11548.353701071075,45010,0,7524.9375,16416.61775343813,45010,0,6686.388888888889,21962.084844618515,90013,0,52.0,0.0,0.0,0.0,0.0,629.2674005274624,636.8460041513821,1514.0,54.0,323.66666666666663,29,31,10.12.30.101,23.221.220.70,51638,443,6,36,ow1.res.office365.com,t13d1516h2_8daaf6152771_d8a2da3f94cd,15af977ce25de452b96affa2addb10362860,exfil,mta_xloader,XLoader_2023-11-29.pcap,10.11.29.101:60633-204.79.197.239:443-6-1701280494636,335.66666666666663,468.2105578014891,1430,60,156.2857142857143,190.35530687937978,614,60,2188,1459.4827586206898,7796.884957746584,41999,0,3255.7692307692305,11646.03172153392,42016,0,2818.5333333333338,10859.451840063874,42073,0,12.0,0.0,0.0,0.0,0.0,515.3974867724868,523.5203065024048,1430.0,60.0,335.66666666666663,20,21,10.11.29.101,204.79.197.239,60633,443,6,30,edge.microsoft.com,t13d1517h2_8daaf6152771_b1ff8ab2d16f,0f14538e1c9070becdad7739c67d63632871,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:50654-194.165.16.90:443-6-1668458533733,466.32,610.5326035520134,1514,54,493.1666666666667,647.6681014971864,1514,54,5918,62.999999999999986,154.37250262017972,553,0,137.45454545454544,209.18000078227536,554,0,102.41666666666667,199.40979201512437,553,0,212.0,0.0,0.0,0.0,0.0,678.3361253561253,614.6092548983562,1514.0,54.0,466.32,14,16,172.16.24.174,194.165.16.90,50654,443,6,25,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b72881,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:50166-194.165.16.90:443-6-1668457785493,466.32,610.5326035520134,1514,54,493.1666666666667,647.6681014971864,1514,54,5918,55.04166666666667,136.3555069491596,479,0,120.0909090909091,185.1115634126915,480,0,93.25,179.79641264496908,479,0,100.5,0.0,0.0,0.0,0.0,678.3361253561253,614.6092548983562,1514.0,54.0,466.32,14,16,172.16.24.174,194.165.16.90,50166,443,6,25,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b72891,exfil,mta_lumma,Lumma_2024-03-07_0.pcap,10.3.7.135:49853-104.21.41.147:443-6-1709849463752,145.7368421052632,198.16683266190503,780,54,140.4,166.87866516990388,484,54,1404,6113.555555555556,24955.362819199974,106041,0,12227.111111111111,35203.57292038851,106041,0,13751.375000000002,37315.75867775475,106042,0,8.0,0.0,0.0,0.0,0.0,293.75594541910334,288.1213412788576,780.0,54.0,145.7368421052632,12,14,10.3.7.135,104.21.41.147,49853,443,6,19,popfealt.one,t12d190800_d83cc789557e_7af1ed941c26,1249fb68f48c0444718e4d3b48b271882901,c2_beaconing,mta_icedid,IcedID_2022-12-20.pcap,10.3.24.178:54701-23.81.246.152:443-6-1671553084999,170.23529411764704,259.10748961863413,943,54,158.66666666666666,224.78712151722573,732,54,1428,23.0625,43.519296486348054,143,0,46.0,53.43888364958877,143,0,41.42857142857142,55.772923965119915,143,1,36.0,0.0,0.0,0.0,0.0,365.79466230936816,366.14419051154795,943.0,54.0,170.23529411764704,12,14,10.3.24.178,23.81.246.152,54701,443,6,17,xedefeg.com,t12d190700_d83cc789557e_2dae41c691ec,ae4edc6faf64d08308082ad26be607672911,c2_beaconing,mta_icedid,IcedID_2022-01-12.pcap,10.22.5.47:50005-104.168.44.45:443-6-1642006881952,219.21052631578942,365.7496987083696,1279,60,211.27272727272728,373.0335349292583,1279,60,2324,71.11111111111111,116.95946451599923,268,0,128.00000000000003,133.84817269329204,268,0,148.42857142857144,138.06140800727906,268,0,3.0,0.0,0.0,0.0,0.0,506.95647262094633,523.8724558061662,1279.0,60.0,219.21052631578942,12,13,10.22.5.47,104.168.44.45,50005,443,6,19,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b72921,c2_beaconing,mta_icedid,IcedID_2023-09-28.pcap,10.10.20.147:50993-141.98.80.158:443-6-1695923294055,435.3030303030303,612.2283828793225,1514,54,374.18749999999994,587.756550367582,1514,54,5987,32.21875000000001,93.25052430017789,381,0,68.73333333333333,129.27073841176824,382,0,54.74999999999999,124.04327201961956,381,0,1.0,0.0,0.0,0.0,0.0,667.3682288571995,619.0757329813141,1514.0,54.0,435.3030303030303,17,19,10.10.20.147,141.98.80.158,50993,443,6,33,umomrmwa.com,t12d190800_d83cc789557e_7af1ed941c26,f176ba63b4d68e576b5ba345bec2c7b72930,c2_beaconing,mta_qakbot,Qakbot_2023-05-10.pcap,172.16.10.73:50587-184.28.38.170:443-6-1683743732410,60.0,12.0,78,54,54.0,0.0,54,54,108,12.333333333333332,20.502032419575706,36,0,37.0,0.0,37,37,36.0,0.0,36,36,18.5,0.0,0.0,0.0,0.0,61.333333333333336,9.706813185707357,78.0,54.0,54.0,2,2,172.16.10.73,184.28.38.170,50587,443,6,4,,,2940,benign,benign,ctu_normal20_win_2017_https.pcap,10.0.2.15:51671-74.120.149.167:443-6-6121228,371.70370370370364,528.3206205162525,1474,54,201.16666666666666,338.14113065763564,1165,54,2414,63.96153846153847,99.19051598584646,378,0,151.18181818181816,121.51281264279763,378,3,110.5,170.09714418983776,584,0,8.0,0.0,0.0,0.0,0.0,595.1115226337448,573.5597068819121,1474.0,54.0,371.70370370370364,18,20,10.0.2.15,74.120.149.167,51671,443,6,27,social-login.cnn.com,t12d1510h2_073e58a039a6_60bf0a45ed8c,ccc514751b175866924439bdbb5bba342950,benign,benign,ctu_normal14_win_full_2017.pcap,10.0.2.15:49981-45.55.217.192:443-6-1138101,114.41666666666666,149.58394319112617,571,54,150.66666666666666,206.86581802382594,571,54,904,39.90909090909091,59.725127953742465,141,0,87.8,79.23824834005356,159,0,57.6,64.67070434130126,130,1,14.0,0.0,0.0,0.0,0.0,204.69444444444446,201.01362738645787,571.0,54.0,114.41666666666666,5,7,10.0.2.15,45.55.217.192,49981,443,6,12,anon-sms.com,t12d1712h2_67e6df579eba_88be6878e1da,c6227321ea7621862dc7b7351771a62c2961,c2_beaconing,mta_pikabot,Pikabot_2023-11-02.pcap,10.11.2.101:52937-51.195.232.97:13782-6-1698953799776,239.75,369.6420565898853,1430,60,152.5,210.46161386127142,749,60,1830,7708.578947368421,22811.033203536957,75059,0,13314.81818181818,29232.591588219413,75059,0,10943.714285714284,28657.262544971538,75932,0,140.0,0.0,0.0,0.0,0.0,505.7638888888889,535.1558652900302,1430.0,60.0,239.75,12,13,10.11.2.101,51.195.232.97,52937,13782,6,20,,t12i190700_d83cc789557e_7af1ed941c26,ec74a5c51106f0419184d0dd08fb05bc2970,c2_beaconing,mta_pikabot,Pikabot_2024-02-08.pcap,10.2.8.101:53314-40.126.28.21:443-6-1707418146168,654.8529411764708,672.7964766037953,1514,60,404.5,558.6020646817077,1494,60,6472,9.030303030303028,17.068766886635455,47,0,17.06666666666667,31.326544350636265,109,0,15.0,21.592822881689184,50,0,13.5,0.0,0.0,0.0,0.0,737.6379811183733,604.8419229864616,1514.0,60.0,654.8529411764708,18,19,10.2.8.101,40.126.28.21,53314,443,6,34,login.live.com,t12d1909h2_d83cc789557e_7af1ed941c26,7d8fd34fdb13a7fff30d5a52846b6c4c2981,c2_beaconing,mta_icedid,IcedID_2022-01-12.pcap,10.22.5.47:49907-45.147.228.138:443-6-1642002995623,205.33333333333334,330.3307145155911,1356,60,119.625,87.39881905053736,269,60,957,4417.5,15988.890805565834,59965,0,8835.0,22548.608774526794,59965,1,10272.166666666666,24469.554604991623,60218,4,207.0,0.0,0.0,0.0,0.0,421.0271164021164,507.02976552769695,1356.0,60.0,205.33333333333334,9,10,10.22.5.47,45.147.228.138,49907,443,6,15,hashingold.top,t12d190800_d83cc789557e_7af1ed941c26,ec74a5c51106f0419184d0dd08fb05bc2990,benign,benign,ctu_normal14_win_full_2017.pcap,10.0.2.15:50548-172.217.23.238:443-6-1676839,119.16363636363636,173.494451147939,1164,54,152.16,236.22776438570187,1164,54,3804,4131.074074074074,12938.800314531296,45021,0,9294.916666666668,18322.022047410515,45021,0,7690.793103448275,16986.556954543517,45021,0,11.0,0.0,0.0,0.0,0.0,375.2211447811448,443.69073916553475,1164.0,54.0,119.16363636363636,47,49,10.0.2.15,172.217.23.238,50548,443,6,55,clients6.google.com,t12d1711h2_67e6df579eba_a29fe97f68c7,c23237dbea656869600e48dfbd00ab7b3001,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:52119-194.165.16.90:443-6-1668460630134,466.32,610.5326035520134,1514,54,493.1666666666667,647.6681014971864,1514,54,5918,64.58333333333334,157.85516660277042,560,0,140.81818181818178,214.14145707070276,561,0,111.16666666666667,208.64316355195945,560,0,1.0,0.0,0.0,0.0,0.0,678.3361253561253,614.6092548983562,1514.0,54.0,466.32,14,16,172.16.24.174,194.165.16.90,52119,443,6,25,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b73011,c2_beaconing,mta_icedid,IcedID_2023-01-12.pcap,172.18.127.129:55971-5.230.74.203:443-6-1673547016976,184.1764705882353,314.23940620451265,1356,54,115.75000000000001,88.23143268861566,265,54,926,3913.6875000000014,14944.08708807043,59938,0,8945.57142857143,22490.474212112873,59938,0,7805.875,21090.647469824835,59990,0,167.5,0.0,0.0,0.0,0.0,409.32516339869284,511.6276022325483,1356.0,54.0,184.1764705882353,10,12,172.18.127.129,5.230.74.203,55971,443,6,17,qzmeat.cyou,t12d190800_d83cc789557e_7af1ed941c26,ec74a5c51106f0419184d0dd08fb05bc3021,c2_beaconing,mta_gozi,Gozi_2023-07-12.pcap,10.7.12.121:50633-170.130.55.162:443-6-1689205678797,327.65384615384613,498.55703323152045,1514,54,130.3076923076923,179.39267200538256,636,54,1694,435.31999999999994,2067.9964885527893,10356,0,906.9166666666667,2977.296591276093,10356,0,903.75,2978.9428608454073,10358,0,1.0,0.0,0.0,0.0,0.0,534.3290598290598,560.5582772730237,1514.0,54.0,327.65384615384613,18,20,10.7.12.121,170.130.55.162,50633,443,6,26,iamupdate.com,t12d190700_d83cc789557e_2dae41c691ec,4ce0442e9d20d092d9d74e9ce54b363a3030,benign,benign,ctu_normal21_kali_2017.pcap,192.168.1.191:36960-216.137.61.236:443-6-1493726621156,357.7368421052632,535.0387153286991,1514,66,96.54545454545455,68.17677557110433,268,66,1062,53.722222222222236,124.44124791646271,479,0,96.7,157.12701868233864,479,0,132.85714285714286,192.43737385742628,499,0,25.0,0.0,0.0,0.0,0.0,518.3508107389687,567.8715006910669,1514.0,66.0,268.0,13,14,192.168.1.191,216.137.61.236,36960,443,6,19,d5nxst8fruw4z.cloudfront.net,t12d1109h2_43e74fd21232_fed6c16fddd0,76cc3e2d3028143b23ec18e27dbd7ca93040,benign,benign,ctu_normal20_win_2017_https.pcap,10.0.2.15:65519-52.28.153.152:443-6-9359735,118.05263157894736,150.84858120760396,571,54,133.26315789473685,178.27626566816122,571,54,2532,2508.3513513513512,4159.4042256087605,10057,0,5156.0,4712.711658532759,10058,22,5154.61111111111,4766.956744567247,10059,5,31.5,0.0,0.0,0.0,0.0,234.57309941520467,214.2402962839342,571.0,54.0,118.05263157894736,32,34,10.0.2.15,52.28.153.152,65519,443,6,38,t.myvisualiq.net,t12d1510h2_073e58a039a6_60bf0a45ed8c,fbe78c619e7ea20046131294ad087f053051,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:50052-194.165.16.90:443-6-1668457619739,466.32,610.5326035520134,1514,54,493.1666666666667,647.6681014971864,1514,54,5918,73.33333333333331,183.458007673991,716,0,160.0,249.60088140870016,717,0,124.83333333333334,242.62385153429028,716,0,279.0,0.0,0.0,0.0,0.0,678.3361253561253,614.6092548983562,1514.0,54.0,466.32,14,16,172.16.24.174,194.165.16.90,50052,443,6,25,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b73060,benign,benign,ctu_normal20_win_2017_https.pcap,10.0.2.15:51958-172.217.23.131:443-6-6820947,190.1282051282051,358.8876953417967,1474,54,95.3888888888889,62.106302501900046,278,54,1717,5573.631578947369,18765.228281456955,69845,0,12458.705882352942,26892.673300001024,69845,2,10588.85,25177.40671666397,70139,0,18.0,0.0,0.0,0.0,0.0,438.31671415004746,559.8769383789081,1474.0,54.0,190.1282051282051,30,32,10.0.2.15,172.217.23.131,51958,443,6,39,ssl.gstatic.com,t12d1509h2_073e58a039a6_e70312a1ce2c,84480cf8cf0e732666092640e581e1a53070,c2_beaconing,mta_emotet,Emotet_2022-11-07_1.pcap,192.168.1.133:60789-20.49.150.241:443-6-1667842075462,267.72,435.72234278264864,1514,54,172.0909090909091,234.16253096746905,842,54,1893,32.33333333333333,52.66602457873136,129,0,77.60000000000001,68.79147233972148,171,0,49.92307692307693,63.126145584933795,129,0,46.0,0.0,0.0,0.0,0.0,534.9631168831169,572.0600659965899,1514.0,54.0,267.72,17,19,192.168.1.133,20.49.150.241,60789,443,6,25,settings-win.data.microsoft.com,t12d1909h2_d83cc789557e_7af1ed941c26,2fe9b0e731d3d41b2b84e8e1d61868363080,c2_beaconing,mta_icedid,IcedID_2023-05-10.pcap,172.16.10.73:50550-152.216.11.110:443-6-1683742501115,398.70000000000005,547.7408242283168,1514,54,204.00000000000003,351.1251755270318,1180,54,2040,14.684210526315791,28.207667656505794,81,0,31.0,35.759614091877445,83,0,25.22222222222222,35.340408096744504,81,0,3.5,0.0,0.0,0.0,0.0,618.4555555555555,586.5014712705068,1514.0,54.0,398.70000000000005,16,18,172.16.10.73,152.216.11.110,50550,443,6,20,irs.gov,t12d180800_4b22cbed5bed_7af1ed941c26,76c691f46143bf86e2d1bb73c61877673091,c2_beaconing,mta_qakbot,Qakbot_2023-05-10.pcap,172.16.10.73:50358-46.151.30.109:443-6-1683739461596,227.9327424400419,331.668742155615,1514,54,385.8814504881451,400.3006890811157,1514,54,1106708,54.63914479402054,1197.9528795742401,69734,0,109.64039065224968,1698.0069759118194,69780,0,108.82218370883884,1692.8333221704286,69781,0,47.0,0.0,0.0,0.0,0.0,588.0870393774832,640.9317139769388,1514.0,54.0,227.9327424400419,5490,5492,172.16.10.73,46.151.30.109,50358,443,6,5754,,,3100,benign,benign,ctu_normal20_win_2017_https.pcap,10.0.2.15:49394-82.99.173.173:443-6-978096,273.5,462.46610686622216,1474,54,98.49999999999999,73.75820447430053,239,54,1182,64.88,132.59817746359363,589,0,147.45454545454547,184.28041872991477,589,1,123.99999999999999,177.8810463952432,591,0,11.0,0.0,0.0,0.0,0.0,460.5,554.4301879707971,1474.0,54.0,239.0,18,20,10.0.2.15,82.99.173.173,49394,443,6,26,i.czc.cz,t12d1509h2_073e58a039a6_e70312a1ce2c,ff93a0f5423e1af05fef574227e7564e3110,c2_beaconing,mta_icedid,IcedID_2023-05-10.pcap,172.16.10.73:50387-23.47.50.184:443-6-1683739717863,237.94230769230776,403.61607721051627,1514,54,134.80769230769232,233.77853096138136,1083,54,3505,11667.000000000002,19557.6888133542,45032,0,23800.679999999997,22272.537104245668,45033,0,23799.319999999996,28595.271333619712,90017,0,2619.5,0.0,0.0,0.0,0.0,554.0918803418804,595.7247515425299,1514.0,54.0,237.94230769230776,43,45,172.16.10.73,23.47.50.184,50387,443,6,52,aefd.nelreports.net,t13d1616h2_e72c3b3287f1_e5627efa2ab1,15af977ce25de452b96affa2addb10363120,exfil,mta_lumma,Lumma_2025-02-13.pcap,10.2.14.101:64101-172.253.115.105:443-6-1739488883973,248.91666666666666,347.5421382779185,1112,54,247.66666666666666,292.20038786193743,754,54,1486,25.545454545454547,36.412535304105475,113,0,56.2,62.64343541026466,161,4,36.4,47.21016839622583,113,1,30.0,0.0,0.0,0.0,0.0,431.8611111111111,416.0258368341806,1112.0,54.0,248.91666666666666,9,11,10.2.14.101,172.253.115.105,64101,443,6,12,www.google.com,t12d180700_4b22cbed5bed_2dae41c691ec,b31c0b82752ea0e2c48b8ce46e9263e53131,c2_beaconing,mta_gozi,Gozi_2023-07-12.pcap,10.7.12.121:50533-170.130.55.162:443-6-1689205217226,390.76190476190476,575.9654420850183,1514,54,164.2222222222222,209.92187700295662,636,54,1478,297.2,1211.0008301096723,5429,0,743.0,1897.897408035685,5429,1,536.0,1626.896862127406,5429,0,37.5,0.0,0.0,0.0,0.0,549.0723104056437,555.610104810533,1514.0,54.0,390.76190476190476,11,13,10.7.12.121,170.130.55.162,50533,443,6,21,iamupdate.com,t12d190700_d83cc789557e_2dae41c691ec,4ce0442e9d20d092d9d74e9ce54b363a3141,c2_beaconing,mta_pikabot,Pikabot_2023-11-02.pcap,10.11.2.101:52735-51.79.143.215:13783-6-1698934556242,239.10000000000005,358.0446752483329,1430,60,144.9090909090909,206.4279315138601,749,60,1594,7370.42105263158,21374.82792995274,75058,0,14003.8,28475.165939619892,75059,0,9945.5,26332.794930602086,75058,0,360.0,0.0,0.0,0.0,0.0,503.0257014590348,536.2346221974277,1430.0,60.0,239.10000000000005,14,15,10.11.2.101,51.79.143.215,52735,13783,6,20,,t12i190700_d83cc789557e_7af1ed941c26,ec74a5c51106f0419184d0dd08fb05bc3151,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:50920-194.165.16.90:443-6-1668458920696,466.32,610.5326035520134,1514,54,493.1666666666667,647.6681014971864,1514,54,5918,64.70833333333333,161.33289353455444,612,0,141.1818181818182,219.55902084943727,613,0,110.41666666666666,213.38418546382627,612,0,1.0,0.0,0.0,0.0,0.0,678.3361253561253,614.6092548983562,1514.0,54.0,466.32,14,16,172.16.24.174,194.165.16.90,50920,443,6,25,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b73161,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:50376-194.165.16.90:443-6-1668458103885,466.32,610.5326035520134,1514,54,493.1666666666667,647.6681014971864,1514,54,5918,87.58333333333333,215.03668375958284,715,0,191.09090909090912,291.22446825273954,716,0,145.08333333333331,280.3778159858046,715,0,308.0,0.0,0.0,0.0,0.0,678.3361253561253,614.6092548983562,1514.0,54.0,466.32,14,16,172.16.24.174,194.165.16.90,50376,443,6,25,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b73170,benign,benign,ctu_normal20_win_2017_https.pcap,10.0.2.15:65433-31.13.93.3:443-6-10707941,188.48717948717956,321.9527483959876,1474,54,105.87500000000001,82.87731897208066,298,54,1694,1727.5526315789473,10306.480956823782,63574,0,4376.4,16381.23380927962,63577,1,2983.045454545454,13537.305645537173,63578,0,3.5,0.0,0.0,0.0,0.0,438.7020779140344,559.5633143152514,1474.0,54.0,188.48717948717956,33,35,10.0.2.15,31.13.93.3,65433,443,6,39,6-edge-chat.facebook.com,t12d1509h2_073e58a039a6_e70312a1ce2c,2d1eb5817ece335c24904f516ad5da123181,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:51526-194.165.16.90:443-6-1668459849871,466.32,610.5326035520134,1514,54,493.1666666666667,647.6681014971864,1514,54,5918,74.04166666666666,183.84078157746853,623,0,161.45454545454547,250.1469022939775,625,0,129.08333333333331,244.3880886597951,623,0,1.0,0.0,0.0,0.0,0.0,678.3361253561253,614.6092548983562,1514.0,54.0,466.32,14,16,172.16.24.174,194.165.16.90,51526,443,6,25,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b73191,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:52466-77.126.81.208:443-6-1668470345128,197.92307692307693,258.7052574966544,777,54,210.42857142857142,273.75953995118726,777,54,1473,90.25,206.61784002883635,705,0,180.5,272.9869960272833,705,0,179.2,304.8806323792969,705,1,94.0,0.0,0.0,0.0,0.0,336.07610907610905,303.83392381322176,777.0,54.0,197.92307692307693,10,12,172.16.24.174,77.126.81.208,52466,443,6,13,,t12i190600_d83cc789557e_2dae41c691ec,fd4bc6cea4877646ccd62f0792ec0b623200,benign,benign,ctu_normal14_win_full_2017.pcap,10.0.2.15:51888-54.72.61.29:443-6-3372803,86.11764705882354,61.84848659520818,291,54,90.0,79.27326157034287,291,54,810,530.125,1921.3423736197215,7730,0,1060.0,2697.4279283368123,7730,0,1201.7142857142858,2992.5159823736785,7987,0,69.5,0.0,0.0,0.0,0.0,127.98529411764706,91.52242714919812,291.0,54.0,86.11764705882354,9,11,10.0.2.15,54.72.61.29,51888,443,6,17,aa.agkn.com,t12d1711h2_67e6df579eba_de5ccbe16bdd,5dcc087b1a1d0a5b0658981a7e8b2c3c3211,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:51181-194.165.16.90:443-6-1668459318609,435.77777777777777,589.6705294767014,1514,54,459.3846153846154,631.944425096271,1514,54,5972,54.07692307692309,136.63584392886753,477,0,117.16666666666667,185.7304172148113,478,0,90.07692307692307,178.43320951103877,477,0,119.0,0.0,0.0,0.0,0.0,668.1132817799485,618.2566902665315,1514.0,54.0,435.77777777777777,16,18,172.16.24.174,194.165.16.90,51181,443,6,27,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b73221,c2_beaconing,mta_pikabot,Pikabot_2024-02-08.pcap,10.2.8.101:53245-158.220.80.167:2967-6-1707416491299,240.8421052631579,353.8510771430852,1430,60,127.5,110.73717633307353,403,60,1275,3404.7222222222217,14112.814747412056,59952,0,6809.444444444444,19929.466595415386,59952,0,7643.125,21210.827204435678,60136,0,105.0,0.0,0.0,0.0,0.0,464.23554256010397,530.4258621517167,1430.0,60.0,240.8421052631579,12,13,10.2.8.101,158.220.80.167,53245,2967,6,19,,t12i190700_d83cc789557e_7af1ed941c26,ec74a5c51106f0419184d0dd08fb05bc3231,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:50748-194.165.16.90:443-6-1668458665096,422.14285714285717,585.2161179956554,1514,54,430.42857142857144,616.7435215943265,1514,54,6026,51.7037037037037,135.32661765999123,487,0,107.38461538461539,182.4347090795035,488,0,90.15384615384616,180.85207866921064,487,0,3.5,0.0,0.0,0.0,0.0,663.3809523809524,619.9837354314599,1514.0,54.0,422.14285714285717,18,20,172.16.24.174,194.165.16.90,50748,443,6,28,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b73241,c2_beaconing,mta_gozi,Gozi_2023-07-12.pcap,10.7.12.121:50063-170.130.55.162:443-6-1689203054458,338.59999999999997,511.38211414427343,1514,54,144.18181818181816,192.9812520333611,636,54,1586,446.20833333333337,2108.750773390578,10344,0,1070.9,3258.961029053414,10344,0,819.6153846153846,2862.395865309966,10344,0,19.0,0.0,0.0,0.0,0.0,533.3487734487734,559.2016105601062,1514.0,54.0,338.59999999999997,17,19,10.7.12.121,170.130.55.162,50063,443,6,25,iamupdate.com,t12d190700_d83cc789557e_2dae41c691ec,4ce0442e9d20d092d9d74e9ce54b363a3250,exfil,mta_lumma,Lumma_2025-02-13.pcap,10.2.14.101:64070-23.55.176.238:443-6-1739488834019,773.7333333333332,676.1942657679605,1514,54,176.66666666666666,256.7036228805507,837,54,1590,15.586206896551724,35.3144216204122,170,0,56.5,54.800938469545,170,3,20.099999999999998,41.58808027611555,170,0,29.5,0.0,0.0,0.0,0.0,667.4465608465608,574.8753063992864,1514.0,54.0,773.7333333333332,19,21,10.2.14.101,23.55.176.238,64070,443,6,30,img-s-msn-com.akamaized.net,t12d180700_4b22cbed5bed_2dae41c691ec,17414f23e0749902a4b45b00973b792e3261,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:51782-194.165.16.90:443-6-1668460096729,466.32000000000005,610.5063963628883,1514,54,493.1666666666667,647.6681014971864,1514,54,5918,60.58333333333335,150.1274579255521,563,0,132.18181818181816,204.02539948830793,564,0,103.08333333333333,198.25165748858115,563,0,1.0,0.0,0.0,0.0,0.0,678.3361253561254,614.6092548983562,1514.0,54.0,466.32000000000005,15,17,172.16.24.174,194.165.16.90,51782,443,6,25,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b73271,c2_beaconing,mta_gootloader,GootLoader_2023-12-29.pcap,10.12.29.101:51381-104.21.94.236:443-6-1703877607695,294.46153846153845,444.58175389621647,1514,54,359.57142857142856,532.7969773259033,1514,54,2517,85.00000000000001,265.39644445107535,926,0,170.0,371.5513423471916,927,0,196.4,408.44987452562646,926,0,3.0,0.0,0.0,0.0,0.0,553.8369963369963,572.1641851848082,1514.0,54.0,294.46153846153845,8,10,10.12.29.101,104.21.94.236,51381,443,6,13,latesthentai.com,t12d210700_76e208dd3e22_2dae41c691ec,b31c0b82752ea0e2c48b8ce46e9263e53280,benign,benign,ctu_normal20_win_2017_https.pcap,10.0.2.15:51810-52.55.152.154:443-6-6358714,267.9333333333333,452.4554925374127,1514,54,327.4761904761904,511.4008817989679,1514,54,6877,1436.4545454545455,3455.0274017325887,10107,0,3160.2000000000003,4616.648095978863,10109,0,2742.347826086957,4456.510300149207,10110,0,6.0,0.0,0.0,0.0,0.0,608.3603174603174,637.7485111680799,1514.0,54.0,267.9333333333333,35,37,10.0.2.15,52.55.152.154,51810,443,6,45,geo.moatads.com,t12d1509h2_073e58a039a6_e70312a1ce2c,303951d4c50efb2e991652225a6f02b13290,c2_beaconing,mta_qakbot,Qakbot_2023-05-10.pcap,172.16.10.73:50356-142.250.114.106:443-6-1683739399907,740.6666666666666,685.9521737084771,1514,54,184.1,251.55712847957398,685,54,1841,11.230769230769232,32.0278724767134,150,0,32.44444444444445,49.40422833905796,150,0,15.875,39.59945285817302,150,0,2.0,0.0,0.0,0.0,0.0,651.9806100217864,573.4773200039983,1514.0,54.0,685.0,18,20,172.16.10.73,142.250.114.106,50356,443,6,27,www.google.com,t13d201200_2b729b4bf6f3_2e4f304f1f45,f590053ff246338aff7c203dbe7164d63301,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:50488-194.165.16.90:443-6-1668458282090,466.32,610.5326035520134,1514,54,493.1666666666667,647.6681014971864,1514,54,5918,68.95833333333333,170.60543830637448,627,0,150.45454545454547,232.40540597686777,629,0,120.08333333333333,226.7054389744676,627,0,1.0,0.0,0.0,0.0,0.0,678.3361253561253,614.6092548983562,1514.0,54.0,466.32,14,16,172.16.24.174,194.165.16.90,50488,443,6,25,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b73311,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:50367-194.165.16.90:443-6-1668458087073,466.32,610.5326035520134,1514,54,493.1666666666667,647.6681014971864,1514,54,5918,88.375,228.32258120246564,890,0,192.8181818181818,313.0155964746223,891,0,155.33333333333331,306.22283429297727,890,0,129.5,0.0,0.0,0.0,0.0,678.3361253561253,614.6092548983562,1514.0,54.0,466.32,14,16,172.16.24.174,194.165.16.90,50367,443,6,25,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b73320,benign,benign,ctu_normal21_kali_2017.pcap,192.168.1.191:56404-23.253.41.115:443-6-1493726478784,183.6,234.2229706924579,862,54,237.49999999999994,308.97803897919437,862,66,1900,45.42857142857142,63.42617063073508,156,0,70.14285714285714,76.81889648480286,168,7,80.0,81.38058736578398,168,0,17.0,0.0,0.0,0.0,0.0,303.9,308.49352955577166,862.0,54.0,183.6,9,11,192.168.1.191,23.253.41.115,56404,443,6,15,api.autopilothq.com,t12d1110h2_43e74fd21232_205f67e4d9f4,fbe78c619e7ea20046131294ad087f053330,benign,benign,ctu_normal14_win_full_2017.pcap,10.0.2.15:50087-45.55.217.192:443-6-1258445,114.41666666666666,149.58394319112617,571,54,150.66666666666666,206.86581802382594,571,54,904,39.09090909090909,52.21964102797825,126,0,86.0,78.37091297158659,153,0,60.2,57.47782180980765,126,1,20.0,0.0,0.0,0.0,0.0,204.69444444444446,201.01362738645787,571.0,54.0,114.41666666666666,5,7,10.0.2.15,45.55.217.192,50087,443,6,12,anon-sms.com,t12d1712h2_67e6df579eba_88be6878e1da,c6227321ea7621862dc7b7351771a62c3341,c2_beaconing,mta_bumblebee,BumbleBee_2022-06-14.pcap,10.6.14.101:49187-172.93.181.105:443-6-1655229975043,134.19999999999996,195.7502705516716,921,60,160.8181818181818,258.9176773346378,921,60,1769,22.52631578947368,38.39758155152285,98,0,42.8,44.97357248676407,99,0,42.25,45.74697491950385,99,0,73.0,0.0,0.0,0.0,0.0,299.29831649831647,338.44413594267894,921.0,60.0,134.19999999999996,12,13,10.6.14.101,172.93.181.105,49187,443,6,20,hocavopeh.com,t12d190700_d83cc789557e_2dae41c691ec,ae4edc6faf64d08308082ad26be607673351,c2_beaconing,mta_pikabot,Pikabot_2023-11-02.pcap,10.11.2.101:52787-15.235.202.109:2226-6-1698939026769,249.05000000000007,364.28653774048166,1430,60,160.9090909090909,218.6094483527437,749,60,1770,3676.8421052631575,15315.314645671058,66908,0,6986.0,21060.024095164015,66908,0,8697.125,23656.74554019575,67235,0,306.5,0.0,0.0,0.0,0.0,506.19298540965207,534.4495584193572,1430.0,60.0,249.05000000000007,12,13,10.11.2.101,15.235.202.109,52787,2226,6,20,,t12i190700_d83cc789557e_7af1ed941c26,ec74a5c51106f0419184d0dd08fb05bc3360,benign,benign,ctu_normal14_win_full_2017.pcap,10.0.2.15:51016-207.46.194.10:443-6-2658103,316.2352941176471,511.99542593315283,1474,54,111.71428571428572,98.22714201569455,296,54,782,154.75,494.47069343558337,1998,0,403.6666666666667,787.2465094661688,1998,1,269.1111111111111,727.9416948568828,2209,0,54.0,0.0,0.0,0.0,0.0,477.0388422035481,549.4598044281728,1474.0,54.0,296.0,11,13,10.0.2.15,207.46.194.10,51016,443,6,17,c1.microsoft.com,t12d1711h2_67e6df579eba_de5ccbe16bdd,96c9f2048f1e949c8bb9ad97c36c9eea3370,c2_beaconing,mta_emotet,Emotet_2022-11-07_0.pcap,192.168.1.133:52270-104.248.155.133:443-6-1667837863354,172.94736842105263,314.1237324658002,1432,54,99.33333333333333,60.433848131655495,212,54,894,263.27777777777777,724.0371135722708,3021,0,592.3749999999999,1031.5566513769372,3022,0,499.22222222222223,1008.7143770386366,3068,0,24.5,0.0,0.0,0.0,0.0,416.60896686159845,546.6938267571593,1432.0,54.0,172.94736842105263,14,16,192.168.1.133,104.248.155.133,52270,443,6,19,,t12i190700_d83cc789557e_7af1ed941c26,ec74a5c51106f0419184d0dd08fb05bc3381,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:50556-194.165.16.90:443-6-1668458383576,435.77777777777777,589.6705294767014,1514,54,459.3846153846154,631.944425096271,1514,54,5972,52.15384615384616,132.899267810682,474,0,113.0,180.88771002023225,474,0,88.3076923076923,175.0325610733541,474,0,1.0,0.0,0.0,0.0,0.0,668.1132817799485,618.2566902665315,1514.0,54.0,435.77777777777777,16,18,172.16.24.174,194.165.16.90,50556,443,6,27,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b73390,benign,benign,ctu_normal21_kali_2017.pcap,192.168.1.191:60002-104.199.104.168:443-6-1493727010215,410.96296296296293,518.885008861937,1474,66,307.0625,437.7567770273046,1474,66,4913,151.3076923076923,368.3418813255717,1728,0,262.2666666666667,459.60611500760183,1728,0,345.4,607.1653993947796,1883,0,92.5,0.0,0.0,0.0,0.0,655.5684857837635,600.2119782896006,1474.0,66.0,410.96296296296293,21,22,192.168.1.191,104.199.104.168,60002,443,6,27,s.pubmine.com,t12d1110h2_43e74fd21232_205f67e4d9f4,30e7675adab2c5b915e4bb356e9e1cc13400,c2_beaconing,mta_emotet,Emotet_2022-11-07_1.pcap,192.168.1.133:60396-208.84.244.144:465-6-1667841909091,64.0,4.898979485566356,66,54,66.0,0.0,66,66,330,15001.0,25275.592703238435,59962,1027,3760.75,3085.338703719037,8000,1027,0.0,0.0,0,0,4003.0,0.0,0.0,0.0,0.0,60.44444444444444,5.7948465824023545,66.0,54.0,64.0,0,1,192.168.1.133,208.84.244.144,60396,465,6,6,,,3410,c2_beaconing,mta_qakbot,Qakbot_2023-05-10.pcap,172.16.10.73:50593-20.54.24.231:443-6-1683743884543,211.78571428571428,341.2831296785333,1514,54,155.00000000000003,181.50252523495828,705,54,2015,4077.185185185185,21008.884693856835,109199,0,9173.666666666666,31499.901316824737,109199,0,7853.142857142859,29169.715854888695,109200,0,31.0,0.0,0.0,0.0,0.0,502.531746031746,572.9379243908902,1514.0,54.0,211.78571428571428,19,21,172.16.10.73,20.54.24.231,50593,443,6,28,array614.prod.do.dsp.mp.microsoft.com,t12d1809h2_4b22cbed5bed_7af1ed941c26,a02d7ceb8c8cbb4da2e6007f5a1c91e43421,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:50834-194.165.16.90:443-6-1668458787803,466.32,610.5326035520134,1514,54,493.1666666666667,647.6681014971864,1514,54,5918,65.875,161.77421530988934,598,0,143.72727272727272,219.30713208151298,599,0,114.0,214.34297070561723,598,0,2.0,0.0,0.0,0.0,0.0,678.3361253561253,614.6092548983562,1514.0,54.0,466.32,14,16,172.16.24.174,194.165.16.90,50834,443,6,25,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b73430,c2_beaconing,mta_pikabot,Pikabot_2023-05-23.pcap,10.1.0.186:55137-20.99.133.109:443-6-1684857728218,799.3838383838382,679.9906618066898,1514,54,110.38888888888886,246.57103036624764,1514,54,3974,9.030612244897961,28.971174469405877,154,0,25.28571428571429,44.961795173347824,154,0,11.79032258064516,30.59097536308262,119,0,2.0,0.0,0.0,0.0,0.0,756.3186628186628,650.7987568685323,1514.0,54.0,799.3838383838382,78,80,10.1.0.186,20.99.133.109,55137,443,6,99,displaycatalog.mp.microsoft.com,t13d2012h2_2b729b4bf6f3_9e7b989ebec8,15af977ce25de452b96affa2addb10363441,c2_beaconing,mta_gozi,Gozi_2023-07-12.pcap,10.7.12.121:50196-170.130.55.162:443-6-1689203671496,390.76190476190476,575.9654420850183,1514,54,164.2222222222222,209.92187700295662,636,54,1478,542.7500000000001,2301.383036693142,10312,0,1356.8750000000002,3621.2386766921936,10312,0,983.4545454545455,3096.483242765456,10312,0,38.0,0.0,0.0,0.0,0.0,549.0723104056437,555.610104810533,1514.0,54.0,390.76190476190476,11,13,10.7.12.121,170.130.55.162,50196,443,6,21,iamupdate.com,t12d190700_d83cc789557e_2dae41c691ec,4ce0442e9d20d092d9d74e9ce54b363a3450,benign,benign,ctu_normal14_win_full_2017.pcap,10.0.2.15:52105-54.229.78.38:443-6-3405950,140.6470588235294,167.88498338761218,594,54,158.74999999999997,193.38691786157614,594,54,1270,256.375,835.2272245722517,3374,0,586.0,1241.6213861989759,3379,2,502.75000000000006,1285.8956578420907,3683,3,41.0,0.0,0.0,0.0,0.0,253.6614015976761,224.82123370728348,594.0,54.0,140.6470588235294,11,13,10.0.2.15,54.229.78.38,52105,443,6,17,ml314.com,t12d1711h2_67e6df579eba_de5ccbe16bdd,303951d4c50efb2e991652225a6f02b13461,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:50976-194.165.16.90:443-6-1668459009229,466.32,610.5326035520134,1514,54,493.1666666666667,647.6681014971864,1514,54,5918,71.5,177.20437721554123,648,0,156.0,240.65327755923042,649,0,124.0,235.1850335374256,648,0,1.0,0.0,0.0,0.0,0.0,678.3361253561253,614.6092548983562,1514.0,54.0,466.32,14,16,172.16.24.174,194.165.16.90,50976,443,6,25,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b73470,benign,benign,ctu_normal21_kali_2017.pcap,192.168.1.191:48394-54.76.253.20:443-6-1493727169883,241.1794871794872,375.52909143702783,1514,54,186.1304347826087,275.58603743952733,885,54,4281,1418.9210526315794,3315.010394028619,10022,0,2450.863636363636,4130.025519296859,10268,0,3590.2666666666664,4622.0409447816555,10256,0,61.0,0.0,0.0,0.0,0.0,537.1802691068996,575.0510516259428,1514.0,54.0,241.1794871794872,24,29,192.168.1.191,54.76.253.20,48394,443,6,39,p.skimresources.com,t12d1109h2_43e74fd21232_fed6c16fddd0,303951d4c50efb2e991652225a6f02b13481,c2_beaconing,mta_gozi,Gozi_2023-07-12.pcap,10.7.12.121:50285-170.130.55.162:443-6-1689204095947,377.4090909090909,556.8627820286233,1514,54,153.2,200.96201962891726,636,54,1532,528.6190476190478,2298.4845545748285,10552,0,1233.4444444444443,3497.0917242442724,10552,0,1004.7272727272727,3168.945852832109,10552,0,37.0,0.0,0.0,0.0,0.0,546.7621212121212,556.9143729983614,1514.0,54.0,377.4090909090909,13,15,10.7.12.121,170.130.55.162,50285,443,6,22,iamupdate.com,t12d190700_d83cc789557e_2dae41c691ec,4ce0442e9d20d092d9d74e9ce54b363a3491,c2_beaconing,mta_icedid,IcedID_2022-01-12.pcap,10.22.5.47:50200-104.168.44.45:443-6-1642007523047,219.21052631578942,365.7496987083696,1279,60,211.27272727272728,373.0335349292583,1279,60,2324,61.222222222222214,99.71226578366584,226,0,110.2,115.180824021285,226,0,126.99999999999999,116.0660731365257,226,0,5.0,0.0,0.0,0.0,0.0,506.95647262094633,523.8724558061662,1279.0,60.0,219.21052631578942,12,13,10.22.5.47,104.168.44.45,50200,443,6,19,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b73500,benign,benign,ctu_normal14_win_full_2017.pcap,10.0.2.15:50990-23.77.200.228:443-6-2597338,117.91666666666666,149.26818959256667,571,54,150.66666666666666,206.86581802382594,571,54,904,290.2727272727273,905.6974208762098,3020,0,638.6,1332.0357727929081,3021,0,627.2,1338.4334873276296,3021,1,28.0,0.0,0.0,0.0,0.0,207.08333333333334,200.32545279379013,571.0,54.0,117.91666666666666,7,9,10.0.2.15,23.77.200.228,50990,443,6,12,c.microsoft.com,t12d1712h2_67e6df579eba_88be6878e1da,410b9bedaf65dd26c6fe547154d60db43510,exfil,mta_astaroth,Astaroth_2023-01-04_0.pcap,10.1.4.101:49801-20.49.150.241:443-6-1672821828967,277.92,451.7201309070326,1514,54,194.54545454545453,305.73170055993984,1089,54,2140,29.833333333333332,49.013455709424434,120,0,71.6,66.16679261113119,174,0,46.0,59.25931712960138,120,0,61.0,0.0,0.0,0.0,0.0,566.0993362193362,589.5266950647791,1514.0,54.0,277.92,17,19,10.1.4.101,20.49.150.241,49801,443,6,25,settings-win.data.microsoft.com,t12d1909h2_d83cc789557e_7af1ed941c26,2fe9b0e731d3d41b2b84e8e1d61868363520,c2_beaconing,mta_pikabot,Pikabot_2023-11-02.pcap,10.11.2.101:52742-188.26.127.4:13785-6-1698934811809,232.95454545454544,350.32929778012686,1430,60,160.8181818181818,218.34047640408693,748,60,1769,4983.52380952381,16969.030357150783,75090,0,10446.6,24015.10924489923,75091,0,10447.199999999999,24033.616978446393,75090,0,173.0,0.0,0.0,0.0,0.0,498.54040404040404,537.1149225790855,1430.0,60.0,232.95454545454544,15,16,10.11.2.101,188.26.127.4,52742,13785,6,22,,t12i190700_d83cc789557e_7af1ed941c26,ec74a5c51106f0419184d0dd08fb05bc3530,benign,benign,ctu_normal14_win_full_2017.pcap,10.0.2.15:51784-151.101.0.175:443-6-3361369,521.8157894736842,601.1877817563691,1474,54,218.21428571428572,266.02896851266416,721,54,3055,264.00000000000006,1178.3974994316081,6937,0,751.3846153846154,1943.648182261969,6937,1,423.4347826086957,1537.130379106321,7191,0,5.0,0.0,0.0,0.0,0.0,585.5496379838485,537.1239555562095,1474.0,54.0,521.8157894736842,26,28,10.0.2.15,151.101.0.175,51784,443,6,38,cdn.krxd.net,t12d1712h2_67e6df579eba_88be6878e1da,1d0e57c6ae42e9204defa51e5e1cdc4c3541,c2_beaconing,mta_icedid,IcedID_2023-09-28.pcap,10.10.20.147:50795-172.86.75.88:443-6-1695913515248,62.5,8.535639569308374,71,54,62.5,8.571731229523383,71,54,3750,14718.58823529412,25789.579430003712,60063,0,29686.644067796613,30019.079518936473,60063,186,29685.54237288135,30069.254211547894,60113,144,155.5,0.0,0.0,0.0,0.0,62.5,6.940220937885671,71.0,54.0,62.5,119,119,10.10.20.147,172.86.75.88,50795,443,6,120,,,3550,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:52426-142.251.40.78:443-6-1668468638243,201.76923076923075,257.8200773944735,786,54,206.85714285714283,247.95727358520764,664,54,1448,7.666666666666666,14.227587371871676,45,0,15.333333333333332,18.151216671801002,46,0,14.8,19.473058311420935,45,1,2.0,0.0,0.0,0.0,0.0,333.6066341066341,299.15564837668126,786.0,54.0,201.76923076923075,10,12,172.16.24.174,142.251.40.78,52426,443,6,13,google.com,t12d190700_d83cc789557e_2dae41c691ec,b31c0b82752ea0e2c48b8ce46e9263e53561,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:52141-194.165.16.90:443-6-1668460666993,466.32,610.5326035520134,1514,54,493.1666666666667,647.6681014971864,1514,54,5918,65.04166666666667,166.25137571622145,580,0,141.8181818181818,227.24780226960092,580,0,112.83333333333333,221.89589423598596,580,0,1.0,0.0,0.0,0.0,0.0,678.3361253561253,614.6092548983562,1514.0,54.0,466.32,14,16,172.16.24.174,194.165.16.90,52141,443,6,25,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b73570,benign,benign,ctu_normal14_win_full_2017.pcap,10.0.2.15:50912-91.190.219.145:443-6-2420348,444.1470588235294,582.3103479715294,1514,54,295.2142857142857,452.26288790947655,1514,54,4133,302.6363636363636,1601.3671857623299,9209,0,768.2307692307692,2539.862271654579,9209,0,521.421052631579,2107.0038051906117,9209,0,53.0,0.0,0.0,0.0,0.0,661.3068160597572,615.9938942380973,1514.0,54.0,444.1470588235294,26,28,10.0.2.15,91.190.219.145,50912,443,6,34,login.skype.com,t12d1712h2_67e6df579eba_88be6878e1da,a8d2a5625ef8f3aada2fb53dad3f29213580,benign,benign,ctu_normal21_kali_2017.pcap,192.168.1.191:37026-54.171.26.59:443-6-1493727046742,234.38235294117646,400.20085977418006,1514,66,107.15789473684211,113.3442461206345,527,66,2036,1875.090909090909,3891.583541468341,10026,0,3437.666666666667,4811.2034204491065,10112,0,4415.928571428572,5063.905735911541,10100,0,58.5,0.0,0.0,0.0,0.0,498.8970645568169,563.5176217634856,1514.0,66.0,234.38235294117646,18,19,192.168.1.191,54.171.26.59,37026,443,6,34,sync.teads.tv,t12d1109h2_43e74fd21232_fed6c16fddd0,303951d4c50efb2e991652225a6f02b13591,c2_beaconing,mta_gozi,Gozi_2023-07-12.pcap,10.7.12.121:49922-170.130.55.162:443-6-1689202467614,307.35714285714283,489.85910402782326,1514,54,124.85714285714285,173.55728699231233,636,54,1748,402.0,2010.9952951021733,10461,0,834.9230769230769,2893.216130350976,10461,0,831.7692307692307,2894.1660040457873,10461,0,1.0,0.0,0.0,0.0,0.0,527.563492063492,562.0146890500166,1514.0,54.0,307.35714285714283,21,23,10.7.12.121,170.130.55.162,49922,443,6,28,iamupdate.com,t12d190700_d83cc789557e_2dae41c691ec,4ce0442e9d20d092d9d74e9ce54b363a3601,c2_beaconing,mta_icedid,IcedID_2022-07-06.pcap,10.7.1.7:54369-92.38.171.191:443-6-1657133362181,177.0,288.88150912751314,1356,60,114.60000000000001,75.46183730130674,265,60,1146,3815.6315789473683,13810.349549886798,59966,0,8055.222222222223,19767.552888368467,59966,2,6848.777777777777,20010.71312933261,60210,3,155.5,0.0,0.0,0.0,0.0,409.77777777777777,510.8827953819584,1356.0,60.0,177.0,16,17,10.7.1.7,92.38.171.191,54369,443,6,20,uytricmpreprom.com,t12d210700_76e208dd3e22_f28add8e7af0,ec74a5c51106f0419184d0dd08fb05bc3611,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:52128-194.165.16.90:443-6-1668460644789,466.32,610.5326035520134,1514,54,493.1666666666667,647.6681014971864,1514,54,5918,63.208333333333336,154.17973113465214,538,0,137.9090909090909,208.54277956594638,539,0,109.58333333333333,203.98861747804963,538,0,101.5,0.0,0.0,0.0,0.0,678.3361253561253,614.6092548983562,1514.0,54.0,466.32,14,16,172.16.24.174,194.165.16.90,52128,443,6,25,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b73621,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:51826-194.165.16.90:443-6-1668460162777,466.32,610.5326035520134,1514,54,493.1666666666667,647.6681014971864,1514,54,5918,59.0,144.4961260199823,485,0,128.72727272727272,195.79330474206256,486,0,100.08333333333334,190.05810515032852,485,0,1.0,0.0,0.0,0.0,0.0,678.3361253561253,614.6092548983562,1514.0,54.0,466.32,14,16,172.16.24.174,194.165.16.90,51826,443,6,25,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b73631,exfil,mta_lumma,Lumma_2025-08-13.pcap,10.8.13.101:55695-138.124.101.92:443-6-1755122444401,678.2873563218394,709.7038509132307,1514,54,1263.3023255813957,534.890933915447,1514,54,54322,18.11627906976744,118.69232777669589,1072,0,37.095238095238095,168.97666306238276,1073,0,32.581395348837205,165.88252190691193,1072,0,1.5,0.0,0.0,0.0,0.0,747.9064293023797,654.4952285722815,1514.0,54.0,678.2873563218394,24,26,10.8.13.101,138.124.101.92,55695,443,6,87,secrequ.top,t13d201200_2b729b4bf6f3_e24568c0d440,15af977ce25de452b96affa2addb10363641,c2_beaconing,mta_gootloader,GootLoader_2023-12-29.pcap,10.12.29.101:51385-104.21.75.153:443-6-1703877671132,259.0,418.79509707413405,1514,54,319.875,504.7495666169512,1514,54,2559,16.466666666666665,42.85834918937143,163,0,35.285714285714285,60.05196162689521,164,0,29.85714285714286,60.68890225686124,163,0,20.0,0.0,0.0,0.0,0.0,554.4444444444445,585.1538974655606,1514.0,54.0,259.0,11,13,10.12.29.101,104.21.75.153,51385,443,6,16,instawp.io,t12d210700_76e208dd3e22_2dae41c691ec,b31c0b82752ea0e2c48b8ce46e9263e53650,benign,benign,ctu_normal20_win_2017_https.pcap,10.0.2.15:49277-193.104.215.66:443-6-702785,432.3823529411764,571.1959285307044,1474,54,116.49999999999999,120.25994572364709,445,54,1398,22.000000000000004,51.557007283200605,234,0,65.81818181818183,76.24410558439017,240,2,32.04761904761906,62.208903052920164,234,0,2.0,0.0,0.0,0.0,0.0,523.1737967914438,543.128228724022,1474.0,54.0,432.3823529411764,25,27,10.0.2.15,193.104.215.66,49277,443,6,34,get.adobe.com,t12d1509h2_073e58a039a6_e70312a1ce2c,959bfcf87532cbff1253e80a4ee813083661,c2_beaconing,mta_icedid,IcedID_2023-09-28.pcap,10.10.20.147:50982-141.98.80.158:443-6-1695923239857,432.6060606060606,605.525595009923,1514,54,356.4117647058824,573.8497254098334,1514,54,6059,31.843750000000004,91.09162681501769,364,0,63.68749999999999,122.79018351100656,365,0,56.26666666666666,123.01130416502767,364,0,1.0,0.0,0.0,0.0,0.0,667.3978139235492,619.5411575271487,1514.0,54.0,432.6060606060606,18,20,10.10.20.147,141.98.80.158,50982,443,6,33,umomrmwa.com,t12d190800_d83cc789557e_7af1ed941c26,f176ba63b4d68e576b5ba345bec2c7b73670,benign,benign,ctu_normal14_win_full_2017.pcap,10.0.2.15:49306-172.217.23.195:443-6-499210,450.7301587301587,599.1416496404214,1474,54,92.04347826086958,65.1798060339589,295,54,2117,3875.2580645161293,12427.594667150981,45028,0,10921.181818181818,19184.172555313264,45028,0,6160.179487179487,15282.257131912285,45032,0,6.0,0.0,0.0,0.0,0.0,511.63873744344755,550.5959447755724,1474.0,54.0,295.0,47,49,10.0.2.15,172.217.23.195,49306,443,6,63,www.google.cz,t12d1710h2_67e6df579eba_4a7a952b215a,b26c652e0a402a24b5ca2a660e84f9d53680,benign,benign,ctu_normal21_kali_2017.pcap,192.168.1.191:40824-95.154.251.121:443-6-1493726905799,211.33333333333331,271.39682771771317,983,54,282.7142857142857,361.73457778031775,983,66,1979,179.28571428571428,168.32497349857715,440,0,363.1666666666667,189.97833209781234,629,56,295.7142857142857,273.9164801453868,602,0,225.0,0.0,0.0,0.0,0.0,366.880291005291,357.06668835520435,983.0,54.0,211.33333333333331,8,10,192.168.1.191,95.154.251.121,40824,443,6,15,delivery.swid.switchadhub.com,t12d1110h2_43e74fd21232_205f67e4d9f4,8529fd8de0d7f73186ef5ea8b4531a763691,c2_beaconing,mta_icedid,IcedID_2023-05-10.pcap,172.16.10.73:50422-81.224.201.143:2222-6-1683739957605,165.34782608695653,228.98245440836175,785,54,155.92307692307693,234.140435614491,785,54,2027,4241.545454545454,14403.317758426927,61605,0,7776.166666666666,19133.025645028894,61605,0,10350.222222222223,21760.60861268463,61605,1,162.0,0.0,0.0,0.0,0.0,334.7634336677815,320.99094151625974,785.0,54.0,165.34782608695653,14,16,172.16.10.73,81.224.201.143,50422,2222,6,23,,t13i201100_2b729b4bf6f3_2e4f304f1f45,2253c82f03b621c5144709b393fde2c93701,c2_beaconing,mta_pikabot,Pikabot_2023-11-02.pcap,10.11.2.101:53044-51.195.232.97:13782-6-1698964809514,234.9090909090909,354.10718166099946,1430,60,152.5,210.46161386127142,749,60,1830,6512.0952380952385,20320.242284246422,75057,0,12419.090909090908,27299.853019584356,75057,0,15178.111111111111,29775.150228187114,75057,0,140.5,0.0,0.0,0.0,0.0,501.13434343434346,536.5777669087887,1430.0,60.0,234.9090909090909,14,15,10.11.2.101,51.195.232.97,53044,13782,6,22,,t12i190700_d83cc789557e_7af1ed941c26,ec74a5c51106f0419184d0dd08fb05bc3710,benign,benign,ctu_normal21_kali_2017.pcap,192.168.1.191:58198-46.137.109.36:443-6-1493726943273,337.37499999999994,491.01047651091744,1514,66,116.07142857142858,110.74743566103237,444,66,1625,146.91304347826087,454.3857905352193,2131,0,259.9230769230769,589.3724715800784,2131,0,367.22222222222223,704.7199404333926,2131,0,75.0,0.0,0.0,0.0,0.0,530.0718253968254,558.9646228558963,1514.0,66.0,337.37499999999994,18,19,192.168.1.191,46.137.109.36,58198,443,6,24,beacon.krxd.net,t12d1109h2_43e74fd21232_fed6c16fddd0,303951d4c50efb2e991652225a6f02b13720,benign,benign,ctu_normal20_win_2017_https.pcap,10.0.2.15:49461-104.125.18.180:443-6-1314949,141.48936170212767,282.62956800457613,1474,54,129.22727272727272,240.19137842228696,1086,54,2843,2768.760869565218,4528.5247300235405,10555,0,6064.904761904761,5016.329752964431,10556,4,5306.000000000001,5108.12312166484,10556,0,8.5,0.0,0.0,0.0,0.0,513.2218482699334,598.4084573096044,1474.0,54.0,141.48936170212767,39,41,10.0.2.15,104.125.18.180,49461,443,6,47,wwwimages2.adobe.com,t12d1510h2_073e58a039a6_60bf0a45ed8c,410b9bedaf65dd26c6fe547154d60db43731,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:51155-213.91.235.146:443-6-1668459277931,221.61904761904762,362.6712666024806,1241,54,134.66666666666663,205.0952476437731,768,54,1616,3323.7499999999995,10078.101245953238,35080,0,6043.181818181818,13225.057503226077,35080,0,8277.0,15130.875482176927,35080,1,200.0,0.0,0.0,0.0,0.0,456.2045855379189,469.8491781261876,1241.0,54.0,221.61904761904762,14,16,172.16.24.174,213.91.235.146,51155,443,6,21,,t12i190600_d83cc789557e_2dae41c691ec,ec74a5c51106f0419184d0dd08fb05bc3741,c2_beaconing,mta_icedid,IcedID_2022-12-20.pcap,10.3.24.178:54687-23.81.246.152:443-6-1671553024124,158.00000000000003,210.3018993943918,732,54,148.2,214.50034965006466,732,54,1482,20.16666666666666,40.97811467543304,143,0,40.333333333333336,52.203927055347094,144,0,36.375,53.77183941698214,143,0,1.0,0.0,0.0,0.0,0.0,312.78765432098766,295.3562155412215,732.0,54.0,158.00000000000003,14,16,10.3.24.178,23.81.246.152,54687,443,6,19,xedefeg.com,t12d190700_d83cc789557e_2dae41c691ec,ae4edc6faf64d08308082ad26be607673751,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:50088-194.165.16.90:443-6-1668457671334,466.32,610.5326035520134,1514,54,493.1666666666667,647.6681014971864,1514,54,5918,62.291666666666664,154.17705213746012,562,0,135.9090909090909,209.08010644030892,562,0,104.58333333333333,202.4838751529852,562,0,112.5,0.0,0.0,0.0,0.0,678.3361253561253,614.6092548983562,1514.0,54.0,466.32,14,16,172.16.24.174,194.165.16.90,50088,443,6,25,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b73760,benign,benign,ctu_normal21_kali_2017.pcap,192.168.1.191:53244-95.172.94.60:443-6-1493726478110,101.00000000000001,125.88983279042036,571,54,115.89999999999999,160.877765883156,571,54,1159,347.5625,1357.250110517586,5437,0,617.8888888888889,1818.8501480636362,5468,0,921.6666666666666,2226.314862427744,5466,0,31.0,0.0,0.0,0.0,0.0,199.06825396825397,202.93558083107595,571.0,54.0,101.00000000000001,9,11,192.168.1.191,95.172.94.60,53244,443,6,17,secure.quantserve.com,t12d1110h2_43e74fd21232_205f67e4d9f4,fbe78c619e7ea20046131294ad087f053771,c2_beaconing,mta_bumblebee,BumbleBee_2022-06-14.pcap,10.6.14.101:49179-172.93.181.105:443-6-1655229967689,157.94444444444446,190.450695247514,714,60,145.11111111111111,174.64209432754495,578,60,1306,23.529411764705877,36.42992871091505,88,0,39.875,42.37060133090935,94,0,40.875,42.4884438070266,91,0,71.0,0.0,0.0,0.0,0.0,295.53703703703707,269.4779869665305,714.0,60.0,157.94444444444446,12,13,10.6.14.101,172.93.181.105,49179,443,6,18,hocavopeh.com,t12d190700_d83cc789557e_2dae41c691ec,ae4edc6faf64d08308082ad26be607673780,exfil,mta_astaroth,Astaroth_2023-01-04_0.pcap,10.1.4.101:49680-20.42.73.24:443-6-1672807413854,488.89189189189176,612.0250441400699,1514,54,597.1764705882355,660.4011314434317,1514,54,10152,3053.8333333333335,18261.4696255727,109579,0,6871.125,27388.780673541005,109579,0,5783.315789473683,25135.284955289957,109579,0,10.0,0.0,0.0,0.0,0.0,687.435373608903,613.3110870496804,1514.0,54.0,488.89189189189176,20,22,10.1.4.101,20.42.73.24,49680,443,6,37,self.events.data.microsoft.com,t12d190800_d83cc789557e_7af1ed941c26,986571066668055ae9481cb84fda634a3790,benign,benign,ctu_normal14_win_full_2017.pcap,10.0.2.15:52222-172.217.23.193:443-6-3418963,120.39999999999999,145.71684871695516,589,54,149.375,192.81889170929284,589,54,1195,514.8571428571428,1790.2751768348935,6730,0,1029.5714285714287,2515.9059903702587,6730,0,1197.6666666666667,2847.001486944934,7009,16,30.0,0.0,0.0,0.0,0.0,212.34007936507936,207.36952063632515,589.0,54.0,120.39999999999999,7,9,10.0.2.15,172.217.23.193,52222,443,6,15,tpc.googlesyndication.com,t12d1711h2_67e6df579eba_de5ccbe16bdd,c74a0764cf5d01aa28d5c7769cd86fc13801,c2_beaconing,mta_icedid,IcedID_2022-01-12.pcap,10.22.5.47:50122-104.168.44.45:443-6-1642007322471,211.25,357.77026957179334,1279,60,198.66666666666669,358.34425635219276,1279,60,2384,1926.2631578947369,8128.667950477668,35491,0,3327.1818181818185,10668.099022957951,35491,0,5193.285714285714,13456.585695169058,35709,0,203.0,0.0,0.0,0.0,0.0,504.6712962962963,525.1658433105772,1279.0,60.0,211.25,13,14,10.22.5.47,104.168.44.45,50122,443,6,20,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b73811,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:51683-194.165.16.90:443-6-1668459928943,466.32,610.5326035520134,1514,54,493.1666666666667,647.6681014971864,1514,54,5918,73.29166666666667,183.3413255833683,622,0,159.9090909090909,249.76967571963357,623,0,129.0,244.54633321910407,622,0,1.0,0.0,0.0,0.0,0.0,678.3361253561253,614.6092548983562,1514.0,54.0,466.32,14,16,172.16.24.174,194.165.16.90,51683,443,6,25,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b73821,c2_beaconing,mta_pikabot,Pikabot_2023-11-02.pcap,10.11.2.101:52778-15.235.47.206:13783-6-1698937937317,740.9154150197643,681.4375287106789,1430,60,60.86904761904755,22.21544791754692,776,60,76695,66.83036773428233,2252.4848315203667,84937,0,134.24463860206512,3191.6961175895203,84937,0,66.20015760441292,2104.8465942812527,74960,0,1.0,0.0,0.0,0.0,0.0,670.3768388058874,597.6559919829259,1430.0,60.0,740.9154150197643,2207,2208,10.11.2.101,15.235.47.206,52778,13783,6,2530,,t12i190700_d83cc789557e_7af1ed941c26,fd4bc6cea4877646ccd62f0792ec0b623831,c2_beaconing,mta_bumblebee,BumbleBee_2022-06-14.pcap,10.6.14.101:49170-172.93.181.105:443-6-1655229955621,161.45454545454544,276.03273223309816,1331,60,214.75,367.19876336690163,1331,60,2577,18.85714285714286,32.13765037193247,80,0,36.0,40.1845741547674,91,0,36.0,38.31448812133603,80,0,43.0,0.0,0.0,0.0,0.0,398.9671717171717,503.174935978857,1331.0,60.0,161.45454545454544,14,15,10.6.14.101,172.93.181.105,49170,443,6,22,hocavopeh.com,t12d190700_d83cc789557e_2dae41c691ec,ae4edc6faf64d08308082ad26be607673840,benign,benign,ctu_normal20_win_2017_https.pcap,10.0.2.15:65461-151.101.113.111:443-6-10833240,448.64062499999983,601.9798384850279,1474,54,89.44000000000001,73.46262088073544,330,54,2236,65.4920634920635,275.9366379475592,2101,0,171.875,433.109616860895,2101,0,108.1842105263158,355.1025626691883,2102,0,3.0,0.0,0.0,0.0,0.0,517.4420067663817,550.0973226187366,1474.0,54.0,330.0,47,49,10.0.2.15,151.101.113.111,65461,443,6,64,assets.guim.co.uk,t12d1509h2_073e58a039a6_e70312a1ce2c,860fcf58fd757e26aa8911e5eaff6b533850,benign,benign,ctu_normal14_win_full_2017.pcap,10.0.2.15:51073-23.77.200.228:443-6-2674100,105.13333333333333,134.93271691935243,571,54,136.85714285714286,192.34381418996261,571,54,958,464.78571428571433,1684.2767988560654,6316,0,1084.1666666666667,2563.7361343684856,6317,0,921.7142857142858,2378.819925529303,6316,0,3.5,0.0,0.0,0.0,0.0,203.2628306878307,201.98838825281535,571.0,54.0,105.13333333333333,7,9,10.0.2.15,23.77.200.228,51073,443,6,15,c.microsoft.com,t12d1712h2_67e6df579eba_88be6878e1da,410b9bedaf65dd26c6fe547154d60db43860,benign,benign,ctu_normal21_kali_2017.pcap,192.168.1.191:35940-62.67.193.75:443-6-1493726903834,222.07499999999993,380.48372636111657,1454,54,175.82608695652172,316.839169435437,1147,54,4044,2575.7435897435894,4358.719408254223,10031,0,4566.090909090908,5035.60642689439,10160,1,6276.8125,4926.469096878615,10144,1,84.0,0.0,0.0,0.0,0.0,544.3942384200056,581.8131892963054,1454.0,54.0,222.07499999999993,17,19,192.168.1.191,62.67.193.75,35940,443,6,40,pixel-eu.rubiconproject.com,t12d1109h2_43e74fd21232_fed6c16fddd0,0a917d753018dad73d9899ace370f8d83871,c2_beaconing,mta_pikabot,Pikabot_2023-10-03.pcap,10.1.2.147:49363-167.86.96.3:2222-6-1696347951328,219.6666666666667,336.3195512897074,1430,60,138.28571428571428,194.42634696872847,744,60,1936,5221.130434782607,17683.31680967415,74991,0,9237.384615384615,23089.405007269972,74991,0,13327.000000000002,27204.396786181456,74991,2,147.0,0.0,0.0,0.0,0.0,497.2835978835979,538.225742881538,1430.0,60.0,219.6666666666667,15,16,10.1.2.147,167.86.96.3,49363,2222,6,24,,t12i190600_d83cc789557e_2dae41c691ec,ec74a5c51106f0419184d0dd08fb05bc3880,exfil,mta_stealc,StealC_2025-06-18.pcap,172.16.1.128:57405-54.224.241.105:443-6-1750264238952,460.3103448275862,594.6728454397834,1514,54,164.23076923076925,319.20138727929367,1213,54,2135,5060.821428571429,18232.237960300026,73915,0,11808.583333333332,27010.543491749602,73915,0,4515.266666666666,16740.194266096994,64997,0,54.5,0.0,0.0,0.0,0.0,636.4906793398172,591.4679159857055,1514.0,54.0,460.3103448275862,23,25,172.16.1.128,54.224.241.105,57405,443,6,29,p13n.adobe.io,t12d180700_4b22cbed5bed_2dae41c691ec,2ab44dd8c27bdce434a961463587356a3891,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:50684-213.67.255.57:2222-6-1668458574100,163.19047619047618,272.700865243882,1097,54,146.16666666666666,220.54594793719326,788,54,1754,5427.200000000001,18149.743642092693,76971,0,9867.636363636362,24035.116684853965,76971,0,13546.625,27723.06156530284,76972,1,146.0,0.0,0.0,0.0,0.0,404.36067019400355,427.8489531726473,1097.0,54.0,163.19047619047618,12,14,172.16.24.174,213.67.255.57,50684,2222,6,21,,t12i190600_d83cc789557e_2dae41c691ec,fd4bc6cea4877646ccd62f0792ec0b623901,c2_beaconing,mta_pikabot,Pikabot_2023-11-02.pcap,10.11.2.101:52809-15.235.47.206:13783-6-1698941083755,224.86956521739134,343.0647042532179,1430,60,145.3846153846154,203.12825934268662,749,60,1890,4664.272727272726,16588.316706651494,74956,0,8541.333333333334,22120.017439304866,74956,0,11392.666666666666,25236.492585143442,74956,0,118.0,0.0,0.0,0.0,0.0,498.60602006688964,537.8504106914961,1430.0,60.0,224.86956521739134,14,15,10.11.2.101,15.235.47.206,52809,13783,6,23,,t12i190700_d83cc789557e_7af1ed941c26,ec74a5c51106f0419184d0dd08fb05bc3911,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:51763-194.165.16.90:443-6-1668460064635,466.32,610.5326035520134,1514,54,493.1666666666667,647.6681014971864,1514,54,5918,62.083333333333336,148.19197791662197,494,0,135.36363636363637,199.73446008502023,496,0,105.33333333333333,194.00109340522863,494,0,1.0,0.0,0.0,0.0,0.0,678.3361253561253,614.6092548983562,1514.0,54.0,466.32,14,16,172.16.24.174,194.165.16.90,51763,443,6,25,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b73921,exfil,mta_lumma,Lumma_2025-09-24.pcap,10.9.24.101:49906-164.90.129.126:443-6-1758755252207,714.3939393939396,649.394342179705,1410,54,145.57142857142856,179.67180397284696,722,60,3057,77.66153846153847,433.0180884256986,3483,0,252.4,767.9813183034845,3483,0,111.54545454545453,545.0708276803673,3615,0,26.0,0.0,0.0,0.0,0.0,616.6455347122014,535.0280820712217,1410.0,54.0,714.3939393939396,36,37,10.9.24.101,164.90.129.126,49906,443,6,66,fixatmu.pics,t13d201200_2b729b4bf6f3_e24568c0d440,15af977ce25de452b96affa2addb10363931,c2_beaconing,mta_pikabot,Pikabot_2023-05-23.pcap,10.1.0.186:55339-104.238.35.63:8080-6-1684859751460,341.5185185185185,493.85970994343427,1514,54,252.71428571428572,425.6414938873809,1514,54,3538,19.153846153846153,41.20649687385941,157,0,38.307692307692314,52.607643005214584,157,0,33.583333333333336,52.039248008914704,157,0,3.0,0.0,0.0,0.0,0.0,637.2651833762945,632.6291408268324,1514.0,54.0,341.5185185185185,19,21,10.1.0.186,104.238.35.63,55339,8080,6,27,turiruy.us,t13d201200_2b729b4bf6f3_2e4f304f1f45,2253c82f03b621c5144709b393fde2c93940,benign,benign,ctu_normal14_win_full_2017.pcap,10.0.2.15:52426-151.101.16.193:443-6-3622598,254.95000000000007,440.131257336048,1474,54,88.3,71.70936712406082,259,54,883,200.47368421052633,725.5320935103081,3185,0,423.22222222222223,1040.0896328896104,3185,0,417.55555555555554,1119.3784113416596,3398,0,51.0,0.0,0.0,0.0,0.0,459.31666666666666,555.0753452360219,1474.0,54.0,254.95000000000007,12,14,10.0.2.15,151.101.16.193,52426,443,6,20,i.imgur.com,t12d1711h2_67e6df579eba_de5ccbe16bdd,860fcf58fd757e26aa8911e5eaff6b533951,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:52461-138.1.33.162:443-6-1668470156022,349.1923076923077,537.3235166438014,1514,54,191.30769230769232,401.15570223530096,1514,54,2487,5648.599999999999,19586.857949485755,76052,0,11767.916666666666,27540.616179342807,76052,0,11765.083333333334,27541.934583990063,76052,0,34.0,0.0,0.0,0.0,0.0,639.0641025641025,634.68019612069,1514.0,54.0,349.1923076923077,16,18,172.16.24.174,138.1.33.162,52461,443,6,26,oracle.com,t12d190700_d83cc789557e_2dae41c691ec,389ed42c02ebecc32e73aa31def07e143961,c2_beaconing,mta_icedid,IcedID_2022-01-12.pcap,10.22.5.47:49991-104.168.44.45:443-6-1642006832163,219.21052631578942,365.7496987083696,1279,60,211.27272727272728,373.0335349292583,1279,60,2324,69.6111111111111,112.27599339489478,251,0,125.29999999999998,131.2521322578122,268,0,144.85714285714286,129.7310404534815,252,0,10.0,0.0,0.0,0.0,0.0,506.95647262094633,523.8724558061662,1279.0,60.0,219.21052631578942,12,13,10.22.5.47,104.168.44.45,49991,443,6,19,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b73971,c2_beaconing,mta_darkgate,DarkGate_2023-12-07.pcap,10.11.28.11:52250-46.101.78.238:443-6-1701962784096,109.22222222222223,96.89398559479554,320,60,113.20000000000002,115.6339050624859,320,60,566,66.50000000000001,74.37165358618064,156,0,133.0,99.24380753141898,240,0,126.66666666666667,37.80652501002086,156,84,146.0,0.0,0.0,0.0,0.0,153.0746913580247,102.02725459294896,320.0,60.0,109.22222222222223,4,5,10.11.28.11,46.101.78.238,52250,443,6,9,cdn-uk.widgetsfordeploy.com,,3981,c2_beaconing,mta_darkgate,DarkGate_2023-12-07.pcap,10.11.28.11:52158-46.101.78.238:443-6-1701962247438,109.22222222222223,96.89398559479554,320,60,113.20000000000002,115.6339050624859,320,60,566,67.375,75.6721075241258,163,0,134.75,97.28437695745396,233,1,125.33333333333333,38.785736209763165,153,81,142.0,0.0,0.0,0.0,0.0,153.0746913580247,102.02725459294896,320.0,60.0,109.22222222222223,4,5,10.11.28.11,46.101.78.238,52158,443,6,9,cdn-uk.widgetsfordeploy.com,,3991,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:50495-194.165.16.90:443-6-1668458293826,466.32,610.5326035520134,1514,54,493.1666666666667,647.6681014971864,1514,54,5918,62.41666666666666,157.0286367310854,580,0,136.1818181818182,214.28943892866872,581,0,106.25000000000001,207.89819405398666,580,0,1.0,0.0,0.0,0.0,0.0,678.3361253561253,614.6092548983562,1514.0,54.0,466.32,14,16,172.16.24.174,194.165.16.90,50495,443,6,25,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b74000,benign,benign,ctu_normal14_win_full_2017.pcap,10.0.2.15:51529-40.77.226.194:443-6-3176794,376.40740740740745,541.3102522341408,1514,54,263.0833333333333,426.39641358148344,1514,54,3157,1125.6923076923078,4272.547369139219,20490,0,2660.727272727273,6476.998102375963,20687,0,2085.785714285714,5762.518629084807,20490,0,14.0,0.0,0.0,0.0,0.0,641.1730452674898,623.158333896484,1514.0,54.0,376.40740740740745,19,21,10.0.2.15,40.77.226.194,51529,443,6,27,client-s.gateway.messenger.live.com,t12d1710h2_67e6df579eba_4a7a952b215a,4fd467dd264720762ffe286277c00f574010,benign,benign,ctu_normal21_kali_2017.pcap,192.168.1.191:44388-77.238.185.35:443-6-1493726788107,304.53846153846166,444.9974589382938,1514,66,142.92857142857142,171.38641194039332,583,66,2001,239.31999999999994,1015.7886804514675,5099,0,456.9230769230769,1398.8101766345605,5099,0,534.5454545454546,1520.1140328038791,5099,0,52.0,0.0,0.0,0.0,0.0,527.7278184778185,556.4952401852669,1514.0,66.0,304.53846153846166,20,21,192.168.1.191,77.238.185.35,44388,443,6,26,pr-bh.ybp.yahoo.com,t12d1110h2_43e74fd21232_205f67e4d9f4,b898351eb5e266aefd3723d4669354944020,c2_beaconing,mta_emotet,Emotet_2022-11-07_1.pcap,192.168.1.133:59988-162.215.254.72:465-6-1667841744354,709.0824925816025,713.7401837407884,1514,54,1379.6937914406262,378.87379654300054,1514,54,2288912,1.2487384980706464,19.856189892830873,1038,0,2.537394451145958,28.692448434912606,1039,0,2.4304093567251477,28.974789981709478,1093,0,1.0,0.0,0.0,0.0,0.0,761.2920463641817,673.2229525282748,1514.0,54.0,709.0824925816025,887,889,192.168.1.133,162.215.254.72,59988,465,6,3370,,t12i280600_d943125447b4_a8cc486ca5dc,0debd3853f330c574b05e0b6d882dc274030,benign,benign,ctu_normal21_kali_2017.pcap,192.168.1.191:52140-169.55.70.175:443-6-1493727317802,116.05263157894736,127.00414415120062,583,54,116.81818181818178,155.9113967494475,583,54,1285,313.27777777777777,1173.218790364934,5007,0,563.9,1617.5783992678,5163,0,784.2857142857142,1908.7216240445432,5108,0,60.5,0.0,0.0,0.0,0.0,218.87453482190324,205.12195368667983,583.0,54.0,116.05263157894736,11,16,192.168.1.191,169.55.70.175,52140,443,6,19,ce.lijit.com,t12d1110h2_43e74fd21232_205f67e4d9f4,fbe78c619e7ea20046131294ad087f054041,c2_beaconing,mta_icedid,IcedID_2022-10-31_1.pcap,172.16.0.153:57908-198.44.140.67:8008-6-1667231635298,292.80000000000007,404.28736522949924,1354,60,297.99999999999994,428.1736407891857,1354,60,2980,39.473684210526315,66.88744145623605,149,0,66.77777777777777,78.24285554888986,150,0,66.77777777777777,78.2460506635603,150,0,74.5,0.0,0.0,0.0,0.0,568.9333333333334,563.2082070109103,1354.0,60.0,292.80000000000007,14,15,172.16.0.153,198.44.140.67,57908,8008,6,20,clouditsoft.com,t12d190700_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b74051,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:51955-194.165.16.90:443-6-1668460371517,466.32,610.5326035520134,1514,54,493.1666666666667,647.6681014971864,1514,54,5918,61.625,152.90770518305425,556,0,134.36363636363635,207.43927917695467,556,0,104.41666666666667,201.58258327243422,556,0,113.5,0.0,0.0,0.0,0.0,678.3361253561253,614.6092548983562,1514.0,54.0,466.32,14,16,172.16.24.174,194.165.16.90,51955,443,6,25,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b74060,benign,benign,ctu_normal21_kali_2017.pcap,192.168.1.191:33204-159.122.19.155:443-6-1493727393458,354.54838709677415,531.8581163374105,1514,54,354.11764705882354,561.2893507756206,1514,54,6020,1343.9666666666667,3454.549289263944,10025,0,2518.0,4477.58634385387,10052,0,3099.4615384615386,4818.57538793685,10056,0,23.0,0.0,0.0,0.0,0.0,640.8597180807807,629.4799424756172,1514.0,54.0,354.54838709677415,18,20,192.168.1.191,159.122.19.155,33204,443,6,31,api.mixpanel.com,t12d1109h2_43e74fd21232_fed6c16fddd0,30e7675adab2c5b915e4bb356e9e1cc14070,benign,benign,ctu_normal14_win_full_2017.pcap,10.0.2.15:52363-52.1.82.65:443-6-3573399,163.94736842105263,229.21859379790737,730,54,193.55555555555554,262.61383774998944,730,54,1742,162.66666666666669,451.15694412841987,1926,0,366.0,659.3446963246375,1926,0,310.6666666666667,722.0978119340897,2217,1,68.0,0.0,0.0,0.0,0.0,313.75588044184536,292.80369041619184,730.0,54.0,163.94736842105263,11,13,10.0.2.15,52.1.82.65,52363,443,6,19,messaging-notifications.api.nytimes.com,t12d1711h2_67e6df579eba_a29fe97f68c7,303951d4c50efb2e991652225a6f02b14080,exfil,mta_lumma,Lumma_2025-12-30.pcap,10.12.30.101:63158-13.201.207.191:443-6-1767064492957,737.3547486033525,727.0875322626742,1514,54,1473.9212827988342,232.6542176999041,1514,54,505555,4.349650349650347,48.64207276499195,1078,0,9.093567251461984,70.82030885404045,1094,0,7.693548387096772,66.06720960264323,1078,0,3.0,0.0,0.0,0.0,0.0,764.2561691132009,671.9772718271797,1514.0,54.0,737.3547486033525,100,102,10.12.30.101,13.201.207.191,63158,443,6,716,sinitjq.cyou,t13d201200_2b729b4bf6f3_e24568c0d440,15af977ce25de452b96affa2addb10364090,benign,benign,ctu_normal20_win_2017_https.pcap,10.0.2.15:49460-104.125.18.180:443-6-1314946,136.29166666666666,271.80241245882945,1474,54,125.91304347826093,235.00713974521133,1085,54,2896,2709.9361702127662,4421.309575838635,10095,0,5789.363636363636,4914.324470802575,10096,2,5306.208333333335,4995.207111336319,10095,0,18.0,0.0,0.0,0.0,0.0,511.4494122383253,599.3328983137446,1474.0,54.0,136.29166666666666,39,41,10.0.2.15,104.125.18.180,49460,443,6,48,wwwimages2.adobe.com,t12d1510h2_073e58a039a6_60bf0a45ed8c,410b9bedaf65dd26c6fe547154d60db44100,benign,benign,ctu_normal14_win_full_2017.pcap,10.0.2.15:49249-162.125.66.3:443-6-276134,368.2,549.4377232814525,1474,54,112.42857142857142,137.35395840713835,546,54,1574,1778.4705882352941,8056.655326161303,45000,0,4651.384615384615,12807.428394870829,45000,0,3021.0499999999997,10432.548946622977,45010,0,7.0,0.0,0.0,0.0,0.0,519.4825396825397,543.8424530843192,1474.0,54.0,368.2,29,31,10.0.2.15,162.125.66.3,49249,443,6,35,client-web.dropbox.com,t12d200900_8dd61975155f_b6f7b0fbebc2,389ed42c02ebecc32e73aa31def07e144111,c2_beaconing,mta_gozi,Gozi_2023-07-12.pcap,10.7.12.121:49947-170.130.55.162:443-6-1689202567104,391.80952380952385,575.5847130568721,1514,54,164.2222222222222,209.92187700295662,636,54,1478,301.20000000000005,1271.6222792372864,5700,0,753.0,2000.0721415560417,5700,0,543.5454545454546,1711.3175253959369,5700,0,32.0,0.0,0.0,0.0,0.0,549.3924162257496,555.5815419862272,1514.0,54.0,391.80952380952385,11,13,10.7.12.121,170.130.55.162,49947,443,6,21,iamupdate.com,t12d190700_d83cc789557e_2dae41c691ec,4ce0442e9d20d092d9d74e9ce54b363a4120,benign,benign,ctu_normal20_win_2017_https.pcap,10.0.2.15:49663-192.28.146.120:443-6-2519209,325.8095238095238,519.3329971268549,1474,54,95.60000000000001,73.44567153118464,255,54,956,305.45,1072.5564872868247,4841,0,678.7777777777778,1568.5499496173034,4841,3,593.5999999999999,1587.1063956493626,5099,0,4.0,0.0,0.0,0.0,0.0,480.1667147667148,552.3382438997148,1474.0,54.0,255.0,13,15,10.0.2.15,192.28.146.120,49663,443,6,21,092-obr-737.mktoresp.com,t12d1509h2_073e58a039a6_e70312a1ce2c,8475c8479d349f36563360abf90c11f14130,benign,benign,ctu_normal21_kali_2017.pcap,192.168.1.191:41978-74.117.199.102:443-6-1493726513107,315.5454545454545,451.2800553001299,1466,66,142.46153846153845,142.142894877312,471,66,1852,62.76190476190475,104.39535658347299,441,0,92.91666666666667,122.49338262893545,441,0,150.37500000000003,211.85705254790486,596,0,65.0,0.0,0.0,0.0,0.0,513.8402831736165,537.1376588234878,1466.0,66.0,315.5454545454545,16,17,192.168.1.191,74.117.199.102,41978,443,6,22,ad.afy11.net,t12d1109h2_43e74fd21232_fed6c16fddd0,561f6f4eb311a85575d2d0a0a82323334141,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:51765-194.165.16.90:443-6-1668460067604,397.59999999999997,565.1215066172755,1514,54,405.3333333333334,602.2040075146184,1514,54,6080,49.758620689655174,133.24511654745118,497,0,103.07142857142858,180.21417355926351,499,0,87.35714285714286,178.38920592684073,497,0,2.5,0.0,0.0,0.0,0.0,655.2,623.2646601109435,1514.0,54.0,397.59999999999997,20,22,172.16.24.174,194.165.16.90,51765,443,6,30,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b74150,benign,benign,ctu_normal21_kali_2017.pcap,192.168.1.191:60740-192.0.78.19:443-6-1493726592311,207.01886792452822,382.9133006190846,1514,54,95.83333333333333,71.57300749793073,346,54,2875,5037.25,15877.760018679723,58836,0,9032.310344827587,20544.169664935962,58895,0,11905.545454545454,22956.81984929693,58850,0,35.5,0.0,0.0,0.0,0.0,465.6550755020812,571.2870076486075,1514.0,54.0,207.01886792452822,43,45,192.168.1.191,192.0.78.19,60740,443,6,53,r-login.wordpress.com,t12d1109h2_43e74fd21232_fed6c16fddd0,76cc3e2d3028143b23ec18e27dbd7ca94161,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:51350-194.165.16.90:443-6-1668459582177,435.77777777777777,589.6705294767014,1514,54,459.3846153846154,631.944425096271,1514,54,5972,58.192307692307686,146.25321035266725,548,0,126.08333333333334,198.65980896238096,549,0,98.99999999999999,192.42097945217236,548,0,1.0,0.0,0.0,0.0,0.0,668.1132817799485,618.2566902665315,1514.0,54.0,435.77777777777777,16,18,172.16.24.174,194.165.16.90,51350,443,6,27,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b74170,benign,benign,ctu_normal21_kali_2017.pcap,192.168.1.191:40322-172.217.23.238:443-6-1493726579608,217.0666666666667,355.11089177121204,1484,54,120.99999999999999,159.3943537268494,871,66,3146,4001.431818181819,14943.557540692487,58982,0,7042.280000000001,19438.106233890176,58982,0,9780.277777777776,22478.11893900261,58990,0,11.0,0.0,0.0,0.0,0.0,522.1769980506823,567.8958408934357,1484.0,54.0,217.0666666666667,37,39,192.168.1.191,172.217.23.238,40322,443,6,45,fcmatch.google.com,t12d1109h2_43e74fd21232_fed6c16fddd0,ea9bd07e32dfe1d6dd7b2e678bfdd5ad4181,exfil,mta_lumma,Lumma_2025-09-24.pcap,10.9.24.101:49912-164.90.129.126:443-6-1758755262701,260.2173913043478,390.3275962714745,1430,54,280.0,410.453407830901,1430,60,3080,25.181818181818183,60.62581279858587,265,0,55.4,87.11320859152825,279,0,42.727272727272734,82.84816341849819,265,0,5.0,0.0,0.0,0.0,0.0,580.0334138486312,602.2274007924378,1430.0,54.0,260.2173913043478,15,16,10.9.24.101,164.90.129.126,49912,443,6,23,fixatmu.pics,t13d201200_2b729b4bf6f3_e24568c0d440,15af977ce25de452b96affa2addb10364190,c2_beaconing,mta_bumblebee,BumbleBee_2022-12-07.pcap,10.12.7.101:50116-52.113.194.132:443-6-1670431584539,817.9761904761904,703.0843715839667,1514,54,139.72727272727272,139.4568685358243,503,54,1537,8.780487804878044,25.329342860723756,141,0,36.0,47.038990918882035,142,0,10.533333333333333,36.482148051297386,194,0,18.0,0.0,0.0,0.0,0.0,634.3720693881984,580.5778763605915,1514.0,54.0,503.0,21,23,10.12.7.101,52.113.194.132,50116,443,6,42,ecs.office.com,t12d1909h2_d83cc789557e_7af1ed941c26,0f14538e1c9070becdad7739c67d63634200,c2_beaconing,mta_icedid,IcedID_2022-10-31_0.pcap,172.16.0.153:57621-20.44.239.154:443-6-1667228085515,279.40909090909076,428.7928414348832,1414,60,121.00000000000001,92.03457848202292,311,60,1452,59.095238095238095,108.0189357297621,259,0,112.81818181818184,129.10911523344754,259,0,109.11111111111111,129.39420818224866,248,0,244.0,0.0,0.0,0.0,0.0,465.4343434343434,523.852347480685,1414.0,60.0,279.40909090909076,14,15,172.16.0.153,20.44.239.154,57621,443,6,22,settings-win.data.microsoft.com,t12d1909h2_d83cc789557e_7af1ed941c26,2fe9b0e731d3d41b2b84e8e1d61868364211,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:52283-213.91.235.146:443-6-1668464587934,1286.0905982906002,502.9593317363093,1514,54,70.48484848484848,95.51048954462338,770,54,4652,103.3527397260274,1610.4907774696976,30368,0,928.5846153846154,4780.124671139301,30369,0,116.21621621621622,1709.8934133667565,30371,0,1.0,0.0,0.0,0.0,0.0,750.8057497059426,653.8095101277244,1514.0,54.0,770.0,174,176,172.16.24.174,213.91.235.146,52283,443,6,585,,t12i190600_d83cc789557e_2dae41c691ec,fd4bc6cea4877646ccd62f0792ec0b624220,benign,benign,ctu_normal14_win_full_2017.pcap,10.0.2.15:50698-172.217.23.200:443-6-2003566,120.26666666666668,145.25763646838314,587,54,149.12499999999997,192.16766302967238,587,54,1193,453.71428571428567,1590.4861099469135,5975,0,907.4285714285716,2236.6525476809356,5975,0,1054.5,2534.9906311463956,6229,5,20.5,0.0,0.0,0.0,0.0,211.85304232804233,206.57732713109658,587.0,54.0,120.26666666666668,7,9,10.0.2.15,172.217.23.200,50698,443,6,15,www.googletagmanager.com,t12d1711h2_67e6df579eba_de5ccbe16bdd,c74a0764cf5d01aa28d5c7769cd86fc14231,c2_beaconing,mta_gozi,Gozi_2023-07-12.pcap,10.7.12.121:50307-170.130.55.162:443-6-1689204210510,349.5833333333333,522.8631807625217,1514,54,144.18181818181816,192.9812520333611,636,54,1586,464.6521739130435,2153.4287587408903,10341,0,1068.6999999999998,3258.567307882407,10341,1,886.3333333333333,2978.0380464427594,10341,0,1.0,0.0,0.0,0.0,0.0,538.1277518777518,558.6025284573929,1514.0,54.0,349.5833333333333,17,19,10.7.12.121,170.130.55.162,50307,443,6,24,iamupdate.com,t12d190700_d83cc789557e_2dae41c691ec,4ce0442e9d20d092d9d74e9ce54b363a4241,c2_beaconing,mta_pikabot,Pikabot_2023-10-03.pcap,10.1.2.147:49587-179.60.149.244:443-6-1696349916984,441.71875000000006,591.7422735843487,1450,60,351.2352941176471,540.7953089445863,1450,60,5971,13.451612903225802,27.73185738421599,77,0,26.062500000000004,40.329424741744084,114,0,24.428571428571427,34.471201549463515,80,0,3.0,0.0,0.0,0.0,0.0,649.691190087146,584.6670570207979,1450.0,60.0,441.71875000000006,14,15,10.1.2.147,179.60.149.244,49587,443,6,32,zzerxc.com,t12d190700_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b74251,c2_beaconing,mta_emotet,Emotet_2022-07-07.pcap,10.7.7.101:57312-164.90.222.65:443-6-1657217969935,204.42857142857142,325.0417048474086,1232,54,155.875,172.2418876381203,481,54,1247,260.3846153846154,735.3473712540601,2672,0,483.57142857142856,977.5743547411721,2672,0,134.2,186.30271066197614,385,0,163.0,0.0,0.0,0.0,0.0,415.1633597883598,454.97865799628926,1232.0,54.0,204.42857142857142,10,12,10.7.7.101,164.90.222.65,57312,443,6,14,,t12i190600_d83cc789557e_2dae41c691ec,fd4bc6cea4877646ccd62f0792ec0b624260,c2_beaconing,mta_qakbot,Qakbot_2022-09-29.pcap,10.9.29.201:49936-197.203.50.195:443-6-1664413308922,64.0,4.898979485566356,66,54,66.0,0.0,66,66,330,15000.0,25282.044903448772,59972,1013,3757.0,3089.0234702895996,8000,1013,0.0,0.0,0,0,4000.0,0.0,0.0,0.0,0.0,60.44444444444444,5.7948465824023545,66.0,54.0,64.0,0,1,10.9.29.201,197.203.50.195,49936,443,6,6,,,4270,c2_beaconing,mta_icedid,IcedID_2022-01-12.pcap,10.22.5.47:50433-204.79.197.219:443-6-1642008009602,253.2580645161291,347.49482531747435,1415,60,167.9310344827586,176.60628751031865,766,60,4870,879.4426229508197,4401.554606138572,28196,0,1915.928571428571,6403.393573252252,28196,0,1672.28125,6070.003599054973,28475,0,128.0,0.0,0.0,0.0,0.0,502.8257248045902,529.8412952038977,1415.0,60.0,253.2580645161291,56,57,10.22.5.47,204.79.197.219,50433,443,6,62,edge.microsoft.com,t13d1516h2_8daaf6152771_e5627efa2ab1,0f14538e1c9070becdad7739c67d63634280,benign,benign,ctu_normal21_kali_2017.pcap,192.168.1.191:53320-204.11.109.68:443-6-1493726960470,227.7058823529411,365.8276257538594,1514,66,132.85185185185182,172.00574760157642,695,66,3587,2359.54,4136.672611445788,10032,0,4537.423076923077,4984.387514413998,10304,0,5116.782608695653,5035.4959127137145,10280,0,192.5,0.0,0.0,0.0,0.0,512.8860445412732,567.0930002287794,1514.0,66.0,227.7058823529411,22,24,192.168.1.191,204.11.109.68,53320,443,6,51,a.tribalfusion.com,t12d1109h2_43e74fd21232_fed6c16fddd0,c67e8b533a9001ce4e36883b8d3489c44290,benign,benign,ctu_normal14_win_full_2017.pcap,10.0.2.15:51025-104.120.254.191:443-6-2658446,105.13333333333333,134.93271691935243,571,54,136.85714285714286,192.34381418996261,571,54,958,152.64285714285714,524.274679495815,1973,0,356.16666666666663,792.5219029570518,1973,1,298.85714285714283,738.4922542070495,1973,1,10.5,0.0,0.0,0.0,0.0,203.2628306878307,201.98838825281535,571.0,54.0,105.13333333333333,7,9,10.0.2.15,104.120.254.191,51025,443,6,15,auth.gfx.ms,t12d1712h2_67e6df579eba_88be6878e1da,410b9bedaf65dd26c6fe547154d60db44301,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:51362-194.165.16.90:443-6-1668459597193,466.32,610.5326035520134,1514,54,493.1666666666667,647.6681014971864,1514,54,5918,67.20833333333334,166.17486315603674,611,0,146.63636363636363,225.87220843976036,612,0,116.16666666666666,220.37440592745517,611,0,1.0,0.0,0.0,0.0,0.0,678.3361253561253,614.6092548983562,1514.0,54.0,466.32,14,16,172.16.24.174,194.165.16.90,51362,443,6,25,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b74311,c2_beaconing,mta_pikabot,Pikabot_2023-11-02.pcap,10.11.2.101:52775-154.221.30.136:13724-6-1698937694416,166.9722222222222,284.3398857616016,1430,60,120.6842105263158,170.22405256066324,750,60,2293,2349.8000000000006,4112.683178827633,10395,0,4550.111111111112,4834.356735466637,10395,0,5119.9375,4836.4474216618955,10396,0,319.5,0.0,0.0,0.0,0.0,477.373590566831,547.9666210337136,1430.0,60.0,166.9722222222222,28,29,10.11.2.101,154.221.30.136,52775,13724,6,36,,t12i190700_d83cc789557e_7af1ed941c26,ec74a5c51106f0419184d0dd08fb05bc4321,c2_beaconing,mta_qakbot,Qakbot_2022-12-09.pcap,10.12.9.101:49804-98.178.242.28:443-6-1670629420902,810.2882653061223,726.6166320624802,1514,54,1458.511848341233,261.9356038671223,1514,54,307746,1.1687979539641948,8.583355887703258,87,0,2.1761904761904747,11.807969280453714,88,0,2.1000000000000005,11.145106900394858,87,0,1.0,0.0,0.0,0.0,0.0,630.71382478218,652.0324924486209,1514.0,54.0,163.0,55,57,10.12.9.101,98.178.242.28,49804,443,6,392,,t12i190600_d83cc789557e_2dae41c691ec,fd4bc6cea4877646ccd62f0792ec0b624331,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:52042-194.165.16.90:443-6-1668460510036,435.77777777777777,589.6705294767014,1514,54,459.3846153846154,631.944425096271,1514,54,5972,60.923076923076934,156.14709041847001,609,0,132.0,213.20071635561044,611,0,104.23076923076921,206.63581241972307,609,0,1.0,0.0,0.0,0.0,0.0,668.1132817799485,618.2566902665315,1514.0,54.0,435.77777777777777,16,18,172.16.24.174,194.165.16.90,52042,443,6,27,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b74340,c2_beaconing,mta_pikabot,Pikabot_2024-02-08.pcap,10.2.8.101:53337-13.69.116.104:443-6-1707420423849,315.6785714285714,483.291803087138,1514,60,219.2142857142857,321.2885543632627,1149,60,3069,38.55555555555556,64.79335990037472,191,0,80.07692307692308,90.15954519485771,213,0,69.3076923076923,88.11203532566235,217,0,47.0,0.0,0.0,0.0,0.0,589.3373015873016,587.5652685101335,1514.0,60.0,315.6785714285714,18,19,10.2.8.101,13.69.116.104,53337,443,6,28,v10.events.data.microsoft.com,t12d1909h2_d83cc789557e_7af1ed941c26,2fe9b0e731d3d41b2b84e8e1d61868364351,c2_beaconing,mta_qakbot,Qakbot_2022-06-27_0.pcap,10.6.27.101:63777-45.46.53.140:2222-6-1656353391081,215.23809523809518,322.8291970627664,1182,54,146.91666666666669,196.41396836706133,690,54,1763,5498.9,18543.986041443815,79051,0,9998.0,24574.18813714911,79051,0,13728.625,28361.950678115518,79052,2,149.0,0.0,0.0,0.0,0.0,431.60978835978835,442.7521216494052,1182.0,54.0,215.23809523809518,14,16,10.6.27.101,45.46.53.140,63777,2222,6,21,,t12i190600_d83cc789557e_2dae41c691ec,7c02dbae662670040c7af9bd15fb7e2f4360,exfil,mta_koistealer,KoiStealer_2024-06-12.pcap,10.6.12.101:49722-142.250.114.132:443-6-1718218137650,406.61363636363643,591.0732932126607,1514,54,206.2777777777778,368.4003266198264,1514,54,3713,5589.3488372093025,14646.482860568918,45016,0,14137.764705882353,20849.62334051089,45016,0,9612.08,22448.83904741327,90016,0,44.5,0.0,0.0,0.0,0.0,651.355456272123,630.0093717497427,1514.0,54.0,406.61363636363643,31,33,10.6.12.101,142.250.114.132,49722,443,6,44,1966078650-atari-embeds.googleusercontent.com,t13d1516h2_8daaf6152771_02713d6af862,eb1d94daa7e0344597e756a1fb6e70544370,exfil,mta_xloader,XLoader_2023-11-29.pcap,10.11.29.101:60534-168.119.136.101:443-6-1701280230735,929.3449556093632,658.2933693479838,1430,60,63.5776699029126,7.378892098952625,230,60,144067,1.0779786890539216,35.57119282238412,2757,0,2.9479028697571716,58.8173110850605,2757,0,0.9422097759674124,7.774087428754716,192,0,1.0,0.0,0.0,0.0,0.0,632.3986311370645,620.3006213148576,1430.0,60.0,230.0,4337,4344,10.11.29.101,168.119.136.101,60534,443,6,6195,www.wgs.com.pk,t12d210700_76e208dd3e22_2dae41c691ec,567bb420d39046dbfd1f68b558d863824380,benign,benign,ctu_normal14_win_full_2017.pcap,10.0.2.15:49904-151.101.0.166:443-6-1079176,105.66666666666666,135.37496427471717,571,54,136.85714285714286,192.34381418996261,571,54,958,736.5,2685.0415768160406,10065,0,1718.4999999999998,4089.695282047307,10066,0,1467.2857142857142,3791.767297461072,10066,0,34.0,0.0,0.0,0.0,0.0,204.32208994708995,201.91756146653967,571.0,54.0,105.66666666666666,7,9,10.0.2.15,151.101.0.166,49904,443,6,15,bh.contextweb.com,t12d1712h2_67e6df579eba_88be6878e1da,1d0e57c6ae42e9204defa51e5e1cdc4c4391,c2_beaconing,mta_pikabot,Pikabot_2023-11-02.pcap,10.11.2.101:52901-154.92.19.139:2222-6-1698949889083,166.8055555555556,283.9416257356375,1430,60,117.54999999999997,165.83837248801524,748,60,2351,2776.0,5001.2246735468825,19101,0,5113.684210526317,5889.783452467422,19101,0,5181.599999999999,5017.5065065087,10343,3,329.5,0.0,0.0,0.0,0.0,477.85895061728394,547.5966323981073,1430.0,60.0,166.8055555555556,29,30,10.11.2.101,154.92.19.139,52901,2222,6,36,,t12i190700_d83cc789557e_7af1ed941c26,ec74a5c51106f0419184d0dd08fb05bc4401,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:50465-194.165.16.90:443-6-1668458248184,466.32,610.5326035520134,1514,54,493.1666666666667,647.6681014971864,1514,54,5918,65.54166666666666,164.15289245532432,612,0,143.0,223.36024713453378,612,0,112.33333333333333,217.693000402499,612,0,1.0,0.0,0.0,0.0,0.0,678.3361253561253,614.6092548983562,1514.0,54.0,466.32,14,16,172.16.24.174,194.165.16.90,50465,443,6,25,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b74410,benign,benign,ctu_normal14_win_full_2017.pcap,10.0.2.15:51926-52.202.38.240:443-6-3376125,376.74418604651174,562.486363560561,1514,54,673.6190476190476,687.3019333735703,1514,54,14146,123.42857142857143,380.07580391908493,2081,0,259.05,543.0826703570142,2081,0,239.95238095238096,606.2809147738758,2349,0,75.0,0.0,0.0,0.0,0.0,525.6363188921329,564.5571237688919,1514.0,54.0,376.74418604651174,22,24,10.0.2.15,52.202.38.240,51926,443,6,43,logx.optimizely.com,t12d1710h2_67e6df579eba_4a7a952b215a,303951d4c50efb2e991652225a6f02b14421,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:50316-213.67.255.57:2222-6-1668458004118,179.42105263157893,301.57573505938467,1190,54,154.27272727272725,228.47016912896567,785,54,1697,7759.611111111112,26157.548727434394,108726,0,13967.300000000001,34584.276809781,108726,0,19921.14285714286,40697.029070226454,108726,0,225.0,0.0,0.0,0.0,0.0,430.52153110047846,458.35719814689975,1190.0,54.0,179.42105263157893,12,14,172.16.24.174,213.67.255.57,50316,2222,6,19,,t12i190600_d83cc789557e_2dae41c691ec,fd4bc6cea4877646ccd62f0792ec0b624430,benign,benign,ctu_normal21_kali_2017.pcap,192.168.1.191:56852-95.101.250.34:443-6-1493726413328,295.03076923076924,447.0383082448992,1514,54,113.54545454545455,79.76492450832122,298,54,3747,3834.6249999999995,14168.348175276926,58987,0,7669.25,19432.23182938511,58987,0,7915.967741935484,19718.51714080595,59045,0,20.0,0.0,0.0,0.0,0.0,487.86263597513596,565.0698035515034,1514.0,54.0,295.03076923076924,50,55,192.168.1.191,95.101.250.34,56852,443,6,65,use.typekit.net,t12d1109h2_43e74fd21232_fed6c16fddd0,8d2a028aa94425f76ced7826b1f390394440,benign,benign,ctu_normal21_kali_2017.pcap,192.168.1.191:33956-35.157.74.177:443-6-1493727388888,161.7142857142857,192.37871875176688,583,66,171.0,230.3410514867031,583,66,855,11.166666666666666,9.516652072376433,22,0,16.75,5.123475382979799,22,10,32.0,0.0,32,32,17.5,0.0,0.0,0.0,0.0,227.35714285714286,195.65511792454606,583.0,66.0,161.7142857142857,3,4,192.168.1.191,35.157.74.177,33956,443,6,7,ps.eyeota.net,t12d1110h2_43e74fd21232_205f67e4d9f4,fbe78c619e7ea20046131294ad087f054450,c2_beaconing,mta_danabot,Danabot_2023-08-03.pcap,10.8.3.101:49751-52.109.8.35:443-6-1691102841640,320.0,498.64007918681045,1514,54,151.25,189.9148732746045,709,54,1815,10.607142857142858,18.764306711125947,51,0,27.0,29.04479299289289,86,0,15.4375,20.56524171184639,51,0,39.5,0.0,0.0,0.0,0.0,534.374183006536,562.1308629060351,1514.0,54.0,320.0,18,20,10.8.3.101,52.109.8.35,49751,443,6,29,mrodevicemgr.officeapps.live.com,t12d1909h2_d83cc789557e_7af1ed941c26,67bfe5d15ae567fb35fd7837f0116eec4460,c2_beaconing,mta_icedid,IcedID_2022-10-31_1.pcap,172.16.0.153:57951-52.167.249.196:443-6-1667233271654,285.8636363636363,433.15743266376194,1414,60,140.50000000000003,145.3168950948237,545,60,1686,9.190476190476192,14.921859963218552,36,0,17.545454545454547,16.854457193061048,36,0,17.66666666666667,21.02379604162864,43,0,34.0,0.0,0.0,0.0,0.0,493.2959595959596,519.6027569009655,1414.0,60.0,285.8636363636363,15,16,172.16.0.153,52.167.249.196,57951,443,6,22,settings-win.data.microsoft.com,t12d1909h2_d83cc789557e_7af1ed941c26,2fe9b0e731d3d41b2b84e8e1d61868364470,benign,benign,ctu_normal14_win_full_2017.pcap,10.0.2.15:50672-13.32.100.134:443-6-1987291,375.66666666666663,527.6854025439504,1474,54,191.55555555555554,290.5116654762383,939,54,1724,114.65217391304348,514.4436190236498,2474,0,329.625,866.6681581946873,2474,1,186.0,660.3889296933576,2480,0,9.5,0.0,0.0,0.0,0.0,566.9283950617283,553.5035227169858,1474.0,54.0,375.66666666666663,17,19,10.0.2.15,13.32.100.134,50672,443,6,24,marketing.dropbox.com,t12d1711h2_67e6df579eba_de5ccbe16bdd,76cc3e2d3028143b23ec18e27dbd7ca94481,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:50452-194.165.16.90:443-6-1668458229731,466.32,610.5326035520134,1514,54,493.1666666666667,647.6681014971864,1514,54,5918,62.750000000000014,152.56509658389157,560,0,136.90909090909088,206.55917047928642,561,0,107.74999999999999,201.30895522689858,560,0,1.0,0.0,0.0,0.0,0.0,678.3361253561253,614.6092548983562,1514.0,54.0,466.32,14,16,172.16.24.174,194.165.16.90,50452,443,6,25,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b74490,c2_beaconing,mta_bumblebee,BumbleBee_2022-12-07.pcap,10.12.7.101:50179-139.177.146.137:443-6-1670432383722,186.64000000000001,302.9383710702008,1514,54,134.36363636363637,94.54445803670646,312,54,1478,1365.2083333333335,6317.22097664421,31013,0,3276.5,9748.556237834515,31014,0,2507.923076923077,8567.411398837054,31013,0,41.5,0.0,0.0,0.0,0.0,450.07976911976914,574.6573554115225,1514.0,54.0,186.64000000000001,20,22,10.12.7.101,139.177.146.137,50179,443,6,25,,t12i210600_76e208dd3e22_2dae41c691ec,76c691f46143bf86e2d1bb73c61877674500,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:51564-23.221.22.209:443-6-1668459883548,1165.2670417658512,577.2208938309413,1514,54,74.0757180156658,47.52410614116234,571,54,56742,7.948701298701297,310.5042539439674,21008,0,48.00392156862745,762.2431598914844,21008,0,9.516087182148413,340.012340237498,21008,0,2.0,0.0,0.0,0.0,0.0,709.1591969724091,638.2726163222957,1514.0,54.0,571.0,2181,2183,172.16.24.174,23.221.22.209,51564,443,6,4621,assets.msn.com,t13d1616h2_e72c3b3287f1_e5627efa2ab1,15af977ce25de452b96affa2addb10364511,c2_beaconing,mta_pikabot,Pikabot_2023-05-23.pcap,10.1.0.186:55435-104.238.35.63:8080-6-1684859881843,356.8399999999999,516.7059673224866,1514,54,268.0,439.00398631447524,1514,54,3484,18.666666666666668,39.25132694147634,147,0,37.33333333333333,49.61182654703749,147,0,33.45454545454546,50.08665218671265,147,0,65.0,0.0,0.0,0.0,0.0,642.435925925926,630.2789525512342,1514.0,54.0,356.8399999999999,17,19,10.1.0.186,104.238.35.63,55435,8080,6,25,turiruy.us,t13d201200_2b729b4bf6f3_2e4f304f1f45,2253c82f03b621c5144709b393fde2c94521,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:51259-194.165.16.90:443-6-1668459436847,435.77777777777777,589.6705294767014,1514,54,459.3846153846154,631.944425096271,1514,54,5972,52.000000000000014,134.23203790451814,482,0,112.66666666666666,183.35823522340746,483,0,87.76923076923077,177.03632105971636,482,0,1.0,0.0,0.0,0.0,0.0,668.1132817799485,618.2566902665315,1514.0,54.0,435.77777777777777,16,18,172.16.24.174,194.165.16.90,51259,443,6,27,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b74530,benign,benign,ctu_normal20_win_2017_https.pcap,10.0.2.15:49292-185.33.222.236:443-6-11088652,303.1904761904762,499.38948918130217,1474,54,90.2,67.59815908078497,247,54,902,462.95,1797.5389747622926,8080,0,1028.7777777777778,2649.883571865837,8080,1,921.4000000000001,2614.937186413641,8349,0,20.5,0.0,0.0,0.0,0.0,471.91207311207313,553.5430092591743,1474.0,54.0,247.0,13,15,10.0.2.15,185.33.222.236,49292,443,6,21,secure.adnxs.com,t12d1509h2_073e58a039a6_e70312a1ce2c,d53e4608f956df65bb2b8a8c4d3b025d4540,c2_beaconing,mta_icedid,IcedID_2022-01-12.pcap,10.22.5.47:49885-52.137.106.217:443-6-1642000924618,288.625,445.56771919799615,1415,60,173.15384615384616,289.5205364488693,1115,60,2251,37.7391304347826,74.86060827923295,314,0,72.16666666666667,92.68012764668627,314,0,76.0,134.10029414169415,429,0,5.0,0.0,0.0,0.0,0.0,556.8744172494172,553.9235684112127,1415.0,60.0,288.625,15,16,10.22.5.47,52.137.106.217,49885,443,6,24,settings-win.data.microsoft.com,t12d1909h2_d83cc789557e_7af1ed941c26,3ffaa1393a2bf5ecfc7b6b2323452f2d4550,benign,benign,ctu_normal20_win_2017_https.pcap,10.0.2.15:52026-2.22.107.229:443-6-6895898,92.30882352941177,129.96236623500369,707,54,109.88235294117646,171.18300763623358,707,54,3736,3619.9253731343274,4776.487242015238,10110,0,7349.545454545454,4337.668059358833,10112,2,7348.39393939394,4377.7985188005305,10117,1,44.0,0.0,0.0,0.0,0.0,240.65849673202615,260.6288988266345,707.0,54.0,92.30882352941177,63,65,10.0.2.15,2.22.107.229,52026,443,6,68,128727546.cdn.optimizely.com,t12d1510h2_073e58a039a6_60bf0a45ed8c,410b9bedaf65dd26c6fe547154d60db44561,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:50876-194.165.16.90:443-6-1668458849445,435.77777777777777,589.6705294767014,1514,54,459.3846153846154,631.944425096271,1514,54,5972,54.53846153846153,139.4578734297152,498,0,118.08333333333333,190.01265906791738,498,0,92.84615384615384,184.26378110101027,498,0,1.0,0.0,0.0,0.0,0.0,668.1132817799485,618.2566902665315,1514.0,54.0,435.77777777777777,16,18,172.16.24.174,194.165.16.90,50876,443,6,27,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b74571,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:50431-194.165.16.90:443-6-1668458196886,422.1428571428571,581.95645212448,1514,54,430.4285714285715,616.7435215943265,1514,54,6026,49.7037037037037,130.66775684178052,475,0,103.23076923076923,176.94356626061779,477,0,87.15384615384615,175.26211139977656,475,0,1.0,0.0,0.0,0.0,0.0,663.3809523809524,619.9837354314599,1514.0,54.0,422.1428571428571,18,20,172.16.24.174,194.165.16.90,50431,443,6,28,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b74581,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:51805-194.165.16.90:443-6-1668460133293,466.32,610.5326035520134,1514,54,493.1666666666667,647.6681014971864,1514,54,5918,70.70833333333334,175.5482044950881,612,0,154.27272727272725,238.73503760826182,613,0,123.66666666666666,233.64827230586394,612,0,1.0,0.0,0.0,0.0,0.0,678.3361253561253,614.6092548983562,1514.0,54.0,466.32,14,16,172.16.24.174,194.165.16.90,51805,443,6,25,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b74590,benign,benign,ctu_normal21_kali_2017.pcap,192.168.1.191:43368-95.101.245.177:443-6-1493727160123,108.33333333333331,124.43235818992535,583,54,123.09999999999997,162.87108057874758,583,54,1231,316.1764705882353,1174.6527803618246,4870,0,597.2222222222223,1626.7377460563348,4932,0,759.8571428571428,1824.7440394542489,4892,0,56.0,0.0,0.0,0.0,0.0,208.81203703703704,205.48993904328012,583.0,54.0,108.33333333333331,10,15,192.168.1.191,95.101.245.177,43368,443,6,18,dsum-sec.casalemedia.com,t12d1110h2_43e74fd21232_205f67e4d9f4,7bee5c1d424b7e5f943b06983bb114224601,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:51803-194.165.16.90:443-6-1668460129901,435.77777777777777,589.6705294767014,1514,54,459.3846153846154,631.944425096271,1514,54,5972,63.1923076923077,157.1071021261023,544,0,136.83333333333331,212.60370018730467,544,0,105.15384615384616,204.32239482161768,544,0,1.5,0.0,0.0,0.0,0.0,668.1132817799485,618.2566902665315,1514.0,54.0,435.77777777777777,16,18,172.16.24.174,194.165.16.90,51803,443,6,27,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b74611,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:50240-194.165.16.90:443-6-1668457889523,422.1428571428571,581.95645212448,1514,54,430.4285714285715,616.7435215943265,1514,54,6026,56.62962962962962,150.21834061641692,578,0,117.61538461538461,203.3037704444339,579,0,101.61538461538461,203.26400667667755,578,0,1.0,0.0,0.0,0.0,0.0,663.3809523809524,619.9837354314599,1514.0,54.0,422.1428571428571,18,20,172.16.24.174,194.165.16.90,50240,443,6,28,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b74621,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:50257-194.165.16.90:443-6-1668457915665,466.32,610.5326035520134,1514,54,493.1666666666667,647.6681014971864,1514,54,5918,75.25,181.9453453530817,611,0,164.1818181818182,245.74939193488075,612,0,131.49999999999997,240.94982502964842,611,0,1.0,0.0,0.0,0.0,0.0,678.3361253561253,614.6092548983562,1514.0,54.0,466.32,14,16,172.16.24.174,194.165.16.90,50257,443,6,25,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b74630,benign,benign,ctu_normal21_kali_2017.pcap,192.168.1.191:60876-54.192.93.222:443-6-1493727019977,521.1888888888889,650.9345208521006,1514,66,88.50000000000004,62.55686774549744,415,66,4248,2093.3707865168535,10634.766517057096,58809,0,3963.9148936170213,14455.055569396423,58809,0,4541.121951219512,15426.191286567013,58947,0,17.5,0.0,0.0,0.0,0.0,585.1532627865961,577.2678160262144,1514.0,66.0,415.0,79,82,192.168.1.191,54.192.93.222,60876,443,6,90,i1.sndcdn.com,t12d1109h2_43e74fd21232_fed6c16fddd0,76cc3e2d3028143b23ec18e27dbd7ca94640,benign,benign,ctu_normal14_win_full_2017.pcap,10.0.2.15:52029-216.58.201.98:443-6-3387671,241.78723404255317,382.6059919171142,1474,54,137.95238095238096,151.13089564694448,711,54,2897,185.19565217391303,674.8319171653936,2971,0,425.95,985.6573801542966,2971,0,339.32,894.5051108480786,2972,0,11.0,0.0,0.0,0.0,0.0,502.9326067943089,554.4459186810741,1474.0,54.0,241.78723404255317,37,39,10.0.2.15,216.58.201.98,52029,443,6,47,googleads.g.doubleclick.net,t12d1711h2_67e6df579eba_de5ccbe16bdd,f09be93fa9d03eabf66fdd359154a3fa4650,benign,benign,ctu_normal20_win_2017_https.pcap,10.0.2.15:50847-172.217.23.174:443-6-3710290,237.1481481481482,424.59733899884515,1474,54,93.92307692307692,72.25125320534993,257,54,1221,160.3461538461538,327.5803342458387,1117,0,347.41666666666663,419.34179123811145,1117,1,318.30769230769226,503.8394890927375,1321,0,19.5,0.0,0.0,0.0,0.0,452.0237869126758,556.106103767656,1474.0,54.0,237.1481481481482,19,21,10.0.2.15,172.217.23.174,50847,443,6,27,encrypted-tbn2.gstatic.com,t12d1509h2_073e58a039a6_e70312a1ce2c,84480cf8cf0e732666092640e581e1a54660,benign,benign,ctu_normal21_kali_2017.pcap,192.168.1.191:43524-54.247.93.215:443-6-1493727393402,139.2,167.08699278488058,709,66,126.72727272727273,127.47712807330647,457,66,1394,2127.3157894736846,4177.041231576772,10027,0,4037.6000000000004,5163.628982282389,10092,1,5047.0,5356.271837761784,10068,0,43.0,0.0,0.0,0.0,0.0,277.04130190796855,257.2939480669458,709.0,66.0,139.2,9,10,192.168.1.191,54.247.93.215,43524,443,6,20,d.adroll.com,t12d1109h2_43e74fd21232_fed6c16fddd0,303951d4c50efb2e991652225a6f02b14670,c2_beaconing,mta_pikabot,Pikabot_2023-05-23.pcap,10.1.0.186:55213-20.125.209.212:443-6-1684858033440,404.9500000000001,564.4371649332588,1442,54,123.11111111111111,170.69522872977765,571,54,1108,1673.1052631578946,6846.608015772294,29938,0,3912.125,10517.519743436254,29938,3,3138.0,9435.463799470119,29987,3,49.0,0.0,0.0,0.0,0.0,531.178507295174,530.9551574977808,1442.0,54.0,404.9500000000001,13,15,10.1.0.186,20.125.209.212,55213,443,6,20,c.msn.com,t13d1616h2_e72c3b3287f1_e5627efa2ab1,8415e777e0df6478fa9e17af0701002f4681,c2_beaconing,mta_gozi,Gozi_2023-07-12.pcap,10.7.12.121:49941-170.130.55.162:443-6-1689202539452,710.4883177570098,720.0648600463085,1514,54,1408.3793103448284,351.3593531064224,1514,54,285901,2.831381733021077,46.527387549891394,959,0,5.985148514851486,68.30823305948688,969,0,5.236607142857143,64.16725831417433,959,0,1.0,0.0,0.0,0.0,0.0,767.0781315174881,673.6728995132486,1514.0,54.0,710.4883177570098,86,88,10.7.12.121,170.130.55.162,49941,443,6,428,iamupdate.com,t12d190700_d83cc789557e_2dae41c691ec,4ce0442e9d20d092d9d74e9ce54b363a4690,benign,benign,ctu_normal7_general_2013.pcap,10.0.0.46:33693-68.232.35.139:443-6-1387315727156,381.83333333333337,481.6075173966953,1506,54,157.7,173.16712341428712,477,54,3154,2282.170731707317,8169.45681763004,32024,0,4923.368421052632,11608.299862170104,32044,1,4453.619047619047,11110.599643926473,32024,0,20.0,0.0,0.0,0.0,0.0,530.6804713804714,552.9050383517717,1506.0,54.0,381.83333333333337,30,32,10.0.0.46,68.232.35.139,33693,443,6,42,pbs.twimg.com,t12d1810s2_27d4652c4487_736b2a1ed4d3,0c0aff9ccea5e7e1de5c3a0069d103f34701,c2_beaconing,mta_icedid,IcedID_2023-05-10.pcap,172.16.10.73:50615-104.18.32.150:443-6-1683744489085,782.6250000000002,676.2643952316761,1514,54,151.7,187.67113671408174,581,54,1517,7.806451612903228,28.14417566133202,149,0,26.88888888888889,49.138692606856274,149,0,9.80952380952381,33.47628869456566,149,0,1.0,0.0,0.0,0.0,0.0,641.6371212121212,577.7896413139766,1514.0,54.0,581.0,20,22,172.16.10.73,104.18.32.150,50615,443,6,32,www.broadcom.com,t13d201200_2b729b4bf6f3_2e4f304f1f45,f590053ff246338aff7c203dbe7164d64710,c2_beaconing,mta_pikabot,Pikabot_2023-05-23.pcap,10.1.0.186:55063-204.79.197.239:443-6-1684857169718,335.2333333333333,479.0668143836287,1442,54,158.1538461538462,190.6846638448961,576,54,2056,4234.413793103448,12788.785568718404,45017,0,7532.083333333334,17498.255551798888,45017,0,7672.4375,23401.35056207583,90031,0,37.0,0.0,0.0,0.0,0.0,509.559359812301,529.2865229364455,1442.0,54.0,335.2333333333333,23,25,10.1.0.186,204.79.197.239,55063,443,6,30,edge.microsoft.com,t13d1616h2_e72c3b3287f1_e5627efa2ab1,0f14538e1c9070becdad7739c67d63634720,benign,benign,ctu_normal20_win_2017_https.pcap,10.0.2.15:65350-141.170.25.54:443-6-10343430,271.85714285714283,401.7677545192353,1474,54,155.5,173.49687797383177,523,54,1555,65.05,104.98194080286781,351,0,144.33333333333334,128.42215540941524,351,3,126.8,183.20650158283746,590,0,7.0,0.0,0.0,0.0,0.0,493.11038961038963,545.6804184978148,1474.0,54.0,271.85714285714283,14,16,10.0.2.15,141.170.25.54,65350,443,6,21,gcm.ctnsnet.com,t12d1509h2_073e58a039a6_e70312a1ce2c,c67e8b533a9001ce4e36883b8d3489c44731,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:52001-194.165.16.90:443-6-1668460444065,409.448275862069,574.972147537035,1514,54,405.3333333333334,602.2040075146185,1514,54,6080,57.464285714285715,157.80050277882097,638,0,114.92857142857143,211.20258750079975,638,0,106.99999999999999,217.64918255455652,638,0,9.0,0.0,0.0,0.0,0.0,648.5154168947272,607.5391640654519,1514.0,54.0,409.448275862069,19,21,172.16.24.174,194.165.16.90,52001,443,6,29,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b74740,benign,benign,ctu_normal14_win_full_2017.pcap,10.0.2.15:51600-172.217.23.206:443-6-3283271,141.90909090909088,217.956326421769,1157,54,191.4,297.0304938650479,1157,54,2871,86.6875,468.52895648456575,2654,0,198.14285714285714,707.2054273572259,2655,0,161.8235294117647,642.2629168897771,2654,0,4.0,0.0,0.0,0.0,0.0,381.552861952862,436.81735945366415,1157.0,54.0,141.90909090909088,25,27,10.0.2.15,172.217.23.206,51600,443,6,33,clients6.google.com,t12d1711h2_67e6df579eba_a29fe97f68c7,c23237dbea656869600e48dfbd00ab7b4751,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:50015-72.163.4.185:443-6-1668457560929,352.31818181818187,526.8261108584607,1514,54,117.9,112.85826903195392,388,54,1179,10.142857142857144,18.556092568980446,51,0,23.666666666666668,22.621892051727237,51,0,15.81818181818182,21.95822479991578,51,0,24.0,0.0,0.0,0.0,0.0,510.6538720538721,561.2233557768577,1514.0,54.0,352.31818181818187,16,18,172.16.24.174,72.163.4.185,50015,443,6,22,cisco.com,t12d190700_d83cc789557e_2dae41c691ec,70745099b394fe3f42264227c098cc984761,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:52454-77.126.81.208:443-6-1668469774912,153.61904761904762,239.95113589864005,901,54,145.75000000000003,219.2238892921199,783,54,1749,7047.100000000001,24801.57630156005,108008,0,12812.909090909092,32976.661936753226,108008,0,17595.0,38180.122550877175,108009,0,91.5,0.0,0.0,0.0,0.0,356.7200176366843,360.8586661218334,901.0,54.0,153.61904761904762,12,14,172.16.24.174,77.126.81.208,52454,443,6,21,,t12i190600_d83cc789557e_2dae41c691ec,fd4bc6cea4877646ccd62f0792ec0b624771,c2_beaconing,mta_icedid,IcedID_2023-09-28.pcap,10.10.20.147:50795-172.86.75.88:443-6-1695915326713,62.5,8.535051695099247,71,54,62.08196721311476,8.560169550437681,71,54,3787,14696.85123966942,25623.379772732675,59970,0,29638.65,29752.154171161725,59970,186,29637.91666666666,29801.647966201675,60015,143,149.0,0.0,0.0,0.0,0.0,62.5,6.943018098315442,71.0,54.0,62.5,121,121,10.10.20.147,172.86.75.88,50795,443,6,122,,,4781,c2_beaconing,mta_icedid,IcedID_2022-01-12.pcap,10.22.5.47:50070-104.168.44.45:443-6-1642007145268,219.21052631578942,365.7496987083696,1279,60,211.27272727272728,373.0335349292583,1279,60,2324,59.22222222222223,96.99760794840466,214,0,106.6,111.33852283314461,216,0,122.28571428571429,113.48232503450964,216,0,2.5,0.0,0.0,0.0,0.0,506.95647262094633,523.8724558061662,1279.0,60.0,219.21052631578942,12,13,10.22.5.47,104.168.44.45,50070,443,6,19,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b74790,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:52207-52.137.108.250:443-6-1668462625113,456.8000000000001,598.4008805082956,1514,54,275.3333333333333,439.9577114664407,1479,54,3304,13.965517241379311,27.754642801598706,79,0,36.81818181818182,36.2955043547219,80,0,19.705882352941178,31.354355171734817,79,0,3.0,0.0,0.0,0.0,0.0,664.3234567901235,617.06761269771,1514.0,54.0,456.8000000000001,19,21,172.16.24.174,52.137.108.250,52207,443,6,30,licensing.mp.microsoft.com,t12d1909h2_d83cc789557e_7af1ed941c26,895252f3ce80cebf7a8837be83ec8e164801,c2_beaconing,mta_icedid,IcedID_2022-10-31_0.pcap,172.16.0.153:57583-138.68.255.102:443-6-1667227710943,903.4406930253215,651.6135571990227,1414,60,60.50951086956523,8.253132443780094,239,60,44535,30.088888888888892,1279.8085249291012,60692,0,92.10884353741497,2239.0488106990438,60692,0,44.66050198150594,1563.6816436058566,60830,0,1.0,0.0,0.0,0.0,0.0,613.7660109204805,598.1473908924581,1414.0,60.0,239.0,1474,1475,172.16.0.153,138.68.255.102,57583,443,6,2251,sainforgromset.com,t12d190800_d83cc789557e_7af1ed941c26,ec74a5c51106f0419184d0dd08fb05bc4811,c2_beaconing,mta_gozi,Gozi_2023-07-12.pcap,10.7.12.121:50036-170.130.55.162:443-6-1689202925173,335.72,506.49551824275807,1418,54,130.3076923076923,179.39267200538256,636,54,1694,449.625,2118.508495278038,10392,0,899.25,2990.503123525903,10392,0,977.9090909090909,3123.748243842498,10393,0,1.0,0.0,0.0,0.0,0.0,517.5864102564102,523.3398987736261,1418.0,54.0,335.72,18,20,10.7.12.121,170.130.55.162,50036,443,6,25,iamupdate.com,t12d190700_d83cc789557e_2dae41c691ec,4ce0442e9d20d092d9d74e9ce54b363a4821,c2_beaconing,mta_gootloader,GootLoader_2023-12-29.pcap,10.12.29.101:51378-104.21.75.153:443-6-1703877565520,306.1538461538462,465.53067320242997,1514,54,357.85714285714283,532.7001747610716,1514,54,2505,21.750000000000004,48.46390409366543,165,0,43.5,64.46006515665339,166,0,43.8,71.13156823801933,165,0,21.5,0.0,0.0,0.0,0.0,576.2049247049247,583.7287138825303,1514.0,54.0,306.1538461538462,8,10,10.12.29.101,104.21.75.153,51378,443,6,13,instawp.io,t12d210700_76e208dd3e22_2dae41c691ec,b31c0b82752ea0e2c48b8ce46e9263e54830,benign,benign,ctu_normal14_win_full_2017.pcap,10.0.2.15:50452-13.32.100.204:443-6-1560050,115.66666666666666,150.37911686094844,571,54,150.66666666666666,206.86581802382594,571,54,904,1223.0909090909092,4022.057445003625,13350,0,2690.8,5958.698742175175,13350,1,2684.4,5962.255428946331,13350,7,20.0,0.0,0.0,0.0,0.0,206.77777777777777,200.7493984739539,571.0,54.0,115.66666666666666,5,7,10.0.2.15,13.32.100.204,50452,443,6,12,auid.adledge.com,t12d1712h2_67e6df579eba_88be6878e1da,d199ba0af2b08e204c73d6d81a1fd2604841,c2_beaconing,mta_pikabot,Pikabot_2023-05-23.pcap,10.1.0.186:55338-104.238.35.63:8080-6-1684859746804,336.9642857142857,491.0779135694938,1514,54,239.46666666666667,413.35506471290455,1514,54,3592,17.740740740740737,40.55726492124115,165,0,34.214285714285715,51.79572089754812,165,0,33.33333333333334,53.67466531772412,165,0,75.0,0.0,0.0,0.0,0.0,636.6547212047212,633.3576997555914,1514.0,54.0,336.9642857142857,20,22,10.1.0.186,104.238.35.63,55338,8080,6,28,turiruy.us,t13d201200_2b729b4bf6f3_2e4f304f1f45,2253c82f03b621c5144709b393fde2c94851,c2_beaconing,mta_icedid,IcedID_2022-10-31_1.pcap,172.16.0.153:57872-198.44.140.67:8008-6-1667231533795,764.588571428571,640.6547214181112,1354,60,75.65789473684208,120.13150108591168,1354,60,11500,7.733524355300859,32.75940760577269,150,0,16.894039735099337,47.15084337427144,153,0,12.939086294416246,41.652184022626706,150,0,1.0,0.0,0.0,0.0,0.0,708.4123458477844,601.6169071300975,1354.0,60.0,764.588571428571,211,212,172.16.0.153,198.44.140.67,57872,8008,6,350,clouditsoft.com,t12d190700_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b74860,benign,benign,ctu_normal21_kali_2017.pcap,192.168.1.191:57478-151.101.112.129:443-6-1493726990793,113.62500000000001,131.44980030414655,583,54,129.44444444444446,171.4351999379876,583,54,1165,357.46666666666664,1274.9388706167538,4964,0,670.2500000000001,1756.7372150828771,5016,1,890.0,2028.4584294483336,5028,0,41.5,0.0,0.0,0.0,0.0,210.4839065255732,204.70234628084063,583.0,54.0,113.62500000000001,8,13,192.168.1.191,151.101.112.129,57478,443,6,16,s.skimresources.com,t12d1110h2_43e74fd21232_205f67e4d9f4,7bee5c1d424b7e5f943b06983bb114224870,benign,benign,ctu_normal20_win_2017_https.pcap,10.0.2.15:52337-172.217.22.228:443-6-7749905,184.87500000000006,310.2634861711314,1474,54,111.72727272727272,110.22970899257942,534,54,2458,4355.40425531915,16230.604681681609,66499,0,9747.809523809523,23467.252115701674,66499,0,8187.039999999999,21796.57927955669,66709,0,24.0,0.0,0.0,0.0,0.0,465.2635003885004,557.6320649961337,1474.0,54.0,184.87500000000006,40,42,10.0.2.15,172.217.22.228,52337,443,6,48,www.google.com,t12d1509h2_073e58a039a6_e70312a1ce2c,ab41313cfec25328b20865eb1388e0a24881,c2_beaconing,mta_qakbot,Qakbot_2022-12-09.pcap,10.12.9.101:49799-83.213.192.136:443-6-1670629379428,64.0,4.898979485566356,66,54,66.0,0.0,66,66,330,15000.8,25265.52157981307,59942,1015,3765.5,3095.5344718911897,8015,1015,0.0,0.0,0,0,4016.0,0.0,0.0,0.0,0.0,60.44444444444444,5.7948465824023545,66.0,54.0,64.0,0,1,10.12.9.101,83.213.192.136,49799,443,6,6,,,4890,exfil,mta_astaroth,Astaroth_2023-01-04_0.pcap,10.1.4.101:49926-108.177.112.94:443-6-1672847451385,340.8461538461538,478.8770602841577,1514,54,172.35294117647055,224.7590212807015,839,54,2930,1594.078947368421,7629.521664654783,44969,0,3785.9375,11607.442684006672,44969,0,737.4285714285713,3291.7198782920245,15103,0,70.0,0.0,0.0,0.0,0.0,557.0271721742309,564.929988022906,1514.0,54.0,340.8461538461538,33,35,10.1.4.101,108.177.112.94,49926,443,6,39,id.google.com,t13d1616h2_e72c3b3287f1_e5627efa2ab1,eb1d94daa7e0344597e756a1fb6e70544900,benign,benign,ctu_normal21_kali_2017.pcap,192.168.1.191:40720-23.74.167.50:443-6-1493726672852,108.33333333333331,124.43235818992535,583,54,123.09999999999997,162.87108057874758,583,54,1231,388.64705882352933,1472.8674813597654,6102,0,734.1111111111111,2047.1631862436152,6192,0,932.8571428571428,2319.077792900404,6189,1,45.5,0.0,0.0,0.0,0.0,208.81203703703704,205.48993904328012,583.0,54.0,108.33333333333331,10,15,192.168.1.191,23.74.167.50,40720,443,6,18,ak.sail-horizon.com,t12d1110h2_43e74fd21232_205f67e4d9f4,7bee5c1d424b7e5f943b06983bb114224911,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:50787-194.165.16.90:443-6-1668458725566,466.32,610.5326035520134,1514,54,493.1666666666667,647.6681014971864,1514,54,5918,58.75,142.16165018249012,482,0,128.09090909090907,192.10749831563294,483,0,97.25,184.7805209135717,482,0,1.0,0.0,0.0,0.0,0.0,678.3361253561253,614.6092548983562,1514.0,54.0,466.32,14,16,172.16.24.174,194.165.16.90,50787,443,6,25,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b74921,c2_beaconing,mta_icedid,IcedID_2022-10-31_1.pcap,172.16.0.153:57833-198.44.140.67:8008-6-1667231364543,281.71428571428567,397.3117343921701,1354,60,276.3636363636363,412.4910357152681,1354,60,3040,38.09999999999999,66.64509300055504,152,0,60.99999999999999,78.10818707977346,152,0,67.88888888888889,79.56356648058905,153,0,2.0,0.0,0.0,0.0,0.0,565.2975468975469,565.0122623570202,1354.0,60.0,281.71428571428567,14,15,172.16.0.153,198.44.140.67,57833,8008,6,21,clouditsoft.com,t12d190700_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b74931,c2_beaconing,mta_icedid,IcedID_2022-01-12.pcap,10.22.5.47:49978-104.168.44.45:443-6-1642006772113,219.21052631578942,365.7496987083696,1279,60,211.27272727272728,373.0335349292583,1279,60,2324,59.33333333333333,96.92871850276488,214,0,106.8,111.97598948981081,218,0,122.85714285714286,113.38640214098069,217,0,3.5,0.0,0.0,0.0,0.0,506.95647262094633,523.8724558061662,1279.0,60.0,219.21052631578942,12,13,10.22.5.47,104.168.44.45,49978,443,6,19,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b74940,benign,benign,ctu_normal14_win_full_2017.pcap,10.0.2.15:50133-45.55.217.192:443-6-1307497,114.41666666666666,149.58394319112617,571,54,150.66666666666666,206.86581802382594,571,54,904,35.54545454545454,58.164187669671165,130,0,78.2,70.95561993246201,132,0,51.4,68.16010563372096,130,1,1.0,0.0,0.0,0.0,0.0,204.69444444444446,201.01362738645787,571.0,54.0,114.41666666666666,5,7,10.0.2.15,45.55.217.192,50133,443,6,12,anon-sms.com,t12d1712h2_67e6df579eba_88be6878e1da,c6227321ea7621862dc7b7351771a62c4951,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:51959-194.165.16.90:443-6-1668460377611,450.4615384615385,603.0142439955614,1514,54,459.3846153846154,631.944425096271,1514,54,5972,52.559999999999995,129.53637841677266,434,0,109.50000000000001,173.22371242256224,436,0,91.24999999999999,171.71282845071727,434,0,1.0,0.0,0.0,0.0,0.0,672.8205128205128,616.4463618420267,1514.0,54.0,450.4615384615385,16,18,172.16.24.174,194.165.16.90,51959,443,6,26,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b74961,c2_beaconing,mta_icedid,IcedID_2022-01-12.pcap,10.22.5.47:50049-104.168.44.45:443-6-1642007053849,219.21052631578942,365.7496987083696,1279,60,211.27272727272728,373.0335349292583,1279,60,2324,59.00000000000001,96.6260225575601,212,0,106.2,110.90115719264007,214,0,122.0,112.8775147375833,214,0,3.0,0.0,0.0,0.0,0.0,506.95647262094633,523.8724558061662,1279.0,60.0,219.21052631578942,12,13,10.22.5.47,104.168.44.45,50049,443,6,19,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b74970,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:51575-52.182.141.63:443-6-1668459884501,515.0625000000001,635.3353159628995,1514,54,592.8571428571428,664.5000268730512,1514,54,8300,1154.1935483870966,6353.773904378168,35389,0,2752.3076923076924,9806.240652297354,35389,0,2102.235294117647,8594.361963879372,35453,0,43.0,0.0,0.0,0.0,0.0,696.2750220458554,609.6935083306472,1514.0,54.0,515.0625000000001,14,16,172.16.24.174,52.182.141.63,51575,443,6,32,browser.events.data.msn.com,t13d1616h2_e72c3b3287f1_e5627efa2ab1,986571066668055ae9481cb84fda634a4980,benign,benign,ctu_normal20_win_2017_https.pcap,10.0.2.15:51417-169.47.30.64:443-6-5672162,246.7083333333334,406.7798762889128,1474,54,140.63636363636365,153.56384517670344,459,54,1547,897.0,2441.023797880345,9793,0,2063.1,3452.3529963071724,9793,4,1703.75,3293.718129050566,10006,0,59.0,0.0,0.0,0.0,0.0,476.9784706034706,548.842701874068,1474.0,54.0,246.7083333333334,17,19,10.0.2.15,169.47.30.64,51417,443,6,24,tags.bluekai.com,t12d1509h2_073e58a039a6_e70312a1ce2c,f4fb99c318cd91a4dfff259227ba977b4991,c2_beaconing,mta_gozi,Gozi_2023-07-12.pcap,10.7.12.121:50675-170.130.55.162:443-6-1689205867640,392.8095238095238,575.2584305377557,1514,54,164.2222222222222,209.92187700295662,636,54,1478,550.1,2352.8942289511397,10541,0,1375.25,3705.38753515935,10541,0,997.090909090909,3167.6999370062013,10543,0,34.0,0.0,0.0,0.0,0.0,549.6979717813051,555.5549358917067,1514.0,54.0,392.8095238095238,11,13,10.7.12.121,170.130.55.162,50675,443,6,21,iamupdate.com,t12d190700_d83cc789557e_2dae41c691ec,4ce0442e9d20d092d9d74e9ce54b363a5001,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:51964-194.165.16.90:443-6-1668460384861,466.32,610.5326035520134,1514,54,493.1666666666667,647.6681014971864,1514,54,5918,60.74999999999999,144.6769264377643,471,0,132.54545454545453,194.73641859516857,472,0,103.66666666666667,189.5541819079386,471,0,1.0,0.0,0.0,0.0,0.0,678.3361253561253,614.6092548983562,1514.0,54.0,466.32,14,16,172.16.24.174,194.165.16.90,51964,443,6,25,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b75010,benign,benign,ctu_normal20_win_2017_https.pcap,10.0.2.15:50148-95.172.94.51:443-6-3511380,104.19999999999999,134.1588610565847,571,54,136.99999999999997,192.27237624439624,571,54,959,813.0714285714287,2660.7198697485474,10034,1,1896.8333333333335,3994.1653153902716,10035,32,1621.857142857143,3717.0215867264587,10035,5,17.5,0.0,0.0,0.0,0.0,201.29999999999998,202.19426302444884,571.0,54.0,104.19999999999999,9,11,10.0.2.15,95.172.94.51,50148,443,6,15,pixel.quantserve.com,t12d1510h2_073e58a039a6_60bf0a45ed8c,fbe78c619e7ea20046131294ad087f055021,exfil,mta_lumma,Lumma_2025-08-15.pcap,10.8.15.176:62784-5.10.250.239:443-6-1755286280636,60.0,4.898979485566356,66,54,61.5,3.0,66,60,246,77.83333333333333,85.09151935808096,165,0,100.66666666666666,87.27160668472497,155,0,160.0,8.48528137423857,166,154,150.5,0.0,0.0,0.0,0.0,60.611111111111114,4.507880616689065,66.0,54.0,60.0,0,1,10.8.15.176,5.10.250.239,62784,443,6,7,,,5030,benign,benign,ctu_normal21_kali_2017.pcap,192.168.1.191:54926-172.217.23.194:443-6-1493726905434,118.08333333333336,111.27870090615869,583,54,133.83333333333331,148.3042531930609,583,66,1606,145.52173913043478,149.52709379459003,451,0,276.54545454545456,332.58633875622843,1183,0,302.0,212.27953269215567,615,0,271.5,0.0,0.0,0.0,0.0,212.47222222222223,203.7201617930529,583.0,54.0,118.08333333333336,15,17,192.168.1.191,172.217.23.194,54926,443,6,24,pagead2.googlesyndication.com,t12d1110h2_43e74fd21232_205f67e4d9f4,554786d4c84f8a7953b7e453c63710675040,benign,benign,ctu_normal20_win_2017_https.pcap,10.0.2.15:64894-188.125.66.33:443-6-9519511,268.6818181818182,445.49195774512515,1474,54,122.60000000000001,162.347501092906,571,54,1226,431.7619047619048,1455.401590790731,6642,0,1007.2222222222222,2156.8385299888455,6642,1,820.090909090909,2062.19758774689,6872,0,43.5,0.0,0.0,0.0,0.0,495.8553872053872,548.4253993477,1474.0,54.0,268.6818181818182,13,15,10.0.2.15,188.125.66.33,64894,443,6,22,sp.analytics.yahoo.com,t12d1510h2_073e58a039a6_60bf0a45ed8c,b898351eb5e266aefd3723d4669354945051,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:51097-194.165.16.90:443-6-1668459197138,466.32,610.5326035520134,1514,54,493.1666666666667,647.6681014971864,1514,54,5918,68.16666666666667,168.74515559337365,647,0,148.72727272727272,229.14846318886404,647,0,117.66666666666667,223.63254492921007,647,0,1.5,0.0,0.0,0.0,0.0,678.3361253561253,614.6092548983562,1514.0,54.0,466.32,14,16,172.16.24.174,194.165.16.90,51097,443,6,25,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b75060,exfil,mta_lumma,Lumma_2025-06-26.pcap,10.6.26.101:50942-173.194.208.101:443-6-1750979195173,403.47619047619054,541.203253782497,1514,54,144.77777777777777,179.07734207443565,595,54,1303,5841.650000000001,26055.227297082474,116538,0,14604.125,41187.52434705545,116538,3,10618.090909090912,35146.915205902624,116590,0,33.5,0.0,0.0,0.0,0.0,547.8615520282187,556.4325225640106,1514.0,54.0,403.47619047619054,13,15,10.6.26.101,173.194.208.101,50942,443,6,21,play.google.com,t12d180700_4b22cbed5bed_2dae41c691ec,84aaf6d03fc8c5bfb56d1d188735b2685071,c2_beaconing,mta_gozi,Gozi_2023-07-12.pcap,10.7.12.121:50077-170.130.55.162:443-6-1689203124775,390.76190476190476,575.9654420850183,1514,54,164.2222222222222,209.92187700295662,636,54,1478,543.5,2323.8035857755185,10411,0,1358.75,3659.4218805707546,10411,0,984.5454545454545,3128.015644578408,10411,0,37.0,0.0,0.0,0.0,0.0,549.0723104056437,555.610104810533,1514.0,54.0,390.76190476190476,11,13,10.7.12.121,170.130.55.162,50077,443,6,21,iamupdate.com,t12d190700_d83cc789557e_2dae41c691ec,4ce0442e9d20d092d9d74e9ce54b363a5081,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:50258-194.165.16.90:443-6-1668457917493,466.32,610.5326035520134,1514,54,493.1666666666667,647.6681014971864,1514,54,5918,75.91666666666666,185.3996662129791,614,0,165.63636363636363,250.66681979363474,615,0,128.16666666666666,243.2962404273042,614,0,284.0,0.0,0.0,0.0,0.0,678.3361253561253,614.6092548983562,1514.0,54.0,466.32,14,16,172.16.24.174,194.165.16.90,50258,443,6,25,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b75090,benign,benign,ctu_normal14_win_full_2017.pcap,10.0.2.15:49663-31.13.84.1:443-6-912622,214.2702702702703,372.39447786876104,1452,54,152.87500000000003,259.42163235423016,1102,54,2446,1856.277777777778,8053.925387611084,44723,0,4455.066666666667,12238.55226304313,44723,0,3339.5,10765.225988289672,45065,0,49.0,0.0,0.0,0.0,0.0,532.9103210353211,579.3912208673481,1452.0,54.0,214.2702702702703,28,30,10.0.2.15,31.13.84.1,49663,443,6,37,ad.atdmt.com,t12d1711h2_67e6df579eba_de5ccbe16bdd,b898351eb5e266aefd3723d4669354945101,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:50902-194.165.16.90:443-6-1668458891774,466.32,610.5326035520134,1514,54,493.1666666666667,647.6681014971864,1514,54,5918,75.125,184.12408682143163,607,0,163.90909090909093,249.8925587309292,608,0,119.75000000000001,235.40916989940573,607,0,1.0,0.0,0.0,0.0,0.0,678.3361253561253,614.6092548983562,1514.0,54.0,466.32,14,16,172.16.24.174,194.165.16.90,50902,443,6,25,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b75110,benign,benign,ctu_normal14_win_full_2017.pcap,10.0.2.15:52260-104.16.67.157:443-6-3424560,578.2399999999998,677.4912774496865,1514,54,1082.96,633.5480434294886,1514,54,27074,32.83673469387755,140.4307876587217,943,0,67.04166666666667,206.91260057174458,943,0,64.5,247.71073593135233,1215,0,21.0,0.0,0.0,0.0,0.0,588.9688888888888,589.2675190332947,1514.0,54.0,376.0,17,19,10.0.2.15,104.16.67.157,52260,443,6,50,36c3f6db.mpstat.us,t12d1711h2_67e6df579eba_a29fe97f68c7,c23237dbea656869600e48dfbd00ab7b5121,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:51424-194.165.16.90:443-6-1668459695632,466.32,610.5326035520134,1514,54,493.1666666666667,647.6681014971864,1514,54,5918,66.41666666666666,164.07710718271844,612,0,144.9090909090909,222.71706470113804,612,0,114.08333333333333,217.17753874038937,612,0,113.0,0.0,0.0,0.0,0.0,678.3361253561253,614.6092548983562,1514.0,54.0,466.32,14,16,172.16.24.174,194.165.16.90,51424,443,6,25,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b75131,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:51431-194.165.16.90:443-6-1668459706678,435.77777777777777,589.6705294767014,1514,54,459.3846153846154,631.944425096271,1514,54,5972,65.76923076923079,165.88485348392908,611,0,142.5,225.90404238002552,613,0,114.23076923076923,219.87805478118767,611,0,1.0,0.0,0.0,0.0,0.0,668.1132817799485,618.2566902665315,1514.0,54.0,435.77777777777777,16,18,172.16.24.174,194.165.16.90,51431,443,6,27,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b75141,c2_beaconing,mta_pikabot,Pikabot_2023-11-02.pcap,10.11.2.101:52863-15.235.47.80:23399-6-1698946017330,234.40909090909088,351.6109401693202,1430,60,152.41666666666666,210.20399543531445,748,60,1829,5666.142857142857,18342.87699158917,74958,0,10809.545454545454,24735.48238205043,74958,0,13211.888888888887,27017.439462523296,74958,0,93.5,0.0,0.0,0.0,0.0,500.8473063973064,536.5948278263248,1430.0,60.0,234.40909090909088,14,15,10.11.2.101,15.235.47.80,52863,23399,6,22,,t12i190700_d83cc789557e_7af1ed941c26,ec74a5c51106f0419184d0dd08fb05bc5151,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:51529-194.165.16.90:443-6-1668459854855,450.4615384615385,603.6125400134912,1514,54,459.3846153846154,631.944425096271,1514,54,5972,56.36,139.50593774698865,469,0,117.41666666666667,186.8063938624125,470,0,94.66666666666666,182.11651282194111,469,0,1.0,0.0,0.0,0.0,0.0,672.8205128205128,616.4463618420267,1514.0,54.0,450.4615384615385,15,17,172.16.24.174,194.165.16.90,51529,443,6,26,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b75160,benign,benign,ctu_normal20_win_2017_https.pcap,10.0.2.15:50058-104.244.42.3:443-6-3348551,148.51999999999992,252.6017247592568,1474,54,117.6666666666667,155.38453644641305,852,54,3883,5389.959459459459,17849.919016307747,67318,0,12464.21875,25676.63335601052,67318,0,9727.390243902439,23286.443992028973,67522,0,6.0,0.0,0.0,0.0,0.0,488.9942857142857,576.7452362111585,1474.0,54.0,148.51999999999992,65,67,10.0.2.15,104.244.42.3,50058,443,6,75,analytics.twitter.com,t12d1509h2_073e58a039a6_e70312a1ce2c,8d2a028aa94425f76ced7826b1f390395171,c2_beaconing,mta_bumblebee,BumbleBee_2022-06-14.pcap,10.6.14.101:65393-193.233.203.156:443-6-1655226039308,162.88235294117646,290.8590471244064,1270,60,89.44444444444444,52.48359532061212,207,60,805,55.50000000000001,98.57924054620561,246,0,111.0,118.90932920266843,246,0,91.57142857142857,114.57727689621697,232,0,4.0,0.0,0.0,0.0,0.0,380.5363108206245,479.69657827340194,1270.0,60.0,162.88235294117646,9,12,10.6.14.101,193.233.203.156,65393,443,6,17,,t12i210600_76e208dd3e22_2dae41c691ec,76c691f46143bf86e2d1bb73c61877675180,benign,benign,ctu_normal21_kali_2017.pcap,192.168.1.191:34936-173.192.202.141:443-6-1493727320543,164.28571428571425,171.40614322148997,583,66,197.625,220.25500642923615,583,66,1581,41.0,53.60814614714198,147,0,61.57142857142857,57.7144035830951,149,4,85.8,81.51809615048673,184,0,33.0,0.0,0.0,0.0,0.0,230.30489417989418,196.47373750770944,583.0,66.0,164.28571428571425,9,10,192.168.1.191,173.192.202.141,34936,443,6,14,cc.chango.com,t12d1110h2_43e74fd21232_205f67e4d9f4,8529fd8de0d7f73186ef5ea8b4531a765191,c2_beaconing,mta_gozi,Gozi_2023-07-12.pcap,10.7.12.121:50616-170.130.55.162:443-6-1689205624578,377.04545454545456,556.3379820005553,1514,54,153.2,200.96201962891726,636,54,1532,520.2857142857144,2246.6278317259657,10315,0,1214.0,3416.294117900273,10315,0,990.090909090909,3096.5852306870374,10317,0,1.0,0.0,0.0,0.0,0.0,546.6476430976431,556.9243791741515,1514.0,54.0,377.04545454545456,13,15,10.7.12.121,170.130.55.162,50616,443,6,22,iamupdate.com,t12d190700_d83cc789557e_2dae41c691ec,4ce0442e9d20d092d9d74e9ce54b363a5200,benign,benign,ctu_normal21_kali_2017.pcap,192.168.1.191:35844-185.94.180.125:443-6-1493726513719,267.1111111111111,462.51256121433687,1514,66,121.10000000000001,118.8224165158522,408,66,1211,43.23529411764706,92.18021032993246,349,0,81.66666666666667,116.90273735032898,349,0,101.71428571428571,182.15626467927137,478,0,21.0,0.0,0.0,0.0,0.0,496.8706790123457,560.7708931406943,1514.0,66.0,267.1111111111111,11,12,192.168.1.191,185.94.180.125,35844,443,6,18,sync.search.spotxchange.com,t12d1109h2_43e74fd21232_fed6c16fddd0,db8185c4eafa7114cadaf05965b09ef05210,benign,benign,ctu_normal14_win_full_2017.pcap,10.0.2.15:52436-204.11.109.77:443-6-3622608,337.90000000000003,500.4240202068641,1474,54,115.1111111111111,120.44546945033305,372,54,1036,201.05263157894737,579.8151500151876,2564,0,477.5,854.5879541794228,2564,1,361.3,862.0073536680402,2800,0,185.0,0.0,0.0,0.0,0.0,495.02143658810326,546.2075407075828,1474.0,54.0,337.90000000000003,13,15,10.0.2.15,204.11.109.77,52436,443,6,20,tags.expo9.exponential.com,t12d1711h2_67e6df579eba_de5ccbe16bdd,f2330448a99fe144021ca92cace91bbe5221,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_0.pcap,172.16.24.174:49874-69.133.162.35:443-6-1668454399120,811.8451882845187,724.3657708991221,1514,54,1435.7709923664124,304.01992760813187,1514,54,188086,1.0126050420168073,10.613056640016287,119,0,1.8538461538461548,14.331140018844053,119,0,1.1962616822429917,11.500155251073826,119,0,1.0,0.0,0.0,0.0,0.0,628.4069418830253,648.8633211270746,1514.0,54.0,163.0,33,35,172.16.24.174,69.133.162.35,49874,443,6,239,,t12i190600_d83cc789557e_2dae41c691ec,fd4bc6cea4877646ccd62f0792ec0b625230,benign,benign,ctu_normal20_win_2017_https.pcap,10.0.2.15:49992-151.101.112.144:443-6-3209403,101.41176470588235,127.31803624365708,571,54,130.375,179.01710812098378,571,54,1043,365.87499999999994,1429.938920606984,5728,0,836.2857142857143,2157.57778649158,5729,2,729.875,2020.3987186055276,5730,0,7.5,0.0,0.0,0.0,0.0,202.82815904139434,202.58882062748435,571.0,54.0,101.41176470588235,9,11,10.0.2.15,151.101.112.144,49992,443,6,17,assets.publishing.service.gov.uk,t12d1510h2_073e58a039a6_60bf0a45ed8c,1d0e57c6ae42e9204defa51e5e1cdc4c5241,c2_beaconing,mta_darkgate,DarkGate_2023-12-07.pcap,10.11.28.11:52232-46.101.78.238:443-6-1701962601427,109.22222222222223,96.89398559479554,320,60,113.20000000000002,115.6339050624859,320,60,566,64.5,73.08703226779895,157,0,129.0,96.02083107326243,232,0,122.66666666666667,42.59499188089291,157,75,142.0,0.0,0.0,0.0,0.0,153.0746913580247,102.02725459294896,320.0,60.0,109.22222222222223,4,5,10.11.28.11,46.101.78.238,52232,443,6,9,cdn-uk.widgetsfordeploy.com,,5251,c2_beaconing,mta_icedid,IcedID_2023-09-28.pcap,10.10.20.147:50935-157.245.106.203:443-6-1695918682960,174.4736842105264,298.1297943329479,1356,54,113.88888888888889,86.14151792899352,274,54,1025,3732.277777777778,15261.472351318707,64870,0,8397.625,22823.147679102964,64870,0,7433.666666666667,21567.170595606647,64934,0,171.0,0.0,0.0,0.0,0.0,407.26250812215727,512.5517850039685,1356.0,54.0,174.4736842105264,14,16,10.10.20.147,157.245.106.203,50935,443,6,19,feekstokandy.com,t12d190800_d83cc789557e_7af1ed941c26,ec74a5c51106f0419184d0dd08fb05bc5260,exfil,mta_astaroth,Astaroth_2023-01-04_0.pcap,10.1.4.101:49672-52.226.139.185:443-6-1672817575213,122.0,83.55836283700154,225,54,104.5,71.4177848998413,155,54,209,41.0,35.510561809129406,62,0,123.0,0.0,123,123,61.0,0.0,61,61,61.5,0.0,0.0,0.0,0.0,125.88888888888889,63.818657049912304,225.0,54.0,122.0,3,3,10.1.4.101,52.226.139.185,49672,443,6,4,,,5271,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:52107-194.165.16.90:443-6-1668460610398,450.4615384615385,603.0142439955614,1514,54,459.3846153846154,631.944425096271,1514,54,5972,63.0,162.8997646816389,654,0,131.25,219.6497728823609,655,0,112.24999999999999,220.19830938166953,654,0,5.5,0.0,0.0,0.0,0.0,672.8205128205128,616.4463618420267,1514.0,54.0,450.4615384615385,16,18,172.16.24.174,194.165.16.90,52107,443,6,26,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b75280,benign,benign,ctu_normal21_kali_2017.pcap,192.168.1.191:54172-54.239.29.3:443-6-1493726945574,171.66666666666666,302.420371834989,1514,54,197.45454545454544,362.6417262878358,1514,54,4344,1823.8292682926826,3724.7701600396704,10021,0,3558.380952380952,4754.725096955559,10408,0,3923.1578947368416,4901.879155126327,10391,0,237.0,0.0,0.0,0.0,0.0,499.26902356902355,583.513078107748,1514.0,54.0,171.66666666666666,24,25,192.168.1.191,54.239.29.3,54172,443,6,42,payments.amazon.com,t12d1109h2_43e74fd21232_fed6c16fddd0,d199ba0af2b08e204c73d6d81a1fd2605291,c2_beaconing,mta_gozi,Gozi_2023-07-12.pcap,10.7.12.121:50099-170.130.55.162:443-6-1689203210899,376.4545454545455,554.998217695356,1514,54,153.2,200.96201962891726,636,54,1532,518.0952380952381,2276.0475369544,10447,0,1208.888888888889,3465.775470383376,10447,0,986.5454545454547,3139.408299779956,10448,0,5.0,0.0,0.0,0.0,0.0,546.4616161616161,556.9408340161756,1514.0,54.0,376.4545454545455,13,15,10.7.12.121,170.130.55.162,50099,443,6,22,iamupdate.com,t12d190700_d83cc789557e_2dae41c691ec,4ce0442e9d20d092d9d74e9ce54b363a5301,c2_beaconing,mta_pikabot,Pikabot_2023-10-03.pcap,10.1.2.147:49410-179.60.149.244:443-6-1696349568467,430.1515151515151,586.2012304454483,1450,60,335.05555555555554,529.120187861524,1450,60,6031,13.343749999999998,27.093159921207587,78,0,25.117647058823536,40.47357525741514,116,0,25.714285714285715,34.282600591213956,78,0,4.0,0.0,0.0,0.0,0.0,646.6081930415264,586.069711246441,1450.0,60.0,430.1515151515151,16,17,10.1.2.147,179.60.149.244,49410,443,6,33,zzerxc.com,t12d190700_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b75311,c2_beaconing,mta_gozi,Gozi_2023-07-12.pcap,10.7.12.121:50180-170.130.55.162:443-6-1689203583934,378.3636363636364,558.7570002079485,1514,54,153.2,200.96201962891726,636,54,1532,521.8571428571429,2274.7045145625902,10442,0,1217.6666666666667,3461.5829110393993,10442,0,993.3636363636366,3136.7334688407072,10444,0,1.0,0.0,0.0,0.0,0.0,547.0626262626263,556.888541395858,1514.0,54.0,378.3636363636364,13,15,10.7.12.121,170.130.55.162,50180,443,6,22,iamupdate.com,t12d190700_d83cc789557e_2dae41c691ec,4ce0442e9d20d092d9d74e9ce54b363a5320,c2_beaconing,mta_bumblebee,BumbleBee_2022-06-14.pcap,10.6.14.101:65468-52.182.143.211:443-6-1655228306477,414.29999999999995,523.4411543863007,1430,60,264.90909090909093,372.49602804471743,1023,60,2914,27.947368421052634,41.14267004273803,145,0,53.1,54.58215011440197,145,0,61.625,83.14348612918684,240,0,42.0,0.0,0.0,0.0,0.0,593.2331088664422,535.1943540047647,1430.0,60.0,414.29999999999995,11,12,10.6.14.101,52.182.143.211,65468,443,6,20,v10.events.data.microsoft.com,t12d1909h2_d83cc789557e_7af1ed941c26,678aeaf909676262acfb913ccb78a1265330,benign,benign,ctu_normal14_win_full_2017.pcap,10.0.2.15:49993-45.55.217.192:443-6-1152383,114.41666666666666,149.58394319112617,571,54,150.66666666666666,206.86581802382594,571,54,904,38.09090909090909,56.51274996928489,131,0,83.8,73.89993234097038,143,1,57.2,63.70007849288727,131,1,13.5,0.0,0.0,0.0,0.0,204.69444444444446,201.01362738645787,571.0,54.0,114.41666666666666,5,7,10.0.2.15,45.55.217.192,49993,443,6,12,anon-sms.com,t12d1712h2_67e6df579eba_88be6878e1da,c6227321ea7621862dc7b7351771a62c5341,c2_beaconing,mta_bumblebee,BumbleBee_2022-06-14.pcap,10.6.14.101:65533-172.93.181.105:443-6-1655229931804,165.94444444444446,216.43406066139195,858,60,145.11111111111111,174.64209432754495,578,60,1306,25.05882352941176,38.72736530580684,93,0,43.25,45.77819193833301,94,0,42.625,44.31683814146879,94,0,5.0,0.0,0.0,0.0,0.0,330.2037037037037,319.61476082320854,858.0,60.0,165.94444444444446,12,13,10.6.14.101,172.93.181.105,65533,443,6,18,hocavopeh.com,t12d190700_d83cc789557e_2dae41c691ec,ae4edc6faf64d08308082ad26be607675351,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:52463-77.126.81.208:443-6-1668470156390,174.78947368421055,286.40464361291515,1117,54,152.9090909090909,224.33655722839939,770,54,1682,7824.833333333335,26379.56135801307,109676,0,14084.699999999999,34878.134519590734,109676,0,20093.714285714286,41040.563412776086,109677,1,191.0,0.0,0.0,0.0,0.0,410.9526182881446,431.1475418407014,1117.0,54.0,174.78947368421055,12,14,172.16.24.174,77.126.81.208,52463,443,6,19,,t12i190600_d83cc789557e_2dae41c691ec,fd4bc6cea4877646ccd62f0792ec0b625361,exfil,mta_stealc,StealC_2025-06-18.pcap,172.16.1.128:57238-142.251.186.155:443-6-1750264095651,1065.4039215686275,615.0474771894924,1514,54,95.38333333333333,154.79895016359578,737,54,5723,8.740157480314961,89.79794733416601,1418,0,37.6271186440678,184.6786489820372,1418,0,11.113402061855673,102.6303166320408,1418,0,4.0,0.0,0.0,0.0,0.0,716.8510055304173,625.0120436216201,1514.0,54.0,737.0,162,164,172.16.1.128,142.251.186.155,57238,443,6,255,pagead2.googlesyndication.com,t12d180700_4b22cbed5bed_2dae41c691ec,b31c0b82752ea0e2c48b8ce46e9263e55371,c2_beaconing,mta_icedid,IcedID_2022-10-31_1.pcap,172.16.0.153:57734-66.63.168.75:443-6-1667230722099,205.93333333333334,330.4368248819966,1356,60,120.74999999999999,89.43433345198028,275,60,966,4381.714285714284,16000.130049608835,59969,1,8763.42857142857,22581.54543616788,59969,1,10204.5,24459.124152348544,60129,5,79.0,0.0,0.0,0.0,0.0,421.88544973544975,506.73051467018877,1356.0,60.0,205.93333333333334,9,10,172.16.0.153,66.63.168.75,57734,443,6,15,airsaintol.beauty,t12d190800_d83cc789557e_7af1ed941c26,ec74a5c51106f0419184d0dd08fb05bc5380,c2_beaconing,mta_pikabot,Pikabot_2023-10-03.pcap,10.1.2.147:49612-52.165.165.26:443-6-1696349968847,641.7999999999998,658.4444873010503,1430,60,91.77272727272727,69.09960500071914,283,60,2019,5.877551020408164,14.089938273257898,50,0,13.714285714285714,20.52837757140797,61,0,9.148148148148149,17.5163741060575,51,0,8.0,0.0,0.0,0.0,0.0,570.0596681096681,560.7242869334393,1430.0,60.0,283.0,34,35,10.1.2.147,52.165.165.26,49612,443,6,50,slscr.update.microsoft.com,t12d1909h2_d83cc789557e_7af1ed941c26,87b9bed0515be16c82bdc44d88a4a0ec5391,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:50797-194.165.16.90:443-6-1668458740334,409.44827586206895,572.4708093747723,1514,54,430.42857142857144,616.7435215943265,1514,54,6026,47.24999999999998,124.38340516918437,442,0,101.76923076923079,169.70668511982365,442,0,78.28571428571426,162.51032088948813,442,0,2.5,0.0,0.0,0.0,0.0,659.3048348841452,621.6557528775471,1514.0,54.0,409.44827586206895,18,20,172.16.24.174,194.165.16.90,50797,443,6,29,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b75401,exfil,mta_lumma,Lumma_2025-08-15.pcap,10.8.15.176:62826-5.10.250.239:443-6-1755287520989,60.0,4.898979485566356,66,54,61.5,3.0,66,60,246,75.33333333333333,82.181912040708,153,0,99.66666666666666,86.35006272918007,152,0,152.5,2.1213203435596424,154,151,149.0,0.0,0.0,0.0,0.0,60.611111111111114,4.507880616689065,66.0,54.0,60.0,0,1,10.8.15.176,5.10.250.239,62826,443,6,7,,,5410,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:51591-209.54.177.41:443-6-1668459890508,437.22727272727263,594.3999721061792,1514,54,268.77777777777777,433.2187027869924,1332,54,2419,1419.2380952380952,6191.95136370403,28436,0,3725.4999999999995,9986.400123596663,28436,1,2477.5,8190.6002499539345,28480,0,43.0,0.0,0.0,0.0,0.0,642.4279115945783,598.4327818571816,1514.0,54.0,437.22727272727263,12,14,172.16.24.174,209.54.177.41,51591,443,6,22,aax-us-iad.amazon.com,t13d1616h2_e72c3b3287f1_e5627efa2ab1,8bbcb0bf0a942234f77bd504ffdd20135420,benign,benign,ctu_normal14_win_full_2017.pcap,10.0.2.15:51848-34.204.140.43:443-6-3366062,322.09375,466.1538828973996,1474,54,326.4285714285714,482.3758053451868,1224,54,4570,167.3870967741935,449.1280201619841,1850,0,399.1538461538462,646.005785081662,1850,0,297.05882352941177,665.2292340415667,2088,0,138.0,0.0,0.0,0.0,0.0,589.0271715167548,581.337803108483,1474.0,54.0,322.09375,24,26,10.0.2.15,34.204.140.43,51848,443,6,32,r.dlx.addthis.com,t12d1711h2_67e6df579eba_de5ccbe16bdd,303951d4c50efb2e991652225a6f02b15430,benign,benign,ctu_normal21_kali_2017.pcap,192.168.1.191:44076-104.20.31.2:443-6-1493726744406,217.5769230769231,398.01408749710583,1514,54,88.28571428571428,58.3615107246714,247,54,1236,34.79999999999999,53.07306284736166,179,0,66.53846153846152,72.77432627034457,182,0,62.81818181818183,81.53872476537536,197,0,50.5,0.0,0.0,0.0,0.0,456.80881155881156,574.16077038292,1514.0,54.0,217.5769230769231,18,20,192.168.1.191,104.20.31.2,44076,443,6,26,api-v3.tinypass.com,t12d1109h2_43e74fd21232_fed6c16fddd0,76cc3e2d3028143b23ec18e27dbd7ca95440,benign,benign,ctu_normal20_win_2017_https.pcap,10.0.2.15:50995-193.0.160.206:443-6-3964130,306.5,497.20016090101984,1514,54,233.50000000000009,416.6975140096449,1514,54,2802,480.7826086956522,2041.4849532213675,9824,0,1005.0909090909092,2931.6896307264674,9824,0,1002.4545454545455,3015.6769509891596,10078,0,4.0,0.0,0.0,0.0,0.0,620.3888888888889,631.9598606178234,1514.0,54.0,306.5,17,19,10.0.2.15,193.0.160.206,50995,443,6,24,p.rfihub.com,t12d1509h2_073e58a039a6_e70312a1ce2c,0a917d753018dad73d9899ace370f8d85451,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:51215-194.165.16.90:443-6-1668459370782,435.7777777777777,592.4256093081244,1514,54,459.3846153846154,631.944425096271,1514,54,5972,60.15384615384615,148.70257356419685,518,0,130.33333333333334,201.26795045110356,519,0,98.38461538461539,191.57963464381177,518,0,1.0,0.0,0.0,0.0,0.0,668.1132817799485,618.2566902665315,1514.0,54.0,435.7777777777777,16,18,172.16.24.174,194.165.16.90,51215,443,6,27,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b75460,benign,benign,ctu_normal14_win_full_2017.pcap,10.0.2.15:50589-172.217.23.206:443-6-1858881,295.27027027027026,455.9048785199148,1474,54,147.75,199.80473801522658,840,54,2364,1139.8055555555557,6610.170781538939,39691,0,2735.5333333333338,10225.691027062787,39691,0,2049.45,8861.711177722304,39691,0,6.0,0.0,0.0,0.0,0.0,533.4096596596596,555.1950529070825,1474.0,54.0,295.27027027027026,26,28,10.0.2.15,172.217.23.206,50589,443,6,37,plus.google.com,t12d1711h2_67e6df579eba_de5ccbe16bdd,7ce1896a8d7190ee334e3c8ea463b0c15471,c2_beaconing,mta_pikabot,Pikabot_2023-11-02.pcap,10.11.2.101:53081-210.243.8.247:23399-6-1698968304475,241.80952380952374,357.9211671650084,1430,60,152.5,210.46161386127142,749,60,1830,8083.55,24477.539970294572,84011,0,14697.363636363636,32117.592827834174,84011,0,9676.749999999998,26413.500529355926,75037,0,256.5,0.0,0.0,0.0,0.0,504.91093474426805,535.3248668601432,1430.0,60.0,241.80952380952374,14,15,10.11.2.101,210.243.8.247,53081,23399,6,21,,t12i190700_d83cc789557e_7af1ed941c26,ec74a5c51106f0419184d0dd08fb05bc5481,c2_beaconing,mta_emotet,Emotet_2022-04-25.pcap,10.4.25.101:49821-138.197.147.101:443-6-1650905594913,152.76470588235296,184.56216073851812,613,60,149.0,181.05002378102884,580,60,1490,1774.8125,6114.047107208667,24531,0,3155.222222222222,8074.713474448765,24531,0,615.1666666666667,1188.1408025426392,3006,0,75.5,0.0,0.0,0.0,0.0,271.7675070028011,236.77626989440427,613.0,60.0,152.76470588235296,11,12,10.4.25.101,138.197.147.101,49821,443,6,17,,t12i190600_d83cc789557e_2dae41c691ec,fd4bc6cea4877646ccd62f0792ec0b625490,c2_beaconing,mta_qakbot,Qakbot_2022-09-29.pcap,10.9.29.201:49995-196.217.32.15:443-6-1664414450929,64.0,4.898979485566356,66,54,66.0,0.0,66,66,330,15000.8,25266.27386853867,59943,1005,3765.25,3097.671423827905,8017,1005,0.0,0.0,0,0,4014.0,0.0,0.0,0.0,0.0,60.44444444444444,5.7948465824023545,66.0,54.0,64.0,0,1,10.9.29.201,196.217.32.15,49995,443,6,6,,,5500,benign,benign,ctu_normal21_kali_2017.pcap,192.168.1.191:46784-52.94.216.48:443-6-1493727083418,255.15909090909082,397.20236440324277,1514,54,147.66666666666669,177.74203747019996,525,54,3544,1565.46511627907,3486.616338630015,10036,0,2924.869565217391,4535.393821773041,10784,0,3539.684210526316,4790.971753118702,10753,0,80.0,0.0,0.0,0.0,0.0,500.2195286195286,562.8569620256709,1514.0,54.0,255.15909090909082,25,27,192.168.1.191,52.94.216.48,46784,443,6,44,aax-eu.amazon-adsystem.com,t12d1109h2_43e74fd21232_fed6c16fddd0,f202c80180f2d5974e17316b228773545510,benign,benign,ctu_normal20_win_2017_https.pcap,10.0.2.15:52561-52.28.153.152:443-6-9152578,298.3181818181818,488.381231491063,1474,54,90.2,67.59815908078497,247,54,902,353.6190476190476,1132.34405002148,5231,0,825.111111111111,1673.2609214079887,5231,1,672.6363636363636,1609.6376159078338,5481,0,50.0,0.0,0.0,0.0,0.0,468.58535353535353,553.6381427704316,1474.0,54.0,247.0,14,16,10.0.2.15,52.28.153.152,52561,443,6,22,t.myvisualiq.net,t12d1509h2_073e58a039a6_e70312a1ce2c,ccc514751b175866924439bdbb5bba345521,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:51519-194.165.16.90:443-6-1668459838339,435.7777777777777,592.4256093081244,1514,54,459.3846153846154,631.944425096271,1514,54,5972,56.38461538461537,144.32548684777112,529,0,122.16666666666667,197.31923065904851,531,0,95.61538461538461,190.35866956070868,529,0,1.0,0.0,0.0,0.0,0.0,668.1132817799485,618.2566902665315,1514.0,54.0,435.7777777777777,16,18,172.16.24.174,194.165.16.90,51519,443,6,27,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b75531,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:51274-194.165.16.90:443-6-1668459461847,466.32,610.5326035520134,1514,54,493.1666666666667,647.6681014971864,1514,54,5918,70.33333333333333,179.06755263251102,715,0,153.45454545454547,244.85888329254615,716,0,119.5,237.5700853528185,715,0,123.5,0.0,0.0,0.0,0.0,678.3361253561253,614.6092548983562,1514.0,54.0,466.32,14,16,172.16.24.174,194.165.16.90,51274,443,6,25,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b75541,c2_beaconing,mta_pikabot,Pikabot_2023-11-02.pcap,10.11.2.101:52913-154.221.30.136:13724-6-1698951216547,167.5277777777778,284.65271935275905,1430,60,120.6842105263158,170.22405256066324,750,60,2293,2570.2285714285713,4403.898186872188,11758,0,4980.277777777777,5117.123569368147,11758,0,5605.5,5132.996694589493,12071,0,313.0,0.0,0.0,0.0,0.0,477.5660379161411,547.8700777652164,1430.0,60.0,167.5277777777778,28,29,10.11.2.101,154.221.30.136,52913,13724,6,36,,t12i190700_d83cc789557e_7af1ed941c26,ec74a5c51106f0419184d0dd08fb05bc5550,c2_beaconing,mta_qakbot,Qakbot_2022-09-29.pcap,10.9.29.201:50138-91.116.160.252:443-6-1664422472408,64.0,4.898979485566356,66,54,66.0,0.0,66,66,330,15000.6,25286.4715866014,59980,1006,3755.75,3092.4397461120134,8001,1006,0.0,0.0,0,0,4005.0,0.0,0.0,0.0,0.0,60.44444444444444,5.7948465824023545,66.0,54.0,64.0,0,1,10.9.29.201,91.116.160.252,50138,443,6,6,,,5560,exfil,mta_xloader,XLoader_2025-09-05.pcap,10.9.5.71:58723-40.69.42.241:443-6-1757116317558,743.2876712328767,675.0730717537188,1430,54,1083.888888888889,582.3656389020022,1430,60,48775,95.81944444444446,672.9260538742616,5716,0,156.79545454545453,859.8523556211442,5716,0,250.37037037037038,1129.4541277894498,5895,0,7.0,0.0,0.0,0.0,0.0,717.8966019182915,597.6451862407538,1430.0,54.0,743.2876712328767,26,27,10.9.5.71,40.69.42.241,58723,443,6,73,fe3cr.delivery.mp.microsoft.com,t12d1809h2_4b22cbed5bed_7af1ed941c26,87b9bed0515be16c82bdc44d88a4a0ec5571,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:52363-88.152.182.39:443-6-1668466705362,64.0,4.898979485566356,66,54,66.0,0.0,66,66,330,15000.6,25256.86509248525,59927,1030,3769.0,3090.855652835743,8014,1030,0.0,0.0,0,0,4017.0,0.0,0.0,0.0,0.0,60.44444444444444,5.7948465824023545,66.0,54.0,64.0,0,1,172.16.24.174,88.152.182.39,52363,443,6,6,,,5580,benign,benign,ctu_normal20_win_2017_https.pcap,10.0.2.15:49333-52.85.173.26:443-6-11137112,307.45454545454544,493.7465830886208,1474,54,91.3,70.46204652151397,258,54,913,321.04761904761904,1285.3259694019441,5920,0,749.1111111111111,1944.2304675915125,5920,1,610.9090909090909,1846.8796092082155,6174,0,3.0,0.0,0.0,0.0,0.0,472.70420875420876,552.7931171885818,1474.0,54.0,258.0,14,16,10.0.2.15,52.85.173.26,49333,443,6,22,dwxmyiyf7jg6.cloudfront.net,t12d1509h2_073e58a039a6_e70312a1ce2c,76cc3e2d3028143b23ec18e27dbd7ca95591,c2_beaconing,mta_gozi,Gozi_2023-07-12.pcap,10.7.12.121:50721-170.130.55.162:443-6-1689206075312,374.5,560.6641257515607,1514,54,153.2,200.96201962891726,636,54,1532,519.047619047619,2295.274111651819,10534,0,1211.111111111111,3496.8325826540668,10534,1,986.0909090909092,3167.403619829511,10534,0,3.0,0.0,0.0,0.0,0.0,545.8462962962963,556.996979610235,1514.0,54.0,374.5,14,16,10.7.12.121,170.130.55.162,50721,443,6,22,iamupdate.com,t12d190700_d83cc789557e_2dae41c691ec,4ce0442e9d20d092d9d74e9ce54b363a5601,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:52168-23.64.146.226:443-6-1668461295338,747.9599999999999,675.1673153995117,1514,54,98.75000000000001,200.18604250272602,1177,54,3160,4.621621621621622,13.247592391964501,61,0,11.032258064516132,19.074387488580495,61,1,7.214285714285712,16.24437720999997,62,0,2.0,0.0,0.0,0.0,0.0,716.0892248062015,618.9777194928587,1514.0,54.0,747.9599999999999,72,74,172.16.24.174,23.64.146.226,52168,443,6,75,www.cisco.com,t12d190700_d83cc789557e_2dae41c691ec,d227a8dd2bb7d7ee4f648c1af087578a5610,c2_beaconing,mta_icedid,IcedID_2023-09-28.pcap,10.10.20.147:50937-23.222.241.146:443-6-1695918833173,393.90000000000003,559.5871230432864,1514,54,225.85714285714283,394.0079767140327,1514,54,3162,2080.0689655172414,11144.795207152063,60027,0,4640.153846153846,16641.69422888464,60027,0,16.999999999999996,24.275207811380614,68,0,16.0,0.0,0.0,0.0,0.0,651.6327380952381,629.1520757397184,1514.0,54.0,393.90000000000003,23,25,10.10.20.147,23.222.241.146,50937,443,6,30,www.bing.com,t12d1909h2_d83cc789557e_7af1ed941c26,35af4c8cd9495354f7d701ce8ad7fd2d5620,c2_beaconing,mta_icedid,IcedID_2023-05-10.pcap,172.16.10.73:50465-142.251.46.142:443-6-1683740334024,278.46153846153845,420.92192771435566,1480,54,235.28571428571428,279.7550799572811,657,54,1647,18.083333333333332,34.45011764944506,107,0,36.166666666666664,43.22229363033233,107,1,32.4,46.661547338252724,107,1,1.0,0.0,0.0,0.0,0.0,513.508954008954,546.6062511568884,1480.0,54.0,278.46153846153845,10,12,172.16.10.73,142.251.46.142,50465,443,6,13,google.com,t13d201200_2b729b4bf6f3_2e4f304f1f45,f590053ff246338aff7c203dbe7164d65630,c2_beaconing,mta_qakbot,Qakbot_2022-09-29.pcap,10.9.29.201:49929-186.16.163.94:443-6-1664413159504,64.0,4.898979485566356,66,54,66.0,0.0,66,66,330,15000.0,25282.924563823704,59973,1012,3756.75,3092.554863431421,8000,1012,0.0,0.0,0,0,4015.0,0.0,0.0,0.0,0.0,60.44444444444444,5.7948465824023545,66.0,54.0,64.0,0,1,10.9.29.201,186.16.163.94,49929,443,6,6,,,5640,c2_beaconing,mta_danabot,Danabot_2024-02-14.pcap,10.2.14.101:49810-51.104.15.253:443-6-1707928162135,420.8461538461538,627.8269196407884,1514,54,101.5,110.57621805795313,327,54,609,26.08333333333333,57.81389945071141,155,0,62.6,79.62914039470726,155,0,26.333333333333336,57.87112118031469,144,0,78.5,0.0,0.0,0.0,0.0,525.9908424908425,565.6770679790939,1514.0,54.0,327.0,5,7,10.2.14.101,51.104.15.253,49810,443,6,13,v10.events.data.microsoft.com,t12d500600_dee23d818e7f_a1e935682795,ccefe2aaac0d81816111910f9f50b9c15651,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:50378-194.165.16.90:443-6-1668458107699,409.44827586206895,572.4708093747723,1514,54,430.42857142857144,616.7435215943265,1514,54,6026,56.92857142857144,150.8032636869121,540,0,122.6153846153846,206.0184208841281,540,0,93.85714285714286,196.7113688564101,540,0,2.0,0.0,0.0,0.0,0.0,659.3048348841452,621.6557528775471,1514.0,54.0,409.44827586206895,18,20,172.16.24.174,194.165.16.90,50378,443,6,29,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b75661,c2_beaconing,mta_darkgate,DarkGate_2023-12-07.pcap,10.11.28.11:52134-46.101.78.238:443-6-1701962064738,109.11111111111111,96.6222599151516,319,60,112.99999999999999,115.18680479985544,319,60,565,68.25,77.52004349106845,164,0,136.5,100.0283293205813,240,0,128.0,46.130250378683186,164,76,144.0,0.0,0.0,0.0,0.0,152.8179012345679,101.67786748586488,319.0,60.0,109.11111111111111,4,5,10.11.28.11,46.101.78.238,52134,443,6,9,cdn-uk.widgetsfordeploy.com,,5671,c2_beaconing,mta_icedid,IcedID_2023-01-12.pcap,172.18.127.129:55985-5.230.74.203:443-6-1673549133555,184.1764705882353,314.23940620451265,1356,54,115.75000000000001,88.23143268861566,265,54,926,3871.1875,14958.087320771774,59954,0,8848.428571428572,22538.77848551353,59954,1,7722.875,21125.24812660704,59997,1,155.0,0.0,0.0,0.0,0.0,409.32516339869284,511.6276022325483,1356.0,54.0,184.1764705882353,10,12,172.18.127.129,5.230.74.203,55985,443,6,17,qzmeat.cyou,t12d190800_d83cc789557e_7af1ed941c26,ec74a5c51106f0419184d0dd08fb05bc5680,benign,benign,ctu_normal20_win_2017_https.pcap,10.0.2.15:49808-185.33.222.20:443-6-2665643,293.35714285714283,468.21989249162374,1474,54,288.2307692307692,465.1098712215129,1309,54,3747,528.5185185185185,1872.1215314423443,9705,0,1189.0833333333335,2726.680114529333,9708,32,1017.0714285714287,2638.3175426858606,9997,0,31.0,0.0,0.0,0.0,0.0,588.709768009768,596.8610959795916,1474.0,54.0,293.35714285714283,22,24,10.0.2.15,185.33.222.20,49808,443,6,28,ib.adnxs.com,t12d1510h2_073e58a039a6_60bf0a45ed8c,266bd998df907f9d5064d7f4c208b2005691,c2_beaconing,mta_pikabot,Pikabot_2024-02-08.pcap,10.2.8.101:53330-104.129.55.103:2224-6-1707419707923,223.6190476190476,347.2907249251665,1514,60,122.09090909090911,109.11961743467995,411,60,1343,3068.1,9203.215421510942,30039,0,6136.200000000001,12566.392957231425,30039,0,6811.555555555556,13164.276766225245,30094,0,55.0,0.0,0.0,0.0,0.0,477.77888407888406,566.3721587530903,1514.0,60.0,223.6190476190476,12,13,10.2.8.101,104.129.55.103,53330,2224,6,21,,t12i190700_d83cc789557e_7af1ed941c26,ec74a5c51106f0419184d0dd08fb05bc5701,c2_beaconing,mta_icedid,IcedID_2022-12-20.pcap,10.3.24.178:54707-23.81.246.152:443-6-1671553108439,158.0,210.3018993943918,732,54,148.2,214.50034965006466,732,54,1482,20.166666666666664,41.28701547773614,145,0,40.33333333333334,52.19913792391595,145,0,36.625,54.337404901490935,145,0,35.5,0.0,0.0,0.0,0.0,312.78765432098766,295.3562155412215,732.0,54.0,158.0,13,15,10.3.24.178,23.81.246.152,54707,443,6,19,xedefeg.com,t12d190700_d83cc789557e_2dae41c691ec,ae4edc6faf64d08308082ad26be607675711,c2_beaconing,mta_icedid,IcedID_2022-01-12.pcap,10.22.5.47:49903-45.147.228.138:443-6-1642002383848,206.16666666666669,302.8620827645326,1356,60,129.2,92.94060229821817,269,60,1292,3665.705882352941,14507.026761903633,59956,0,6924.111111111111,19888.45812553379,59956,1,8871.571428571428,22638.47230459057,60207,8,192.0,0.0,0.0,0.0,0.0,422.0824074074074,506.3901599978629,1356.0,60.0,206.16666666666669,10,12,10.22.5.47,45.147.228.138,49903,443,6,18,hashingold.top,t12d190800_d83cc789557e_7af1ed941c26,ec74a5c51106f0419184d0dd08fb05bc5720,benign,benign,ctu_normal20_win_2017_https.pcap,10.0.2.15:64868-192.185.178.103:443-6-9496491,333.1875,502.6381360714021,1474,54,286.5714285714286,406.1427733949631,1102,54,2006,232.93333333333334,464.1759928959622,1807,0,582.1666666666666,613.5895750961441,1807,153,418.0,625.816951786109,1897,0,148.0,0.0,0.0,0.0,0.0,577.9114858906526,566.8916339361818,1474.0,54.0,333.1875,10,12,10.0.2.15,192.185.178.103,64868,443,6,16,chat.bluehost.com,t12d1510h2_073e58a039a6_60bf0a45ed8c,fbe78c619e7ea20046131294ad087f055730,benign,benign,ctu_normal21_kali_2017.pcap,192.168.1.191:43322-95.101.245.177:443-6-1493727158263,108.33333333333331,124.43235818992535,583,54,123.09999999999997,162.87108057874758,583,54,1231,368.17647058823536,1459.7348318827517,6032,0,695.4444444444445,2032.8012760173528,6116,0,891.2857142857144,2274.7578416383662,6049,0,18.5,0.0,0.0,0.0,0.0,208.81203703703704,205.48993904328012,583.0,54.0,108.33333333333331,10,15,192.168.1.191,95.101.245.177,43322,443,6,18,ssum-sec.casalemedia.com,t12d1110h2_43e74fd21232_205f67e4d9f4,7bee5c1d424b7e5f943b06983bb114225741,c2_beaconing,mta_gozi,Gozi_2023-07-12.pcap,10.7.12.121:50495-170.130.55.162:443-6-1689205082782,391.80952380952385,575.5847130568721,1514,54,164.2222222222222,209.92187700295662,636,54,1478,565.5999999999999,2422.439905289054,10852,0,1414.0,3815.378206304436,10852,0,1025.7272727272727,3261.0089264186045,10853,0,28.0,0.0,0.0,0.0,0.0,549.3924162257496,555.5815419862272,1514.0,54.0,391.80952380952385,11,13,10.7.12.121,170.130.55.162,50495,443,6,21,iamupdate.com,t12d190700_d83cc789557e_2dae41c691ec,4ce0442e9d20d092d9d74e9ce54b363a5750,c2_beaconing,mta_pikabot,Pikabot_2024-02-08.pcap,10.2.8.101:53262-72.21.81.200:443-6-1707416845187,355.00000000000006,493.71266947486765,1430,60,109.23529411764706,89.89475055013273,381,60,1857,4.666666666666667,9.447982208709538,30,0,8.75,12.417729261020309,34,0,9.000000000000002,15.842979517754861,41,0,7.0,0.0,0.0,0.0,0.0,504.29598506069095,529.3452226315029,1430.0,60.0,355.00000000000006,24,25,10.2.8.101,72.21.81.200,53262,443,6,31,fp-vs.azureedge.net,t12d1909h2_d83cc789557e_7af1ed941c26,7912c017d6a5b5991507cf3b31e9fed55760,benign,benign,ctu_normal14_win_full_2017.pcap,10.0.2.15:49164-40.127.129.109:443-6-55472,64.16666666666667,17.6908639321732,99,54,73.0,23.302360395462088,99,54,219,23.0,31.112698372208094,60,0,30.5,41.71930009000631,60,1,27.5,37.476659402887016,54,1,54.0,0.0,0.0,0.0,0.0,67.83333333333333,17.66946169364562,99.0,54.0,58.0,2,4,10.0.2.15,40.127.129.109,49164,443,6,6,,,5770,c2_beaconing,mta_qakbot,Qakbot_2022-09-29.pcap,10.9.29.201:50169-37.252.0.102:443-6-1664422936327,381.2608695652174,543.2632224380322,1514,54,251.0,420.83203300129134,1451,54,2761,42.86363636363636,86.70985853465318,334,0,94.30000000000001,110.39731276922763,334,0,72.0,108.85311203635843,334,0,145.0,0.0,0.0,0.0,0.0,641.5475040257649,619.4370349561624,1514.0,54.0,381.2608695652174,14,16,10.9.29.201,37.252.0.102,50169,443,6,23,,t13i200900_2b729b4bf6f3_29829a46703f,40c63d2de6442242a6b0abc7e768645f5780,benign,benign,ctu_normal14_win_full_2017.pcap,10.0.2.15:52462-104.25.191.114:443-6-3628736,760.2597402597405,687.5734104844332,1474,54,98.54545454545455,74.91183851557476,337,54,2168,33.97368421052631,217.69899547673376,1893,0,122.95238095238095,408.9367281365757,1893,0,47.22222222222222,258.0503583050867,1895,0,4.0,0.0,0.0,0.0,0.0,592.3056277056277,572.3688257834907,1474.0,54.0,337.0,45,47,10.0.2.15,104.25.191.114,52462,443,6,77,pub.freestar.io,t12d1711h2_67e6df579eba_de5ccbe16bdd,fe199dcc43f8be2f14f36a7cc13a8c515791,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:51956-194.165.16.90:443-6-1668460373032,466.32,610.5326035520134,1514,54,493.1666666666667,647.6681014971864,1514,54,5918,65.70833333333334,163.8332872602291,558,0,143.36363636363635,223.4154304103782,560,0,113.91666666666666,217.7690429344953,558,0,1.0,0.0,0.0,0.0,0.0,678.3361253561253,614.6092548983562,1514.0,54.0,466.32,14,16,172.16.24.174,194.165.16.90,51956,443,6,25,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b75801,exfil,mta_koistealer,KoiStealer_2025-07-08.pcap,10.7.8.101:53363-50.6.192.252:443-6-1752007026444,1093.5587188612103,601.9138562035112,1514,54,70.91071428571432,55.926990324468974,291,54,3971,444.3,7092.304397945585,118596,0,2261.890909090909,15990.668214644495,118596,0,25.745535714285715,328.30494475606247,4912,0,2.0,0.0,0.0,0.0,0.0,665.9504308434854,641.5815426900892,1514.0,54.0,291.0,160,162,10.7.8.101,50.6.192.252,53363,443,6,281,conleyuniversity.us,t12d180700_4b22cbed5bed_2dae41c691ec,567bb420d39046dbfd1f68b558d863825810,c2_beaconing,mta_danabot,Danabot_2023-08-03.pcap,23.11.231.169:443-10.8.3.101:49709-6-1691102850443,59.16666666666667,12.655697004379753,85,54,64.33333333333333,17.897858344878397,85,54,193,1785.8,3992.611200705623,8928,0,4464.5,6312.34223565231,8928,1,4464.0,6313.049342433496,8928,0,4464.5,0.0,0.0,0.0,0.0,62.611111111111114,12.419121059931518,85.0,54.0,54.0,1,1,23.11.231.169,10.8.3.101,443,49709,6,6,,,5821,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:50446-194.165.16.90:443-6-1668458219981,466.32,610.5326035520134,1514,54,493.1666666666667,647.6681014971864,1514,54,5918,60.45833333333332,149.53579742036663,550,0,131.90909090909093,203.24933187858431,551,0,100.58333333333334,195.75098204018536,550,0,1.0,0.0,0.0,0.0,0.0,678.3361253561253,614.6092548983562,1514.0,54.0,466.32,14,16,172.16.24.174,194.165.16.90,50446,443,6,25,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b75830,c2_beaconing,mta_pikabot,Pikabot_2023-05-23.pcap,10.1.0.186:55214-204.79.197.200:443-6-1684858034497,372.7307692307692,553.3368274526688,1514,54,115.3846153846154,140.87378420743542,557,54,1500,60.56000000000001,147.5257265699783,652,0,126.16666666666666,196.15153387731704,652,0,105.08333333333333,194.83674207039613,652,0,31.0,0.0,0.0,0.0,0.0,540.5769230769231,560.0215349949675,1514.0,54.0,372.7307692307692,23,25,10.1.0.186,204.79.197.200,55214,443,6,26,www.bing.com,t12d1809h2_4b22cbed5bed_7af1ed941c26,a66ea560599a2f5c89eec8c3a0d69cee5840,benign,benign,ctu_normal14_win_full_2017.pcap,10.0.2.15:51470-31.13.91.36:443-6-3076557,108.06666666666666,134.71635104208858,571,54,126.5,180.46922966850295,571,54,1012,670.5,2361.016298448289,8870,0,1341.0,3321.6425655589933,8870,0,1557.8333333333333,3715.4907302625134,9142,17,45.0,0.0,0.0,0.0,0.0,202.84074074074073,201.599261326406,571.0,54.0,108.06666666666666,7,9,10.0.2.15,31.13.91.36,51470,443,6,15,www.facebook.com,t12d1712h2_67e6df579eba_88be6878e1da,96681175a9547081bf3d417f1a5720915851,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:51410-194.165.16.90:443-6-1668459674410,466.32,610.5326035520134,1514,54,493.1666666666667,647.6681014971864,1514,54,5918,67.41666666666666,168.67795832054765,571,0,147.0909090909091,229.48440232201168,572,0,115.91666666666669,223.8520040048105,571,0,227.0,0.0,0.0,0.0,0.0,678.3361253561253,614.6092548983562,1514.0,54.0,466.32,14,16,172.16.24.174,194.165.16.90,51410,443,6,25,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b75861,c2_beaconing,mta_icedid,IcedID_2023-01-12.pcap,172.18.127.129:56037-185.173.34.36:443-6-1673550567430,419.2413793103447,590.4722477555216,1514,54,608.5333333333334,682.6307165943349,1514,54,9128,190.28571428571433,688.3105380752185,3480,0,380.5714285714286,952.2447741469155,3481,0,386.00000000000006,990.5063519904016,3480,0,1.0,0.0,0.0,0.0,0.0,660.6892537858055,627.4825245749017,1514.0,54.0,419.2413793103447,15,17,172.18.127.129,185.173.34.36,56037,443,6,29,fepopeguc.com,t12d190700_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b75870,benign,benign,ctu_normal20_win_2017_https.pcap,10.0.2.15:51627-31.13.93.36:443-6-6086926,234.26388888888903,325.62174517550636,1474,54,241.35483870967747,271.7081213836025,830,54,7482,3801.957746478872,13789.797936400682,64961,0,8997.9,20264.805642992877,64966,1,6747.7,17950.698773913926,64963,0,3.0,0.0,0.0,0.0,0.0,516.0579074025508,558.9361104677089,1474.0,54.0,234.26388888888903,62,64,10.0.2.15,31.13.93.36,51627,443,6,72,www.facebook.com,t12d1509h2_073e58a039a6_e70312a1ce2c,2d1eb5817ece335c24904f516ad5da125880,benign,benign,ctu_normal14_win_full_2017.pcap,10.0.2.15:52486-152.163.66.165:443-6-3631139,310.94444444444446,499.31605836763435,1474,54,126.75,134.56358029889492,396,54,1014,305.94117647058823,990.0744587269836,4136,0,742.9999999999999,1500.494807277475,4136,37,563.4444444444445,1447.2876451409988,4419,0,124.0,0.0,0.0,0.0,0.0,489.1104938271605,545.755869667038,1474.0,54.0,310.94444444444446,11,13,10.0.2.15,152.163.66.165,52486,443,6,18,adserver-us.adtech.advertising.com,t12d1711h2_67e6df579eba_de5ccbe16bdd,5397c414a9ebeaff1bf18b70ca22eaa05890,c2_beaconing,mta_qakbot,Qakbot_2023-05-10.pcap,172.16.10.73:50492-13.107.21.200:443-6-1683740629213,867.9117647058822,681.0849106416804,1514,54,133.14814814814815,146.9088424064664,635,54,3595,120.52475247524751,1112.9972020994428,11170,0,468.1923076923077,2187.6477050792387,11170,0,163.97297297297297,1299.906603314917,11170,0,4.0,0.0,0.0,0.0,0.0,662.0540643911885,587.3588869257504,1514.0,54.0,635.0,55,57,172.16.10.73,13.107.21.200,50492,443,6,102,th.bing.com,t13d1616h2_e72c3b3287f1_e5627efa2ab1,a66ea560599a2f5c89eec8c3a0d69cee5900,benign,benign,ctu_normal21_kali_2017.pcap,192.168.1.191:60714-130.193.10.212:443-6-1493727096774,117.13333333333333,134.9242468237358,583,66,141.87499999999997,179.22805703508428,583,66,1135,447.21428571428567,1610.7544901295562,6043,0,893.2857142857142,2301.342196363223,6112,2,1042.1666666666667,2452.3916014100737,6047,0,16.5,0.0,0.0,0.0,0.0,214.42949735449736,202.29083606920204,583.0,66.0,117.13333333333333,8,9,192.168.1.191,130.193.10.212,60714,443,6,15,i2.cerebroad.com,t12d1110h2_43e74fd21232_205f67e4d9f4,7bee5c1d424b7e5f943b06983bb114225911,c2_beaconing,mta_icedid,IcedID_2022-01-12.pcap,10.22.5.47:50112-104.168.44.45:443-6-1642007280837,219.21052631578942,365.7496987083696,1279,60,211.27272727272728,373.0335349292583,1279,60,2324,58.99999999999999,96.59436105816577,225,0,106.19999999999999,111.0543410527777,225,0,122.85714285714286,113.62134273018218,229,0,103.5,0.0,0.0,0.0,0.0,506.95647262094633,523.8724558061662,1279.0,60.0,219.21052631578942,12,13,10.22.5.47,104.168.44.45,50112,443,6,19,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b75921,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:51091-194.165.16.90:443-6-1668459187389,466.32,610.5326035520134,1514,54,493.1666666666667,647.6681014971864,1514,54,5918,70.16666666666667,169.36702278128735,614,0,153.09090909090907,229.0045652581863,615,0,117.08333333333333,220.78185792288002,614,0,1.0,0.0,0.0,0.0,0.0,678.3361253561253,614.6092548983562,1514.0,54.0,466.32,14,16,172.16.24.174,194.165.16.90,51091,443,6,25,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b75931,c2_beaconing,mta_emotet,Emotet_2022-07-07.pcap,10.7.7.101:57304-91.239.206.239:443-6-1657217930265,695.7111716621254,617.6135000758534,1514,54,57.724358974359,27.16272914169606,310,54,9005,188.65300546448086,3077.2964236915677,58858,0,445.4645161290323,4725.402588878483,58858,0,48.32857142857143,150.45898403994426,1479,0,5.5,0.0,0.0,0.0,0.0,602.3148483224319,603.1727116994562,1514.0,54.0,310.0,317,319,10.7.7.101,91.239.206.239,57304,443,6,367,www.yell.ge,t12d1908h2_d83cc789557e_2dae41c691ec,389ed42c02ebecc32e73aa31def07e145940,benign,benign,ctu_normal14_win_full_2017.pcap,10.0.2.15:51218-23.6.123.159:443-6-2708793,337.42222222222216,519.6747448202966,1474,54,106.56250000000001,88.50007062144074,358,54,1705,40.74999999999999,245.46103986788464,1631,0,119.53333333333335,418.4967770257644,1631,0,63.107142857142854,307.61608339276535,1632,0,2.0,0.0,0.0,0.0,0.0,486.30864729672203,547.2193392810402,1474.0,54.0,337.42222222222216,36,38,10.0.2.15,23.6.123.159,51218,443,6,45,apps.skypeassets.com,t12d1710h2_67e6df579eba_4a7a952b215a,2b33c1374db4ddf06942f92373c0b54b5950,benign,benign,ctu_normal14_win_full_2017.pcap,10.0.2.15:52520-151.101.0.175:443-6-3633974,328.6818181818182,529.6805314224465,1474,54,88.4,71.97406940465898,260,54,884,112.19047619047618,378.7198990081745,1735,0,261.77777777777777,563.3954600850493,1735,0,211.54545454545456,612.1252100079466,2054,0,28.0,0.0,0.0,0.0,0.0,479.5553872053872,552.5233844525098,1474.0,54.0,260.0,14,16,10.0.2.15,151.101.0.175,52520,443,6,22,cdn.krxd.net,t12d1711h2_67e6df579eba_de5ccbe16bdd,860fcf58fd757e26aa8911e5eaff6b535960,benign,benign,ctu_normal20_win_2017_https.pcap,10.0.2.15:52555-94.31.29.64:443-6-9150061,214.80555555555554,391.63246760520207,1474,54,100.78571428571429,72.21567970741809,278,54,1411,3446.2285714285713,14171.441929386832,67940,0,9278.307692307691,22592.869171431856,67941,2,5742.714285714286,18127.43829983392,67941,0,6.0,0.0,0.0,0.0,0.0,443.43943402276733,557.8245703512346,1474.0,54.0,214.80555555555554,28,30,10.0.2.15,94.31.29.64,52555,443,6,36,vars.hotjar.com,t12d1509h2_073e58a039a6_e70312a1ce2c,b898351eb5e266aefd3723d4669354945970,c2_beaconing,mta_qakbot,Qakbot_2023-05-10.pcap,172.16.10.73:50412-204.79.197.239:443-6-1683739893041,363.29629629629636,522.8278739269606,1514,54,170.18181818181816,194.44681441557134,648,54,1872,4723.3076923076915,13468.359409428396,45033,0,9025.1,18975.470490141273,45033,0,8184.466666666667,24150.563317495948,90058,0,39.0,0.0,0.0,0.0,0.0,540.8378460531238,556.5287127002407,1514.0,54.0,363.29629629629636,19,21,172.16.10.73,204.79.197.239,50412,443,6,27,edge.microsoft.com,t13d1615h2_e72c3b3287f1_f37e75b10bcc,0f14538e1c9070becdad7739c67d63635981,c2_beaconing,mta_gozi,Gozi_2023-07-12.pcap,10.7.12.121:50494-170.130.55.162:443-6-1689205077300,388.76190476190476,576.8025576193213,1514,54,164.2222222222222,209.92187700295662,636,54,1478,548.0500000000001,2332.6612648037412,10452,0,1370.125,3671.786230841877,10452,1,992.0000000000001,3139.5052794986664,10452,0,40.0,0.0,0.0,0.0,0.0,548.4611992945327,555.6665933938945,1514.0,54.0,388.76190476190476,11,13,10.7.12.121,170.130.55.162,50494,443,6,21,iamupdate.com,t12d190700_d83cc789557e_2dae41c691ec,4ce0442e9d20d092d9d74e9ce54b363a5991,c2_beaconing,mta_darkgate,DarkGate_2023-12-07.pcap,10.11.28.11:52227-46.101.78.238:443-6-1701962544333,109.22222222222223,96.89398559479554,320,60,113.20000000000002,115.6339050624859,320,60,566,69.12499999999999,78.22940167043517,170,0,138.25,100.82451752095486,240,0,127.33333333333333,41.968241961432376,160,80,142.0,0.0,0.0,0.0,0.0,153.0746913580247,102.02725459294896,320.0,60.0,109.22222222222223,4,5,10.11.28.11,46.101.78.238,52227,443,6,9,cdn-uk.widgetsfordeploy.com,,6001,c2_beaconing,mta_icedid,IcedID_2022-12-20.pcap,10.3.24.178:54766-103.208.85.184:443-6-1671555225737,184.29411764705884,314.26516763433284,1356,54,115.99999999999999,88.66147496436737,266,54,928,3921.8750000000005,14949.140130790132,59953,0,8964.285714285716,22494.27630690591,59953,0,7818.750000000001,21097.940148270398,60009,1,200.0,0.0,0.0,0.0,0.0,409.47712418300654,511.574658908555,1356.0,54.0,184.29411764705884,10,12,10.3.24.178,103.208.85.184,54766,443,6,17,artiwal.pics,t12d190800_d83cc789557e_7af1ed941c26,ec74a5c51106f0419184d0dd08fb05bc6011,exfil,mta_lumma,Lumma_2024-10-03.pcap,10.10.3.101:49887-172.67.195.54:443-6-1727930381166,692.5757575757581,715.3495091370613,1514,54,1283.4583333333333,522.8410912864334,1514,54,61606,45.86734693877552,436.6888920127483,4324,0,95.63829787234042,630.2890443050337,4324,0,89.04,611.2140798677427,4324,0,1.0,0.0,0.0,0.0,0.0,757.3872301445831,655.5881664547611,1514.0,54.0,692.5757575757581,21,23,10.10.3.101,172.67.195.54,49887,443,6,99,highawaretemptersudwu.xyz,t12d190800_d83cc789557e_7af1ed941c26,6d6b821affda5de6562d217770a7ead06020,benign,benign,ctu_normal20_win_2017_https.pcap,10.0.2.15:51673-52.206.230.0:443-6-6124246,207.4857142857143,386.20859735675094,1514,54,177.125,362.6026061682403,1514,54,2834,1805.2647058823534,3847.6917307757667,10086,0,4091.9333333333334,4989.357709403181,10086,0,3403.6111111111113,4823.84025853565,10088,0,8.0,0.0,0.0,0.0,0.0,586.8514828738513,649.3587563283216,1514.0,54.0,207.4857142857143,29,31,10.0.2.15,52.206.230.0,51673,443,6,35,geo.moatads.com,t12d1509h2_073e58a039a6_e70312a1ce2c,303951d4c50efb2e991652225a6f02b16030,benign,benign,ctu_normal21_kali_2017.pcap,192.168.1.191:55142-209.15.36.33:443-6-1493726562547,309.88888888888886,442.1016503939402,1514,66,170.6,218.94352392036325,759,66,1706,335.70588235294116,1194.1150889207602,4963,0,617.6666666666666,1631.176492596678,4963,0,795.8571428571429,1855.9494810448036,5002,0,136.0,0.0,0.0,0.0,0.0,549.9432098765432,558.8673741151184,1514.0,66.0,309.88888888888886,12,13,192.168.1.191,209.15.36.33,55142,443,6,18,pixel-a.sitescout.com,t12d1109h2_43e74fd21232_fed6c16fddd0,63a37e7be22df054d1f448fc0c28b98f6041,c2_beaconing,mta_icedid,IcedID_2022-01-12.pcap,10.22.5.47:50027-104.168.44.45:443-6-1642006971103,228.05555555555551,374.25651351512465,1279,60,211.27272727272728,373.0335349292583,1279,60,2324,76.23529411764706,120.9057119265694,293,0,129.6,136.32493861685356,294,0,174.0,134.62094933553246,293,0,121.0,0.0,0.0,0.0,0.0,510.6396504729838,521.9601651415826,1279.0,60.0,228.05555555555551,11,12,10.22.5.47,104.168.44.45,50027,443,6,18,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b76050,benign,benign,ctu_normal14_win_full_2017.pcap,10.0.2.15:52396-204.11.109.68:443-6-3617609,519.6333333333333,578.4197340172316,1474,54,293.5,335.84810162992,842,54,5870,42.23728813559322,72.57869426687499,214,0,131.1578947368421,96.99098649868608,256,0,58.0,80.59646067715512,217,0,22.5,0.0,0.0,0.0,0.0,599.7592592592592,535.633977379057,1474.0,54.0,519.6333333333333,53,55,10.0.2.15,204.11.109.68,52396,443,6,60,s.tribalfusion.com,t12d1711h2_67e6df579eba_de5ccbe16bdd,f2330448a99fe144021ca92cace91bbe6061,c2_beaconing,mta_icedid,IcedID_2022-01-12.pcap,10.22.5.47:50261-104.168.44.45:443-6-1642007659750,219.21052631578942,365.7496987083696,1279,60,211.27272727272728,373.0335349292583,1279,60,2324,59.33333333333335,97.38703863511635,224,0,106.8,111.65203884290594,224,0,123.0,114.01608073717789,224,0,103.5,0.0,0.0,0.0,0.0,506.95647262094633,523.8724558061662,1279.0,60.0,219.21052631578942,12,13,10.22.5.47,104.168.44.45,50261,443,6,19,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b76070,benign,benign,ctu_normal14_win_full_2017.pcap,10.0.2.15:52754-172.217.23.206:443-6-3847078,132.9285714285714,150.65312834244457,625,54,174.53846153846152,199.85728882739278,625,54,2269,350.55555555555554,1749.3497986248256,9103,0,788.75,2618.6745129063775,9103,0,671.6428571428571,2427.1769802399235,9104,0,23.0,0.0,0.0,0.0,0.0,235.92596662596662,221.31281913310812,625.0,54.0,132.9285714285714,21,23,10.0.2.15,172.217.23.206,52754,443,6,28,www.google-analytics.com,t12d1711h2_67e6df579eba_de5ccbe16bdd,c74a0764cf5d01aa28d5c7769cd86fc16081,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:50856-194.165.16.90:443-6-1668458822491,466.32,610.5326035520134,1514,54,493.1666666666667,647.6681014971864,1514,54,5918,63.41666666666667,159.0178870624217,607,0,138.36363636363635,216.50370561598834,608,0,107.66666666666666,210.3180852178361,607,0,230.0,0.0,0.0,0.0,0.0,678.3361253561253,614.6092548983562,1514.0,54.0,466.32,14,16,172.16.24.174,194.165.16.90,50856,443,6,25,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b76090,c2_beaconing,mta_icedid,IcedID_2023-10-31.pcap,10.10.31.101:56243-13.89.178.27:443-6-1698796404668,317.96428571428567,464.4706650341318,1430,60,212.86666666666667,326.4278232772504,1215,60,3193,13.37037037037037,19.981045148894623,61,0,25.78571428571429,32.74183062272897,101,0,26.916666666666664,26.623497254504453,61,0,23.0,0.0,0.0,0.0,0.0,580.5624135124135,565.9493233650675,1430.0,60.0,317.96428571428567,19,20,10.10.31.101,13.89.178.27,56243,443,6,28,v10.events.data.microsoft.com,t12d1909h2_d83cc789557e_7af1ed941c26,2fe9b0e731d3d41b2b84e8e1d61868366100,benign,benign,ctu_normal21_kali_2017.pcap,192.168.1.191:33234-37.252.172.53:443-6-1493727283868,250.5263157894736,392.8052059539962,1514,66,278.54545454545456,441.8120332531389,1514,66,3064,573.3888888888889,2342.5539139727994,9959,0,1020.3999999999999,3140.9111982919153,9959,0,1471.0,3759.8336399367463,9997,0,24.0,0.0,0.0,0.0,0.0,556.4524189261032,584.9674591512266,1514.0,66.0,250.5263157894736,12,13,192.168.1.191,37.252.172.53,33234,443,6,19,ib.adnxs.com,t12d1110h2_43e74fd21232_205f67e4d9f4,30553045c697c20ead22a41ae6655ff16111,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:50228-194.165.16.90:443-6-1668457871195,422.1428571428571,581.95645212448,1514,54,430.4285714285715,616.7435215943265,1514,54,6026,50.33333333333333,129.53467014367533,448,0,104.53846153846153,174.15731173502084,449,0,87.46153846153848,172.33959468861443,448,0,1.0,0.0,0.0,0.0,0.0,663.3809523809524,619.9837354314599,1514.0,54.0,422.1428571428571,18,20,172.16.24.174,194.165.16.90,50228,443,6,28,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b76121,c2_beaconing,mta_icedid,IcedID_2023-05-10.pcap,172.16.10.73:50442-77.105.141.154:443-6-1683740186206,397.6333333333334,569.1152530589633,1514,54,400.0666666666666,599.1907002266435,1514,54,6001,34.24137931034483,81.9706633813123,344,0,70.92857142857143,108.37929427972591,345,0,59.142857142857146,105.95561998588562,344,0,76.5,0.0,0.0,0.0,0.0,654.2111111111111,621.8774481309216,1514.0,54.0,397.6333333333334,18,20,172.16.10.73,77.105.141.154,50442,443,6,30,floatfil.com,t13d201200_2b729b4bf6f3_2e4f304f1f45,2253c82f03b621c5144709b393fde2c96131,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:51835-194.165.16.90:443-6-1668460178136,466.32,610.5326035520134,1514,54,493.1666666666667,647.6681014971864,1514,54,5918,71.04166666666667,177.49720859205368,667,0,155.0,241.35492536925778,667,0,123.91666666666667,236.25119848982519,667,0,109.5,0.0,0.0,0.0,0.0,678.3361253561253,614.6092548983562,1514.0,54.0,466.32,14,16,172.16.24.174,194.165.16.90,51835,443,6,25,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b76141,c2_beaconing,mta_icedid,IcedID_2022-01-12.pcap,10.22.5.47:50515-104.168.44.45:443-6-1642008057550,249.06250000000003,393.07411832884645,1279,60,244.88888888888889,408.59559604957946,1279,60,2204,68.33333333333334,116.7088359163623,276,0,128.125,136.22716060211445,276,1,124.83333333333333,136.03737231609065,252,0,1.0,0.0,0.0,0.0,0.0,516.7088844797178,518.6758732113705,1279.0,60.0,249.06250000000003,13,14,10.22.5.47,104.168.44.45,50515,443,6,16,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b76150,benign,benign,ctu_normal14_win_full_2017.pcap,10.0.2.15:51285-162.125.66.1:443-6-2817810,107.53333333333332,134.78123368029006,571,54,126.5,180.46922966850295,571,54,1012,214.35714285714283,684.8933220855366,2586,0,428.57142857142856,955.3411008889018,2586,0,492.49999999999994,1130.5539792508803,2800,6,41.5,0.0,0.0,0.0,0.0,203.0989417989418,201.69848104940098,571.0,54.0,107.53333333333332,7,9,10.0.2.15,162.125.66.1,51285,443,6,15,www.dropbox.com,t12d1712h2_67e6df579eba_88be6878e1da,02096378b3237b7e4b9a2cd08715cf346161,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:51705-194.165.16.90:443-6-1668459963944,466.32,610.5326035520134,1514,54,493.1666666666667,647.6681014971864,1514,54,5918,55.24999999999999,135.09843432298445,449,0,120.54545454545453,182.78422450329987,449,0,92.66666666666667,176.89407890462346,449,0,212.0,0.0,0.0,0.0,0.0,678.3361253561253,614.6092548983562,1514.0,54.0,466.32,14,16,172.16.24.174,194.165.16.90,51705,443,6,25,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b76170,benign,benign,ctu_normal21_kali_2017.pcap,192.168.1.191:47432-23.22.229.209:443-6-1493727299026,370.42307692307696,534.5601685929787,1514,66,159.2142857142857,243.81492936286688,977,66,2229,47.71999999999999,72.98431338308254,292,0,90.76923076923077,104.56509443575793,292,0,98.0909090909091,138.04017860424156,452,0,74.0,0.0,0.0,0.0,0.0,594.3856328856328,569.1500759491288,1514.0,66.0,370.42307692307696,20,21,192.168.1.191,23.22.229.209,47432,443,6,26,px.dynamicyield.com,t12d1109h2_43e74fd21232_fed6c16fddd0,cce0dc5be5e6dc9988a7f15dac2222086181,c2_beaconing,mta_icedid,IcedID_2022-01-12.pcap,10.22.5.47:50179-104.168.44.45:443-6-1642007473779,219.21052631578942,365.7496987083696,1279,60,211.27272727272728,373.0335349292583,1279,60,2324,60.99999999999999,98.01620514276317,222,0,109.8,114.64612219056227,232,0,125.85714285714285,112.04973385574309,223,0,10.5,0.0,0.0,0.0,0.0,506.95647262094633,523.8724558061662,1279.0,60.0,219.21052631578942,12,13,10.22.5.47,104.168.44.45,50179,443,6,19,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b76191,c2_beaconing,mta_gootloader,GootLoader_2023-12-29.pcap,10.12.29.101:51367-104.21.75.153:443-6-1703877243955,330.4761904761905,495.1538769965977,1514,54,252.9,451.893411719573,1514,54,2529,14.600000000000003,36.35700178710242,156,0,32.44444444444444,50.27949659431544,156,0,24.4,49.09672992052413,156,0,4.5,0.0,0.0,0.0,0.0,621.3751322751323,620.2933380785983,1514.0,54.0,330.4761904761905,14,16,10.12.29.101,104.21.75.153,51367,443,6,21,instawp.io,t12d210700_76e208dd3e22_2dae41c691ec,466556e923186364e82cbdb4cad8df2c6201,c2_beaconing,mta_gozi,Gozi_2023-07-12.pcap,10.7.12.121:50075-170.130.55.162:443-6-1689203114116,305.07142857142856,490.53711518667103,1514,54,124.85714285714285,173.55728699231233,636,54,1748,396.3333333333333,1985.4249690412144,10328,0,823.1538461538461,2856.607569774383,10328,0,819.9230769230769,2857.8881614908837,10329,0,1.0,0.0,0.0,0.0,0.0,526.8015873015873,562.1503254559041,1514.0,54.0,305.07142857142856,19,21,10.7.12.121,170.130.55.162,50075,443,6,28,iamupdate.com,t12d190700_d83cc789557e_2dae41c691ec,4ce0442e9d20d092d9d74e9ce54b363a6210,benign,benign,ctu_normal14_win_full_2017.pcap,10.0.2.15:52543-13.32.100.57:443-6-3638812,333.77272727272725,530.4999377782093,1474,54,89.30000000000001,74.37450279945855,269,54,893,119.76190476190476,490.0358053001745,2256,0,279.44444444444446,741.9784550630683,2256,0,226.36363636363637,675.1265470602193,2260,0,18.0,0.0,0.0,0.0,0.0,482.17474747474745,551.9977445153241,1474.0,54.0,269.0,14,16,10.0.2.15,13.32.100.57,52543,443,6,22,cdnp3.stackassets.com,t12d1711h2_67e6df579eba_de5ccbe16bdd,76cc3e2d3028143b23ec18e27dbd7ca96221,c2_beaconing,mta_emotet,Emotet_2022-04-25.pcap,10.4.25.101:49837-138.197.147.101:443-6-1650905731821,779.5895522388056,686.5212755952367,1442,60,73.32758620689658,67.00730201922731,463,60,4253,232.27819548872182,2311.8395186300777,26517,0,541.9824561403508,3525.5399813930635,26517,0,57.44,353.75821029532494,2993,0,3.0,0.0,0.0,0.0,0.0,633.1662317571248,589.499689187025,1442.0,60.0,463.0,83,84,10.4.25.101,138.197.147.101,49837,443,6,134,,t12i190600_d83cc789557e_2dae41c691ec,fd4bc6cea4877646ccd62f0792ec0b626231,c2_beaconing,mta_qakbot,Qakbot_2022-09-29.pcap,10.9.29.201:50051-186.81.122.168:443-6-1664415888531,185.61904761904762,270.8853034386466,1078,54,156.66666666666669,221.6706538716363,697,54,1880,5816.5,19912.735032478187,85385,0,10575.454545454548,26420.097185149174,85385,0,14529.375,30523.662736298305,85386,1,1.0,0.0,0.0,0.0,0.0,397.9453262786596,408.6230449609543,1078.0,54.0,185.61904761904762,14,16,10.9.29.201,186.81.122.168,50051,443,6,21,,t13i201000_2b729b4bf6f3_533b6d20482b,2253c82f03b621c5144709b393fde2c96240,exfil,mta_astaroth,Astaroth_2023-01-04_0.pcap,10.1.4.101:49732-52.182.143.210:443-6-1672808012715,400.8636363636364,570.5755903725678,1514,54,356.33333333333326,507.1789624974601,1421,54,3207,22.095238095238102,39.06264809495737,96,0,58.0,46.815748266094026,100,0,31.25,44.01884926834288,96,0,4.0,0.0,0.0,0.0,0.0,644.4321419321419,609.9880944126512,1514.0,54.0,400.8636363636364,14,16,10.1.4.101,52.182.143.210,49732,443,6,22,v10.events.data.microsoft.com,t12d1909h2_d83cc789557e_7af1ed941c26,678aeaf909676262acfb913ccb78a1266251,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:51296-194.165.16.90:443-6-1668459496425,435.77777777777777,589.6705294767014,1514,54,459.3846153846154,631.944425096271,1514,54,5972,55.38461538461539,137.58374233115686,459,0,120.0,186.49786740189427,460,0,88.6923076923077,175.31371148856965,459,0,1.0,0.0,0.0,0.0,0.0,668.1132817799485,618.2566902665315,1514.0,54.0,435.77777777777777,16,18,172.16.24.174,194.165.16.90,51296,443,6,27,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b76260,benign,benign,ctu_normal21_kali_2017.pcap,192.168.1.191:43516-46.228.164.11:443-6-1493726905452,396.8750000000001,526.992724353704,1514,66,281.78571428571433,438.8886626944905,1287,66,3945,301.695652173913,936.3374699901258,4548,0,529.6153846153845,1349.0391975069724,4986,0,765.3333333333335,1435.5051375735304,4548,0,143.0,0.0,0.0,0.0,0.0,638.8511904761905,589.6259042105424,1514.0,66.0,396.8750000000001,16,18,192.168.1.191,46.228.164.11,43516,443,6,24,ad.turn.com,t12d1109h2_43e74fd21232_fed6c16fddd0,c9f96d59a92a2c1401f2a48b18b39a966270,benign,benign,ctu_normal14_win_full_2017.pcap,10.0.2.15:51912-151.101.1.164:443-6-3372830,354.95454545454544,547.8995804127342,1474,54,88.80000000000001,73.03697693634369,264,54,888,403.1904761904762,1683.5370687646773,7745,0,940.3333333333334,2553.6300632628836,7745,0,765.1818181818181,2404.691531909314,8014,0,41.0,0.0,0.0,0.0,0.0,488.27828282828284,552.2251552183336,1474.0,54.0,264.0,13,15,10.0.2.15,151.101.1.164,51912,443,6,22,static01.nyt.com,t12d1711h2_67e6df579eba_de5ccbe16bdd,860fcf58fd757e26aa8911e5eaff6b536280,exfil,mta_lumma,Lumma_2025-02-13.pcap,10.2.14.101:64058-23.12.147.38:443-6-1739488833794,864.15625,687.4962573211908,1514,54,187.55555555555554,293.2542033420455,951,54,1688,23.806451612903217,72.4382124548633,395,0,92.25,127.88694784289532,395,2,31.272727272727273,84.78891539087034,395,0,49.0,0.0,0.0,0.0,0.0,702.4027610037574,588.1800577088856,1514.0,54.0,864.15625,19,21,10.2.14.101,23.12.147.38,64058,443,6,32,th.bing.com,t12d180700_4b22cbed5bed_2dae41c691ec,4b7d5f58af981be54baeda917533e5d86291,c2_beaconing,mta_icedid,IcedID_2023-01-12.pcap,172.18.127.129:56039-185.173.34.36:443-6-1673550584426,344.94736842105266,491.86442053388504,1514,54,317.3,478.32742156625545,1514,54,3173,205.11111111111111,498.40048731079105,1942,0,410.22222222222223,658.5462735787398,1943,0,422.5,702.5187338630703,1942,0,156.5,0.0,0.0,0.0,0.0,637.7682261208577,630.6383564101224,1514.0,54.0,344.94736842105266,13,15,172.18.127.129,185.173.34.36,56039,443,6,19,fepopeguc.com,t12d190700_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b76300,benign,benign,ctu_normal14_win_full_2017.pcap,10.0.2.15:49964-45.55.217.192:443-6-1121092,114.41666666666666,149.58394319112617,571,54,150.66666666666666,206.86581802382594,571,54,904,47.63636363636363,63.69658189773252,151,0,104.8,94.48650697321814,204,3,73.19999999999999,69.98714167616791,151,2,19.0,0.0,0.0,0.0,0.0,204.69444444444446,201.01362738645787,571.0,54.0,114.41666666666666,5,7,10.0.2.15,45.55.217.192,49964,443,6,12,anon-sms.com,t12d1712h2_67e6df579eba_88be6878e1da,c6227321ea7621862dc7b7351771a62c6310,benign,benign,ctu_normal14_win_full_2017.pcap,10.0.2.15:51034-207.46.194.10:443-6-2661966,323.1428571428571,478.9396919983022,1474,54,179.44444444444446,241.14472371954935,779,54,1615,432.3,1793.8772210523568,8050,0,1080.75,2817.537564713455,8050,1,779.4545454545455,2492.746411636626,8295,0,18.0,0.0,0.0,0.0,0.0,535.8337742504409,547.6405233898402,1474.0,54.0,323.1428571428571,14,16,10.0.2.15,207.46.194.10,51034,443,6,21,c1.microsoft.com,t12d1711h2_67e6df579eba_de5ccbe16bdd,96c9f2048f1e949c8bb9ad97c36c9eea6321,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:50747-194.165.16.90:443-6-1668458663612,435.77777777777777,589.6705294767014,1514,54,459.3846153846154,631.944425096271,1514,54,5972,55.38461538461538,144.6822938505129,560,0,120.0,198.0358094340057,561,0,93.07692307692308,191.04120914018418,560,0,1.0,0.0,0.0,0.0,0.0,668.1132817799485,618.2566902665315,1514.0,54.0,435.77777777777777,16,18,172.16.24.174,194.165.16.90,50747,443,6,27,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b76331,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:50432-194.165.16.90:443-6-1668458198262,466.32,610.5326035520134,1514,54,493.1666666666667,647.6681014971864,1514,54,5918,72.04166666666666,173.63491914049874,613,0,157.1818181818182,233.83961092245175,613,0,119.58333333333331,225.6209445199195,613,0,147.5,0.0,0.0,0.0,0.0,678.3361253561253,614.6092548983562,1514.0,54.0,466.32,14,16,172.16.24.174,194.165.16.90,50432,443,6,25,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b76341,c2_beaconing,mta_icedid,IcedID_2022-01-12.pcap,10.22.5.47:50053-104.168.44.45:443-6-1642007071471,219.21052631578942,365.7496987083696,1279,60,211.27272727272728,373.0335349292583,1279,60,2324,59.111111111111114,96.67829544658674,212,0,106.39999999999999,110.89955415199427,214,0,121.85714285714285,112.75257361649382,215,0,2.5,0.0,0.0,0.0,0.0,506.95647262094633,523.8724558061662,1279.0,60.0,219.21052631578942,12,13,10.22.5.47,104.168.44.45,50053,443,6,19,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b76350,benign,benign,ctu_normal14_win_full_2017.pcap,10.0.2.15:49470-90.182.114.17:443-6-767857,269.9444444444444,453.21965486456514,1474,54,94.22222222222223,80.33955715862793,278,54,848,851.8823529411766,3393.6546465859074,14019,0,1810.1250000000002,4933.974765049255,14019,0,1804.875,5040.33934338042,14279,0,18.0,0.0,0.0,0.0,0.0,466.4259259259259,553.1497997470663,1474.0,54.0,269.9444444444444,9,11,10.0.2.15,90.182.114.17,49470,443,6,18,scontent.fprg1-1.fna.fbcdn.net,t12d1711h2_67e6df579eba_de5ccbe16bdd,2d1eb5817ece335c24904f516ad5da126361,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:50442-194.165.16.90:443-6-1668458213872,466.32,610.5326035520134,1514,54,493.1666666666667,647.6681014971864,1514,54,5918,59.166666666666664,140.37269233587847,451,0,129.0909090909091,188.5976959273122,452,0,99.83333333333333,182.98973311156675,451,0,1.0,0.0,0.0,0.0,0.0,678.3361253561253,614.6092548983562,1514.0,54.0,466.32,14,16,172.16.24.174,194.165.16.90,50442,443,6,25,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b76371,c2_beaconing,mta_gozi,Gozi_2023-07-12.pcap,10.7.12.121:50622-170.130.55.162:443-6-1689205657406,326.84615384615387,498.3411435799931,1514,54,130.3076923076923,179.39267200538256,636,54,1694,431.55999999999995,2093.8738635998748,10480,0,899.0833333333334,3017.8232208703416,10480,0,896.75,3018.5604674172996,10480,0,1.5,0.0,0.0,0.0,0.0,534.0598290598291,560.5946098604347,1514.0,54.0,326.84615384615387,19,21,10.7.12.121,170.130.55.162,50622,443,6,26,iamupdate.com,t12d190700_d83cc789557e_2dae41c691ec,4ce0442e9d20d092d9d74e9ce54b363a6380,benign,benign,ctu_normal20_win_2017_https.pcap,10.0.2.15:51063-64.233.166.156:443-6-4104014,174.6875,303.01535360650723,1474,54,107.27272727272728,92.28949371055543,427,54,2360,4059.9574468085107,15179.23611951744,63720,0,9086.57142857143,21954.304793300627,63721,0,7631.44,20386.91572242681,63721,0,6.0,0.0,0.0,0.0,0.0,450.07677738927737,558.6719729436753,1474.0,54.0,174.6875,41,43,10.0.2.15,64.233.166.156,51063,443,6,48,stats.g.doubleclick.net,t12d1509h2_073e58a039a6_e70312a1ce2c,ab41313cfec25328b20865eb1388e0a26390,benign,benign,ctu_normal14_win_full_2017.pcap,10.0.2.15:52577-54.164.162.60:443-6-3715669,170.05555555555554,234.26743697352347,730,54,211.0,275.1150408725152,730,54,1688,44.411764705882355,83.7041358174205,298,0,107.85714285714285,124.12685523478065,344,1,69.33333333333333,103.20368210485516,298,0,46.0,0.0,0.0,0.0,0.0,316.37283950617285,291.7118478873213,730.0,54.0,170.05555555555554,11,13,10.0.2.15,54.164.162.60,52577,443,6,18,messaging-notifications.api.nytimes.com,t12d1711h2_67e6df579eba_a29fe97f68c7,303951d4c50efb2e991652225a6f02b16400,benign,benign,ctu_normal20_win_2017_https.pcap,10.0.2.15:51640-172.217.23.129:443-6-6102556,312.12499999999994,493.65878904360653,1474,54,109.81481481481487,111.95536096589053,571,54,2965,3315.4126984126983,14206.403274165605,68041,0,8033.500000000002,21473.613704730742,68041,2,5800.805555555555,18560.164834273346,68281,0,5.0,0.0,0.0,0.0,0.0,506.9662857301746,546.490342575833,1474.0,54.0,312.12499999999994,54,56,10.0.2.15,172.217.23.129,51640,443,6,64,lh5.googleusercontent.com,t12d1510h2_073e58a039a6_60bf0a45ed8c,c23237dbea656869600e48dfbd00ab7b6411,c2_beaconing,mta_icedid,IcedID_2022-01-12.pcap,10.22.5.47:50082-104.168.44.45:443-6-1642007188198,242.52941176470588,381.8695977763644,1279,60,244.88888888888889,408.59559604957946,1279,60,2204,78.81249999999999,118.81314110821243,256,0,125.62500000000001,132.99832168651065,256,0,145.14285714285714,132.9967776193952,256,0,126.0,0.0,0.0,0.0,0.0,514.3659222948438,519.8887040012763,1279.0,60.0,242.52941176470588,12,13,10.22.5.47,104.168.44.45,50082,443,6,17,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b76421,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:51484-194.165.16.90:443-6-1668459786634,466.32,610.5326035520134,1514,54,493.1666666666667,647.6681014971864,1514,54,5918,69.70833333333333,171.08743738768214,581,0,152.0909090909091,232.09672748466514,581,0,120.66666666666669,226.53650451701571,581,0,1.0,0.0,0.0,0.0,0.0,678.3361253561253,614.6092548983562,1514.0,54.0,466.32,14,16,172.16.24.174,194.165.16.90,51484,443,6,25,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b76430,benign,benign,ctu_normal14_win_full_2017.pcap,10.0.2.15:52512-152.163.66.131:443-6-3631630,290.14285714285705,502.39738113512163,1474,54,117.22222222222223,126.17426221081877,396,54,1055,235.5,803.717972268487,3636,0,588.75,1237.1729004930094,3636,2,416.4545454545454,1154.6107884162839,3889,0,116.5,0.0,0.0,0.0,0.0,481.46649029982365,547.6018548764181,1474.0,54.0,290.14285714285705,14,16,10.0.2.15,152.163.66.131,52512,443,6,21,adserver.adtechus.com,t12d1711h2_67e6df579eba_de5ccbe16bdd,5397c414a9ebeaff1bf18b70ca22eaa06441,c2_beaconing,mta_gozi,Gozi_2023-07-12.pcap,10.7.12.121:50016-170.130.55.162:443-6-1689202822732,345.7083333333334,514.0707512773321,1514,54,136.66666666666666,185.8329324632176,636,54,1640,471.52173913043475,2168.5459701159048,10415,0,985.9090909090911,3128.5635187589037,10415,0,982.5454545454545,3129.6956517730714,10415,0,18.0,0.0,0.0,0.0,0.0,540.3472222222223,559.3448058958946,1514.0,54.0,345.7083333333334,15,17,10.7.12.121,170.130.55.162,50016,443,6,24,iamupdate.com,t12d190700_d83cc789557e_2dae41c691ec,4ce0442e9d20d092d9d74e9ce54b363a6451,c2_beaconing,mta_icedid,IcedID_2023-10-31.pcap,10.10.31.101:56132-45.61.136.22:443-6-1698796059622,92.23664122137409,117.75331659944996,1360,60,86.07575757575756,35.00826742183606,261,60,5681,12545.007692307698,24360.135535224632,59970,0,25090.015384615384,29613.728068399876,59970,1,25480.250000000007,29878.649279939862,61720,2,157.0,0.0,0.0,0.0,0.0,381.9783007210488,526.0514939628521,1360.0,60.0,92.23664122137409,121,124,10.10.31.101,45.61.136.22,56132,443,6,131,brojizuza.com,t12d210700_76e208dd3e22_2dae41c691ec,567bb420d39046dbfd1f68b558d863826461,c2_beaconing,mta_gozi,Gozi_2023-07-12.pcap,10.7.12.121:50011-170.130.55.162:443-6-1689202795952,363.34782608695656,557.0382399714707,1514,54,153.2,200.96201962891726,636,54,1532,489.0909090909091,2217.693029319967,10416,0,1195.5555555555557,3458.328285136878,10416,0,893.3333333333333,2999.4832080129263,10416,0,40.0,0.0,0.0,0.0,0.0,540.8386473429952,557.3942252007113,1514.0,54.0,363.34782608695656,14,16,10.7.12.121,170.130.55.162,50011,443,6,23,iamupdate.com,t12d190700_d83cc789557e_2dae41c691ec,4ce0442e9d20d092d9d74e9ce54b363a6471,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:51458-194.165.16.90:443-6-1668459749633,466.32,610.5326035520134,1514,54,493.1666666666667,647.6681014971864,1514,54,5918,69.24999999999999,170.33094385572636,614,0,151.0909090909091,230.98937401770434,615,0,119.75000000000001,225.68970049404317,614,0,1.0,0.0,0.0,0.0,0.0,678.3361253561253,614.6092548983562,1514.0,54.0,466.32,14,16,172.16.24.174,194.165.16.90,51458,443,6,25,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b76480,benign,benign,ctu_normal20_win_2017_https.pcap,10.0.2.15:65485-93.184.220.70:443-6-9292151,347.7727272727272,523.866479882602,1474,54,122.60000000000001,162.347501092906,571,54,1226,279.8095238095238,1139.7990445270439,5245,0,652.888888888889,1724.8898837639204,5245,2,532.6363636363636,1635.6241177438828,5459,0,3.0,0.0,0.0,0.0,0.0,520.7543771043771,543.8670737637241,1474.0,54.0,347.7727272727272,16,18,10.0.2.15,93.184.220.70,65485,443,6,22,abs.twimg.com,t12d1510h2_073e58a039a6_60bf0a45ed8c,76cc3e2d3028143b23ec18e27dbd7ca96491,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:51079-194.165.16.90:443-6-1668459167840,466.32,610.5326035520134,1514,54,493.1666666666667,647.6681014971864,1514,54,5918,63.041666666666664,153.11986755669463,510,0,137.54545454545456,207.49957283636206,512,0,103.58333333333333,198.50187007744393,510,0,1.0,0.0,0.0,0.0,0.0,678.3361253561253,614.6092548983562,1514.0,54.0,466.32,14,16,172.16.24.174,194.165.16.90,51079,443,6,25,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b76500,c2_beaconing,mta_emotet,Emotet_2022-11-07_1.pcap,192.168.1.133:60182-103.11.84.10:465-6-1667841844557,265.2916666666667,401.16823741436076,1514,54,131.3,90.36598425907346,304,54,1313,96.04347826086956,152.6283299870129,500,0,245.44444444444443,156.35145595029738,501,0,148.76923076923077,173.7829843253523,500,0,1.0,0.0,0.0,0.0,0.0,472.39907407407406,567.1613910743372,1514.0,54.0,265.2916666666667,19,21,192.168.1.133,103.11.84.10,60182,465,6,24,,t12i280600_d943125447b4_a8cc486ca5dc,649d6810e8392f63dc311eecb6b7098b6510,c2_beaconing,mta_emotet,Emotet_2022-11-07_1.pcap,192.168.1.133:61239-54.37.70.105:8080-6-1667842247673,1349.1385498923185,445.8845945318596,1514,54,58.21126760563382,54.58760663728991,956,54,16532,2.3820466786355436,46.2375624093926,2304,0,23.441696113074205,143.73532349359374,2304,0,2.5901639344262275,48.75187347387909,2305,0,1.0,0.0,0.0,0.0,0.0,783.2244978852419,670.5474202517067,1514.0,54.0,956.0,991,993,192.168.1.133,54.37.70.105,61239,8080,6,2786,,t12i190700_d83cc789557e_7af1ed941c26,ec74a5c51106f0419184d0dd08fb05bc6520,benign,benign,ctu_normal20_win_2017_https.pcap,10.0.2.15:65461-61.213.187.246:443-6-3518810,291.2272727272727,436.4954515464957,1474,54,163.3,240.1462748687419,820,54,1633,646.4761904761905,2035.1207732969467,9366,0,1508.3333333333333,2988.9282360070138,9366,73,1203.0909090909092,2857.811941137676,9650,0,118.0,0.0,0.0,0.0,0.0,531.3734006734006,553.2763381291433,1474.0,54.0,291.2272727272727,15,17,10.0.2.15,61.213.187.246,65461,443,6,22,cs.gssprt.jp,t12d1509h2_073e58a039a6_e70312a1ce2c,e35df3e00ca4ef31d42b34bebaa2f86e6530,benign,benign,ctu_normal20_win_2017_https.pcap,10.0.2.15:65523-52.28.153.152:443-6-9360715,107.71428571428571,138.50488942851223,571,54,141.28571428571428,190.4658449571421,571,54,989,549.8461538461539,1819.339112890257,6601,1,1191.3333333333333,2653.833202495339,6603,4,1187.3333333333335,2653.5038471173666,6602,4,4.0,0.0,0.0,0.0,0.0,202.015873015873,201.95666947810074,571.0,54.0,107.71428571428571,7,9,10.0.2.15,52.28.153.152,65523,443,6,14,t.myvisualiq.net,t12d1510h2_073e58a039a6_60bf0a45ed8c,fbe78c619e7ea20046131294ad087f056541,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_0.pcap,172.16.24.174:49955-190.74.23.139:443-6-1668455862507,81.5,59.70510865914239,203,54,94.25,72.7203547846131,203,54,377,12055.2,26875.261221056066,60131,0,20092.0,34674.86693557742,60131,0,1.0,0.0,1,1,144.0,0.0,0.0,0.0,0.0,95.30555555555556,59.10722104994375,203.0,54.0,58.0,2,4,172.16.24.174,190.74.23.139,49955,443,6,6,,t12i190600_d83cc789557e_2dae41c691ec,6551,exfil,mta_lumma,Lumma_2025-08-15.pcap,10.8.15.176:62786-5.10.250.239:443-6-1755286323682,60.0,4.898979485566356,66,54,61.5,3.0,66,60,246,76.66666666666667,83.26744061556514,154,0,102.0,87.50428560933459,155,1,153.0,2.8284271247461903,155,151,150.0,0.0,0.0,0.0,0.0,60.611111111111114,4.507880616689065,66.0,54.0,60.0,0,1,10.8.15.176,5.10.250.239,62786,443,6,7,,,6560,c2_beaconing,mta_qakbot,Qakbot_2022-09-29.pcap,10.9.29.201:50143-92.98.73.123:443-6-1664422561626,61.5,6.2105900340811875,66,54,66.0,0.0,66,66,330,2253.714285714286,2180.1732128652616,6252,502,2381.0,1614.504464740394,4719,1024,5739.0,1435.4267658086915,6754,4724,1259.0,0.0,0.0,0.0,0.0,60.166666666666664,5.676462121975467,66.0,54.0,61.5,0,5,10.9.29.201,92.98.73.123,50143,443,6,8,,,6570,benign,benign,ctu_normal21_kali_2017.pcap,192.168.1.191:43346-198.232.125.123:443-6-1493727197819,651.5319148936171,703.5660955161769,1514,54,70.11428571428574,67.81273080791934,555,54,4908,930.1785714285716,7044.46428644441,59490,0,1884.4347826086953,14259.415022320249,118389,0,1856.3428571428572,9917.157094513885,59496,0,5.0,0.0,0.0,0.0,0.0,632.3785293320205,599.2115048180299,1514.0,54.0,555.0,129,131,192.168.1.191,198.232.125.123,43346,443,6,141,maxcdn.bootstrapcdn.com,t12d1109h2_43e74fd21232_fed6c16fddd0,8d2a028aa94425f76ced7826b1f390396580,c2_beaconing,mta_qakbot,Qakbot_2022-12-09.pcap,10.12.9.101:49808-172.64.155.106:443-6-1670629674311,54.0,0.0,54,54,54.0,0.0,54,54,108,17.333333333333336,29.160475533388226,51,0,52.0,0.0,52,52,51.0,0.0,51,51,26.0,0.0,0.0,0.0,0.0,54.0,0.0,54.0,54.0,54.0,0,0,10.12.9.101,172.64.155.106,49808,443,6,4,,,6591,c2_beaconing,mta_emotet,Emotet_2022-04-25.pcap,10.4.25.101:49851-138.197.147.101:443-6-1650905814852,151.1764705882353,182.3078561438445,657,60,141.9,162.73594836079977,509,60,1419,4389.3125,16574.111603014102,66479,0,7803.222222222223,22025.10726294981,66479,0,613.8333333333334,1188.1599920324984,3007,0,72.0,0.0,0.0,0.0,0.0,273.3894491129785,242.79153664200524,657.0,60.0,151.1764705882353,11,12,10.4.25.101,138.197.147.101,49851,443,6,17,,t12i190600_d83cc789557e_2dae41c691ec,fd4bc6cea4877646ccd62f0792ec0b626600,benign,benign,ctu_normal14_win_full_2017.pcap,10.0.2.15:51736-52.202.38.240:443-6-3357494,345.03846153846155,470.2460190810109,1474,54,395.8181818181818,461.71242525663484,1269,54,4354,53.28000000000001,92.25757421480363,324,0,133.2,128.8356403415694,329,0,82.64285714285714,110.87734536092444,324,0,40.0,0.0,0.0,0.0,0.0,603.0729603729603,583.2526090051304,1474.0,54.0,345.03846153846155,19,21,10.0.2.15,52.202.38.240,51736,443,6,26,logx.optimizely.com,t12d1710h2_67e6df579eba_4a7a952b215a,303951d4c50efb2e991652225a6f02b16610,exfil,mta_xloader,XLoader_2023-06-13.pcap,10.6.13.101:50068-40.126.32.75:443-6-1686696213153,624.972972972973,670.3147057948264,1514,54,453.7142857142857,592.2658483863773,1514,54,6352,29.999999999999993,94.93757347406167,490,0,83.07692307692308,147.37902470527115,491,0,40.68181818181818,114.89762994929603,490,0,3.0,0.0,0.0,0.0,0.0,723.5449611101785,605.7030879763938,1514.0,54.0,624.972972972973,20,22,10.6.13.101,40.126.32.75,50068,443,6,37,login.live.com,t12d1909h2_d83cc789557e_7af1ed941c26,7d8fd34fdb13a7fff30d5a52846b6c4c6621,c2_beaconing,mta_icedid,IcedID_2023-05-10.pcap,172.16.10.73:50520-96.114.21.40:443-6-1683741417153,438.8181818181817,583.4842501129488,1514,54,254.5,451.7258878764618,1514,54,2545,16.333333333333336,33.888542803333,110,0,38.1111111111111,44.84262605056835,112,0,25.181818181818187,41.68409332543574,110,0,2.0,0.0,0.0,0.0,0.0,665.5260942760942,624.2595893605235,1514.0,54.0,438.8181818181817,16,18,172.16.10.73,96.114.21.40,50520,443,6,22,xfinity.com,t13d201100_2b729b4bf6f3_9e7b989ebec8,8115f0e10372c1f803c2ac287f0155d76631,c2_beaconing,mta_gozi,Gozi_2023-07-12.pcap,10.7.12.121:50476-170.130.55.162:443-6-1689204990422,390.76190476190476,575.9654420850183,1514,54,164.2222222222222,209.92187700295662,636,54,1478,549.9,2353.8056285178063,10545,0,1374.7499999999998,3707.0719577585755,10545,0,996.5454545454547,3168.7718555817924,10546,0,34.0,0.0,0.0,0.0,0.0,549.0723104056437,555.610104810533,1514.0,54.0,390.76190476190476,11,13,10.7.12.121,170.130.55.162,50476,443,6,21,iamupdate.com,t12d190700_d83cc789557e_2dae41c691ec,4ce0442e9d20d092d9d74e9ce54b363a6640,exfil,mta_koistealer,KoiStealer_2025-07-08.pcap,10.7.8.101:50198-142.251.186.132:443-6-1752006838947,1097.6566265060244,599.2751552359699,1514,54,85.82857142857142,141.9673710885058,877,54,3004,1.7818181818181817,6.515528100634299,51,0,8.64705882352941,13.314112705995473,51,0,2.0384615384615383,6.92865507733498,51,0,1.0,0.0,0.0,0.0,0.0,735.3863960385344,630.5861792051764,1514.0,54.0,877.0,100,102,10.7.8.101,142.251.186.132,50198,443,6,166,clients2.googleusercontent.com,t12d180700_4b22cbed5bed_2dae41c691ec,84aaf6d03fc8c5bfb56d1d188735b2686650,benign,benign,ctu_normal14_win_full_2017.pcap,10.0.2.15:50992-104.122.237.146:443-6-2597341,107.8,133.9046569125105,571,54,136.85714285714286,192.34381418996261,571,54,958,227.71428571428575,809.6680638547958,3040,0,531.1666666666666,1229.3112570324356,3040,0,449.14285714285717,1142.6741192733575,3040,0,24.0,0.0,0.0,0.0,0.0,203.44801587301586,201.5072377283032,571.0,54.0,107.8,9,11,10.0.2.15,104.122.237.146,50992,443,6,15,i.s-microsoft.com,t12d1712h2_67e6df579eba_88be6878e1da,410b9bedaf65dd26c6fe547154d60db46660,benign,benign,ctu_normal14_win_full_2017.pcap,10.0.2.15:51122-40.115.11.100:443-6-2689661,361.578947368421,553.2189957963677,1474,54,104.125,89.45619438745265,261,54,833,51.888888888888886,108.2637785763733,372,0,126.71428571428571,164.74901546060326,411,1,89.6,210.72003543406433,685,0,38.5,0.0,0.0,0.0,0.0,487.2802365762892,550.557847084681,1474.0,54.0,261.0,13,15,10.0.2.15,40.115.11.100,51122,443,6,19,kes.skype.com,t12d1711h2_67e6df579eba_de5ccbe16bdd,4fd467dd264720762ffe286277c00f576670,exfil,mta_astaroth,Astaroth_2023-01-04_1.pcap,10.1.5.101:63255-172.217.173.234:443-6-1672885046172,272.63333333333327,463.20111691644667,1514,54,97.42857142857142,137.70353567088878,571,54,1364,9164.344827586205,17256.305994943792,45031,0,20443.538461538465,21098.346288336536,45031,0,17702.466666666667,26900.75168855926,90035,0,15033.0,0.0,0.0,0.0,0.0,506.3332671957672,565.3970696833868,1514.0,54.0,272.63333333333327,22,24,10.1.5.101,172.217.173.234,63255,443,6,30,fonts.googleapis.com,t13d1616h2_e72c3b3287f1_e5627efa2ab1,eb1d94daa7e0344597e756a1fb6e70546680,c2_beaconing,mta_icedid,IcedID_2022-10-31_0.pcap,172.16.0.153:57616-52.242.97.97:443-6-1667228081848,731.5538461538457,666.2410205589998,1414,60,526.2403846153846,637.5505233387856,1414,60,54729,13.154440154440154,177.45039510369278,2852,0,33.077669902912625,281.03881838218484,2852,0,21.761290322580646,232.27511352265145,2887,0,1.0,0.0,0.0,0.0,0.0,727.580413105413,558.8578062653692,1414.0,60.0,731.5538461538457,140,141,172.16.0.153,52.242.97.97,57616,443,6,260,fe3cr.delivery.mp.microsoft.com,t12d1909h2_d83cc789557e_7af1ed941c26,87b9bed0515be16c82bdc44d88a4a0ec6691,c2_beaconing,mta_pikabot,Pikabot_2023-10-03.pcap,10.1.2.147:49448-179.60.149.244:443-6-1696349704402,430.9062500000001,586.9049139547168,1450,60,335.05555555555554,529.120187861524,1450,60,6031,13.677419354838706,27.14699135788248,76,0,24.941176470588236,40.347661933864416,116,0,26.76923076923077,33.761797558171786,76,0,4.0,0.0,0.0,0.0,0.0,647.7894069664903,585.8551855306317,1450.0,60.0,430.9062500000001,14,15,10.1.2.147,179.60.149.244,49448,443,6,32,zzerxc.com,t12d190700_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b76700,benign,benign,ctu_normal21_kali_2017.pcap,192.168.1.191:60016-104.199.104.168:443-6-1493727011079,127.61538461538461,144.07552328642228,583,66,157.85714285714286,190.09596573961318,583,66,1105,351.66666666666663,827.7687790169133,2946,0,695.0,1183.5874281184301,3096,0,809.2,1250.516373343428,2996,0,237.0,0.0,0.0,0.0,0.0,217.53398453398452,200.9263819138495,583.0,66.0,127.61538461538461,8,9,192.168.1.191,104.199.104.168,60016,443,6,13,s.pubmine.com,t12d1110h2_43e74fd21232_205f67e4d9f4,91e914bce4ef89cc2b5fdad958d585f76710,benign,benign,ctu_normal14_win_full_2017.pcap,10.0.2.15:51496-172.217.23.195:443-6-3117057,171.85294117647058,213.3072042822108,941,54,146.88333333333333,129.74970581158206,804,54,8813,66.0,599.7196235455963,6975,0,151.01694915254234,904.6568694438301,6975,0,118.53333333333332,803.3195038247393,6975,0,8.5,0.0,0.0,0.0,0.0,373.14467377594315,374.28436464992694,941.0,54.0,171.85294117647058,126,128,10.0.2.15,172.217.23.195,51496,443,6,136,www.google.cz,t12d1712h2_67e6df579eba_88be6878e1da,c74a0764cf5d01aa28d5c7769cd86fc16720,exfil,mta_astaroth,Astaroth_2023-01-04_1.pcap,10.1.5.101:63254-142.251.133.74:443-6-1672885046172,252.6060606060606,434.812311477172,1414,54,89.76470588235294,125.2919238277974,571,54,1526,8305.1875,16619.396117745928,45015,0,16610.375000000004,20585.80809805629,45016,0,17702.466666666664,26893.00169419192,90008,0,237.0,0.0,0.0,0.0,0.0,480.99952960982375,527.50568586069,1414.0,54.0,252.6060606060606,23,25,10.1.5.101,142.251.133.74,63254,443,6,33,ajax.googleapis.com,t13d1616h2_e72c3b3287f1_e5627efa2ab1,eb1d94daa7e0344597e756a1fb6e70546730,benign,benign,ctu_normal14_win_full_2017.pcap,10.0.2.15:52792-151.101.60.64:443-6-3854692,361.7586206896551,550.4383743352989,1514,54,210.99999999999997,416.1400550950911,1514,54,2532,65.71428571428572,237.5915974856165,1259,0,167.27272727272728,369.6912470992763,1259,0,110.6875,312.4594306999444,1267,0,22.0,0.0,0.0,0.0,0.0,633.8816768086546,627.5296969964382,1514.0,54.0,361.7586206896551,19,21,10.0.2.15,151.101.60.64,52792,443,6,29,glitter.services.disqus.com,t12d1711h2_67e6df579eba_de5ccbe16bdd,860fcf58fd757e26aa8911e5eaff6b536740,exfil,mta_lumma,Lumma_2023-10-11.pcap,10.10.10.102:59772-162.125.8.18:443-6-1697047098827,275.75000000000006,441.8946464616069,1430,54,134.64705882352942,172.34991339440478,600,60,2289,72.6,222.3943503302715,1134,0,158.8125,319.83333550460304,1134,0,138.88888888888889,385.339100302866,1548,0,16.0,0.0,0.0,0.0,0.0,493.37745098039215,529.5923076319749,1430.0,54.0,275.75000000000006,22,25,10.10.10.102,162.125.8.18,59772,443,6,36,www.dropbox.com,t13d1516h2_8daaf6152771_e5627efa2ab1,9d9ce860f1b1cbef07b019450cb368d86751,c2_beaconing,mta_qakbot,Qakbot_2022-09-29.pcap,10.9.29.201:50400-193.3.19.137:443-6-1664434153562,179.28571428571428,250.3833346804741,958,54,155.58333333333331,218.80313207552723,684,54,1867,5578.1,18842.478141576532,80071,0,10141.999999999998,24973.152980751147,80071,0,13927.625,28825.229568841747,80071,2,2.0,0.0,0.0,0.0,0.0,367.52865961199296,364.7312288504976,958.0,54.0,179.28571428571428,14,16,10.9.29.201,193.3.19.137,50400,443,6,21,,t13i201000_2b729b4bf6f3_533b6d20482b,2253c82f03b621c5144709b393fde2c96760,c2_beaconing,mta_cobaltstrike,CobaltStrike_2024-04-18.pcap,10.4.18.169:49890-20.189.173.15:443-6-1713466290121,345.60000000000014,480.5828926071617,1430,60,232.76923076923077,335.37371042022005,1168,60,3026,55.791666666666664,149.52125897028145,732,0,111.58333333333333,202.01010700787558,732,0,114.36363636363637,264.0906180564818,900,0,25.5,0.0,0.0,0.0,0.0,583.800284900285,556.7672512643155,1430.0,60.0,345.60000000000014,15,16,10.4.18.169,20.189.173.15,49890,443,6,25,v10.events.data.microsoft.com,t12d1809h2_4b22cbed5bed_7af1ed941c26,2fe9b0e731d3d41b2b84e8e1d61868366771,c2_beaconing,mta_icedid,IcedID_2022-10-31_1.pcap,172.16.0.153:57759-198.44.140.67:8008-6-1667231027013,292.80000000000007,404.28736522949924,1354,60,297.99999999999994,428.1736407891857,1354,60,2980,40.05263157894737,67.63667125343775,152,0,67.88888888888889,79.32282843615143,152,0,67.66666666666667,79.06010371862664,151,0,2.0,0.0,0.0,0.0,0.0,568.9333333333334,563.2082070109103,1354.0,60.0,292.80000000000007,14,15,172.16.0.153,198.44.140.67,57759,8008,6,20,clouditsoft.com,t12d190700_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b76781,c2_beaconing,mta_icedid,IcedID_2022-12-20.pcap,10.3.24.178:54757-103.208.85.184:443-6-1671554317984,184.29411764705884,314.26516763433284,1356,54,115.99999999999999,88.66147496436737,266,54,928,3918.6875,14949.70481634448,59953,0,8957.0,22496.94637056327,59953,1,7812.5,21095.219201109456,59997,1,199.0,0.0,0.0,0.0,0.0,409.47712418300654,511.574658908555,1356.0,54.0,184.29411764705884,10,12,10.3.24.178,103.208.85.184,54757,443,6,17,artiwal.pics,t12d190800_d83cc789557e_7af1ed941c26,ec74a5c51106f0419184d0dd08fb05bc6790,exfil,mta_astaroth,Astaroth_2023-01-04_0.pcap,10.1.4.101:49846-23.47.145.177:443-6-1672846547797,85.5,63.0,180,54,117.0,89.09545442950498,180,54,234,0.33333333333333337,0.5773502691896258,1,0,1.0,0.0,1,1,0.0,0.0,0,0,1.0,0.0,0.0,0.0,0.0,92.5,50.96076922496363,180.0,54.0,54.0,1,1,10.1.4.101,23.47.145.177,49846,443,6,4,,,6801,c2_beaconing,mta_gozi,Gozi_2023-07-12.pcap,10.7.12.121:50639-170.130.55.162:443-6-1689205694937,364.2608695652174,556.522417860258,1514,54,153.2,200.96201962891726,636,54,1532,493.6363636363636,2237.9044097517094,10511,0,1206.6666666666667,3489.8047939677085,10511,0,902.0,3026.682762605712,10511,0,20.0,0.0,0.0,0.0,0.0,541.1195837978447,557.3570916670573,1514.0,54.0,364.2608695652174,14,16,10.7.12.121,170.130.55.162,50639,443,6,23,iamupdate.com,t12d190700_d83cc789557e_2dae41c691ec,4ce0442e9d20d092d9d74e9ce54b363a6811,c2_beaconing,mta_icedid,IcedID_2022-10-31_1.pcap,172.16.0.153:57907-198.44.140.67:8008-6-1667231630650,292.80000000000007,404.28736522949924,1354,60,297.99999999999994,428.1736407891857,1354,60,2980,39.63157894736842,67.03499129916803,150,0,67.11111111111111,78.87560529790635,151,0,67.11111111111111,78.40351466044817,150,0,3.0,0.0,0.0,0.0,0.0,568.9333333333334,563.2082070109103,1354.0,60.0,292.80000000000007,14,15,172.16.0.153,198.44.140.67,57907,8008,6,20,clouditsoft.com,t12d190700_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b76821,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:51093-194.165.16.90:443-6-1668459190889,435.77777777777777,589.6705294767014,1514,54,459.3846153846154,631.944425096271,1514,54,5972,61.26923076923077,158.92804854834347,612,0,132.75,217.57469981594826,613,0,106.53846153846155,211.78629770935584,612,0,1.0,0.0,0.0,0.0,0.0,668.1132817799485,618.2566902665315,1514.0,54.0,435.77777777777777,16,18,172.16.24.174,194.165.16.90,51093,443,6,27,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b76830,benign,benign,ctu_normal21_kali_2017.pcap,192.168.1.191:60644-94.31.6.183:443-6-1493727271213,192.73333333333332,229.89577348587045,765,66,225.375,281.66643772884464,765,66,1803,14.785714285714285,20.153940524902783,67,0,26.142857142857142,34.64788868713634,96,1,28.333333333333336,26.00512769948778,67,0,15.5,0.0,0.0,0.0,0.0,313.05965608465607,274.8363017443325,765.0,66.0,192.73333333333332,9,10,192.168.1.191,94.31.6.183,60644,443,6,15,p.adsymptotic.com,t12d1110h2_43e74fd21232_205f67e4d9f4,fbe78c619e7ea20046131294ad087f056840,benign,benign,ctu_normal14_win_full_2017.pcap,10.0.2.15:52688-216.58.201.78:443-6-3772036,372.1587301587302,525.9931683092841,1474,54,187.5,238.54630577730606,1027,54,4875,69.41935483870968,336.88041115880833,2586,0,172.16,520.9172743024238,2586,0,118.94444444444446,437.9555714221278,2586,0,8.0,0.0,0.0,0.0,0.0,577.6197387864055,560.9128381368889,1474.0,54.0,372.1587301587302,51,53,10.0.2.15,216.58.201.78,52688,443,6,63,www.youtube.com,t12d1711h2_67e6df579eba_de5ccbe16bdd,7ce1896a8d7190ee334e3c8ea463b0c16850,benign,benign,ctu_normal20_win_2017_https.pcap,10.0.2.15:49675-93.184.220.78:443-6-2590253,277.84,467.5005062385851,1474,54,87.63636363636364,67.03472641440813,255,54,964,258.16666666666663,896.6814987189865,4379,0,619.3999999999999,1348.8139810795094,4379,1,475.23076923076917,1265.628773498648,4614,0,6.5,0.0,0.0,0.0,0.0,461.9735642135642,554.3561944749163,1474.0,54.0,255.0,16,18,10.0.2.15,93.184.220.78,49675,443,6,25,a4-images.myspacecdn.com,t12d1509h2_073e58a039a6_e70312a1ce2c,49b45fc1ab090aa3a159778313fc9b9e6860,exfil,mta_xloader,XLoader_2025-09-05.pcap,10.9.5.71:58724-150.171.22.17:443-6-1757116321329,472.8181818181818,561.9492556353206,1430,54,258.6153846153846,391.8283081617803,1430,60,3362,14.03125,40.187852742644964,220,0,37.416666666666664,73.1604194199088,261,0,21.842105263157894,51.07321885499803,220,0,6.0,0.0,0.0,0.0,0.0,642.387062937063,581.0360387615538,1430.0,54.0,472.8181818181818,22,23,10.9.5.71,150.171.22.17,58724,443,6,33,config.edge.skype.com,t13d1516h2_8daaf6152771_d8a2da3f94cd,0f14538e1c9070becdad7739c67d63636871,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_0.pcap,172.16.24.174:49882-2.83.62.105:443-6-1668454525497,64.0,4.898979485566356,66,54,66.0,0.0,66,66,330,15000.6,25290.83993860228,59988,1014,3753.75,3091.582159671646,8000,1014,0.0,0.0,0,0,4001.0,0.0,0.0,0.0,0.0,60.44444444444444,5.7948465824023545,66.0,54.0,64.0,0,1,172.16.24.174,2.83.62.105,49882,443,6,6,,,6881,c2_beaconing,mta_pikabot,Pikabot_2023-10-03.pcap,10.1.2.147:49430-179.60.149.244:443-6-1696349642654,432.90625000000006,589.9751421431026,1450,60,335.05555555555554,529.120187861524,1450,60,6031,13.93548387096774,28.46744981421292,84,0,25.41176470588235,40.53402709997092,116,0,27.46153846153846,36.172308433882094,86,0,2.0,0.0,0.0,0.0,0.0,648.519565696649,585.6936112030472,1450.0,60.0,432.90625000000006,15,16,10.1.2.147,179.60.149.244,49430,443,6,32,zzerxc.com,t12d190700_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b76890,benign,benign,ctu_normal21_kali_2017.pcap,192.168.1.191:46132-37.252.172.27:443-6-1493726679534,363.22222222222223,489.325385948178,1514,66,150.39999999999998,162.25059982279618,536,66,2256,470.3076923076922,1955.1304973168574,9995,0,869.1428571428572,2641.9261870881214,9995,0,1100.6363636363635,2968.447482194262,9995,0,109.0,0.0,0.0,0.0,0.0,544.9858024691358,553.9932190900392,1514.0,66.0,363.22222222222223,21,22,192.168.1.191,37.252.172.27,46132,443,6,27,ib.adnxs.com,t12d1109h2_43e74fd21232_fed6c16fddd0,9168bbacb9fd42f7f7cf95dc89c9d30c6900,exfil,mta_xloader,XLoader_2025-01-30.pcap,10.1.30.242:65462-52.113.194.132:443-6-1738202234368,252.35714285714283,334.29871652181356,945,54,284.7142857142857,366.2707169502335,945,60,1993,5186.615384615385,18578.12964006541,67018,0,68.0,109.99636357625647,286,1,11229.0,27331.540307856783,67019,0,5.0,0.0,0.0,0.0,0.0,414.56349206349205,377.25887832479214,945.0,54.0,252.35714285714283,9,10,10.1.30.242,52.113.194.132,65462,443,6,14,ecs.office.com,t13d201200_2b729b4bf6f3_2e4f304f1f45,2253c82f03b621c5144709b393fde2c96910,benign,benign,ctu_normal21_kali_2017.pcap,192.168.1.191:42478-52.207.123.132:443-6-1493726783681,139.42857142857142,209.9423957275174,914,66,141.53333333333333,221.56355639818005,914,66,2123,2262.703703703704,4205.548906045393,10031,0,4363.785714285715,5134.718165864329,10144,1,5081.833333333333,5224.542465106105,10150,1,109.0,0.0,0.0,0.0,0.0,360.9957671957672,367.76570373234335,914.0,66.0,139.42857142857142,11,12,192.168.1.191,52.207.123.132,42478,443,6,28,services.babator.com,t12d1109h2_43e74fd21232_fed6c16fddd0,303951d4c50efb2e991652225a6f02b16920,c2_beaconing,mta_emotet,Emotet_2022-04-25.pcap,10.4.25.101:50157-74.208.5.13:465-6-1650907853140,66.0,0.0,66,66,66.0,0.0,66,66,330,3755.25,3102.1861511950997,8015,997,3755.25,3102.1861511950997,8015,997,0.0,0.0,0,0,3004.5,0.0,0.0,0.0,0.0,66.0,0.0,66.0,66.0,66.0,0,0,10.4.25.101,74.208.5.13,50157,465,6,5,,,6930,c2_beaconing,mta_danabot,Danabot_2023-08-03.pcap,10.8.3.101:49703-142.251.116.157:443-6-1691102810316,54.16666666666667,0.408248290463864,55,54,54.333333333333336,0.5773502691896263,55,54,163,3482.2,7764.651389470103,17372,0,8705.5,12256.281838306428,17372,39,8705.0,12256.988945087614,17372,38,38.0,0.0,0.0,0.0,0.0,54.27777777777778,0.4006168083848876,55.0,54.0,54.0,1,1,10.8.3.101,142.251.116.157,49703,443,6,6,,,6940,c2_beaconing,mta_emotet,Emotet_2022-11-07_1.pcap,192.168.1.133:60781-98.136.96.39:465-6-1667842070929,64.0,4.898979485566356,66,54,66.0,0.0,66,66,330,15000.4,25297.264818553012,59998,987,3751.0,3099.8076284397607,8000,987,0.0,0.0,0,0,4016.0,0.0,0.0,0.0,0.0,60.44444444444444,5.7948465824023545,66.0,54.0,64.0,0,1,192.168.1.133,98.136.96.39,60781,465,6,6,,,6951,c2_beaconing,mta_pikabot,Pikabot_2023-05-23.pcap,10.1.0.186:55448-104.238.35.63:8080-6-1684859911945,346.25925925925924,509.1404969004583,1514,54,252.71428571428572,425.6414938873809,1514,54,3538,18.923076923076927,41.97420453271088,165,0,37.846153846153854,53.93181830460592,165,0,33.5,53.75787468742687,165,0,36.0,0.0,0.0,0.0,0.0,638.885949441505,632.0449770636837,1514.0,54.0,346.25925925925924,19,21,10.1.0.186,104.238.35.63,55448,8080,6,27,turiruy.us,t13d201200_2b729b4bf6f3_2e4f304f1f45,2253c82f03b621c5144709b393fde2c96960,benign,benign,ctu_normal21_kali_2017.pcap,192.168.1.191:47218-72.21.207.148:443-6-1493726847983,155.75757575757575,280.24007902857045,1313,54,197.77777777777777,365.794149047144,1313,54,3560,2478.8437499999995,4249.040552873046,10034,0,4666.058823529411,5025.318590280971,10304,1,5658.0,5053.943486944701,10274,0,114.0,0.0,0.0,0.0,0.0,400.4298540965208,496.1529748904572,1313.0,54.0,155.75757575757575,13,15,192.168.1.191,72.21.207.148,47218,443,6,33,fls-na.amazon.com,t12d1109h2_43e74fd21232_fed6c16fddd0,d199ba0af2b08e204c73d6d81a1fd2606970,c2_beaconing,mta_qakbot,Qakbot_2023-05-10.pcap,172.16.10.73:50295-20.54.24.231:443-6-1683737998961,208.10344827586212,338.92101321985103,1514,54,158.92307692307688,194.70724243440523,757,54,2066,3601.5,18752.82505828566,99284,0,8403.5,28621.050633469702,99284,0,6713.2,25623.55811469482,99333,0,6.0,0.0,0.0,0.0,0.0,506.89878057765986,575.7864408990913,1514.0,54.0,208.10344827586212,22,24,172.16.10.73,20.54.24.231,50295,443,6,29,array614.prod.do.dsp.mp.microsoft.com,t12d1809h2_4b22cbed5bed_7af1ed941c26,a02d7ceb8c8cbb4da2e6007f5a1c91e46981,c2_beaconing,mta_pikabot,Pikabot_2024-02-08.pcap,10.2.8.101:53352-158.220.80.157:9785-6-1707422131929,239.4210526315789,351.08819971142316,1430,60,127.60000000000001,111.01371286667447,404,60,1276,3401.777777777778,14111.51086902235,59944,0,6803.555555555556,19928.625662041468,59944,0,7636.625000000001,21213.410636653545,60136,0,137.5,0.0,0.0,0.0,0.0,463.8541910331384,530.5371753689936,1430.0,60.0,239.4210526315789,12,13,10.2.8.101,158.220.80.157,53352,9785,6,19,,t12i190700_d83cc789557e_7af1ed941c26,ec74a5c51106f0419184d0dd08fb05bc6991,c2_beaconing,mta_icedid,IcedID_2022-10-31_1.pcap,172.16.0.153:57767-198.44.140.67:8008-6-1667231066346,292.80000000000007,404.28736522949924,1354,60,297.99999999999994,428.1736407891857,1354,60,2980,40.10526315789474,67.97294783534771,152,0,67.88888888888889,79.79887913442839,153,0,67.88888888888889,79.79887913442839,153,0,2.0,0.0,0.0,0.0,0.0,568.9333333333334,563.2082070109103,1354.0,60.0,292.80000000000007,14,15,172.16.0.153,198.44.140.67,57767,8008,6,20,clouditsoft.com,t12d190700_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b77000,benign,benign,ctu_normal20_win_2017_https.pcap,10.0.2.15:49445-104.244.42.2:443-6-1060541,229.69230769230765,385.8769512920686,1474,54,101.5,71.00256077328223,246,54,1218,49.120000000000005,121.437679490346,572,0,111.63636363636363,171.62125318693646,572,3,92.53846153846155,221.89472555869648,823,0,2.0,0.0,0.0,0.0,0.0,447.4181929181929,556.9099475506118,1474.0,54.0,229.69230769230765,20,22,10.0.2.15,104.244.42.2,49445,443,6,26,api.twitter.com,t12d1509h2_073e58a039a6_e70312a1ce2c,8d2a028aa94425f76ced7826b1f390397011,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:50883-194.165.16.90:443-6-1668458861038,466.32,610.5326035520134,1514,54,493.1666666666667,647.6681014971864,1514,54,5918,55.291666666666664,134.44296646490682,449,0,120.54545454545453,181.69499918069494,449,0,93.24999999999999,176.19365637120578,449,0,1.0,0.0,0.0,0.0,0.0,678.3361253561253,614.6092548983562,1514.0,54.0,466.32,14,16,172.16.24.174,194.165.16.90,50883,443,6,25,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b77021,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:50439-194.165.16.90:443-6-1668458209355,466.32,610.5326035520134,1514,54,493.1666666666667,647.6681014971864,1514,54,5918,62.91666666666666,156.43610076701736,552,0,137.1818181818182,212.33408496132608,552,0,107.49999999999999,206.87963123077589,552,0,220.0,0.0,0.0,0.0,0.0,678.3361253561253,614.6092548983562,1514.0,54.0,466.32,14,16,172.16.24.174,194.165.16.90,50439,443,6,25,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b77031,c2_beaconing,mta_gozi,Gozi_2023-07-12.pcap,10.7.12.121:50700-170.130.55.162:443-6-1689205966469,324.3846153846154,498.66783148088285,1514,54,130.3076923076923,179.39267200538256,636,54,1694,438.0400000000001,2096.231429653383,10495,0,912.5833333333333,3019.089310562295,10495,0,909.0833333333333,3020.21334160153,10495,0,1.5,0.0,0.0,0.0,0.0,533.2393162393163,560.7085125868605,1514.0,54.0,324.3846153846154,19,21,10.7.12.121,170.130.55.162,50700,443,6,26,iamupdate.com,t12d190700_d83cc789557e_2dae41c691ec,4ce0442e9d20d092d9d74e9ce54b363a7040,benign,benign,ctu_normal7_general_2013.pcap,10.0.0.46:33620-68.232.35.139:443-6-1387315340348,416.52747252747236,569.5049183410553,1506,54,127.6666666666667,157.47017858266733,479,54,4596,3995.7222222222226,10126.356075677504,31607,0,10272.514285714286,14228.556320408099,31607,0,6658.481481481479,12420.428641983093,31644,0,37.0,0.0,0.0,0.0,0.0,533.6437932437932,554.5593837091933,1506.0,54.0,416.52747252747236,50,52,10.0.0.46,68.232.35.139,33620,443,6,91,pbs.twimg.com,t12d1810s2_27d4652c4487_736b2a1ed4d3,0c0aff9ccea5e7e1de5c3a0069d103f37051,c2_beaconing,mta_icedid,IcedID_2022-10-31_1.pcap,172.16.0.153:57899-198.44.140.67:8008-6-1667231612835,292.80000000000007,404.28736522949924,1354,60,297.99999999999994,428.1736407891857,1354,60,2980,39.684210526315795,67.00170199461681,150,0,67.22222222222223,78.7714697364753,151,0,67.11111111111111,78.64070899420422,151,0,2.0,0.0,0.0,0.0,0.0,568.9333333333334,563.2082070109103,1354.0,60.0,292.80000000000007,14,15,172.16.0.153,198.44.140.67,57899,8008,6,20,clouditsoft.com,t12d190700_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b77060,benign,benign,ctu_normal21_kali_2017.pcap,192.168.1.191:43224-52.20.220.238:443-6-1493727182586,199.8888888888889,349.48274910099923,1514,66,111.12500000000001,112.98145769376804,468,66,2667,2274.636363636364,4039.005317861899,11158,0,4351.478260869566,5030.502025097091,12150,0,4998.600000000001,4954.938603900259,11366,0,240.0,0.0,0.0,0.0,0.0,478.483024691358,567.5557796418581,1514.0,66.0,199.8888888888889,21,22,192.168.1.191,52.20.220.238,43224,443,6,45,sync.adap.tv,t12d1109h2_43e74fd21232_fed6c16fddd0,303951d4c50efb2e991652225a6f02b17070,benign,benign,ctu_normal21_kali_2017.pcap,192.168.1.191:45388-108.161.188.225:443-6-1493727303641,102.91304347826089,111.21188337562029,571,54,120.15384615384616,142.17585715927427,571,54,1562,26.772727272727273,33.507542602456105,118,0,49.083333333333336,37.203270465556294,118,1,60.77777777777778,58.721328701285735,141,0,21.0,0.0,0.0,0.0,0.0,200.84076551467857,202.56828023898555,571.0,54.0,102.91304347826089,14,16,192.168.1.191,108.161.188.225,45388,443,6,23,cdn1.tnwcdn.com,t12d1110h2_43e74fd21232_205f67e4d9f4,7bee5c1d424b7e5f943b06983bb114227080,benign,benign,ctu_normal20_win_2017_https.pcap,10.0.2.15:49722-185.33.222.20:443-6-2625990,431.45161290322585,566.6187924115987,1474,54,255.35714285714283,445.55213925107444,1299,54,3575,479.0,1727.9696078106356,9420,0,1105.3076923076924,2565.835386529937,9445,3,896.3750000000001,2388.215173862411,9680,0,26.0,0.0,0.0,0.0,0.0,630.2532604439625,582.1611606842499,1474.0,54.0,431.45161290322585,25,27,10.0.2.15,185.33.222.20,49722,443,6,31,secure.adnxs.com,t12d1509h2_073e58a039a6_e70312a1ce2c,d53e4608f956df65bb2b8a8c4d3b025d7090,benign,benign,ctu_normal14_win_full_2017.pcap,10.0.2.15:51453-90.182.114.17:443-6-3047453,108.06666666666666,134.71635104208858,571,54,126.5,180.46922966850295,571,54,1012,601.9285714285714,2134.192676194181,8014,0,1203.857142857143,3004.234535261377,8014,0,1401.1666666666665,3350.480826189976,8240,4,22.0,0.0,0.0,0.0,0.0,202.84074074074073,201.599261326406,571.0,54.0,108.06666666666666,7,9,10.0.2.15,90.182.114.17,51453,443,6,15,scontent.fprg1-1.fna.fbcdn.net,t12d1712h2_67e6df579eba_88be6878e1da,96681175a9547081bf3d417f1a5720917100,benign,benign,ctu_normal20_win_2017_https.pcap,10.0.2.15:49324-104.125.18.180:443-6-872430,275.00000000000006,437.90122342998933,1474,54,129.9090909090909,114.65378715546602,347,54,1429,20.851851851851855,44.125436327067995,209,0,56.2,66.61965008747627,214,3,34.25,54.23836280714969,209,0,4.0,0.0,0.0,0.0,0.0,470.08793820558526,549.1650769218104,1474.0,54.0,275.00000000000006,19,21,10.0.2.15,104.125.18.180,49324,443,6,28,fpdownload.adobe.com,t10d120300_d94e65cdb899_33a13ba74d1c,6aa98948bfa9626adc8d77e0f16d39c67111,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:51207-194.165.16.90:443-6-1668459358204,466.32,610.5326035520134,1514,54,493.1666666666667,647.6681014971864,1514,54,5918,62.37499999999999,154.80782265932731,559,0,136.0909090909091,210.19155765418103,559,0,106.41666666666667,204.55870832481114,559,0,220.0,0.0,0.0,0.0,0.0,678.3361253561253,614.6092548983562,1514.0,54.0,466.32,14,16,172.16.24.174,194.165.16.90,51207,443,6,25,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b77120,benign,benign,ctu_normal14_win_full_2017.pcap,10.0.2.15:50635-172.217.23.206:443-6-1948940,185.12500000000003,251.1576466316295,964,54,195.1764705882353,239.90290621783785,952,54,3318,25.66666666666666,97.90552194881641,586,0,62.5625,148.63196997954378,587,0,42.81818181818182,129.3156479183273,589,0,3.0,0.0,0.0,0.0,0.0,399.99968030690536,399.6647437939779,964.0,54.0,185.12500000000003,33,35,10.0.2.15,172.217.23.206,50635,443,6,40,notifications.google.com,t12d1711h2_67e6df579eba_de5ccbe16bdd,f75d3cb3274309c4b0eeaad4f9d4f7c27131,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:50283-194.165.16.90:443-6-1668457956072,435.77777777777777,589.6705294767014,1514,54,459.3846153846154,631.944425096271,1514,54,5972,53.5,135.57470265503073,466,0,115.83333333333334,184.23247830012508,466,0,88.38461538461537,176.497185275733,466,0,1.0,0.0,0.0,0.0,0.0,668.1132817799485,618.2566902665315,1514.0,54.0,435.77777777777777,16,18,172.16.24.174,194.165.16.90,50283,443,6,27,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b77141,c2_beaconing,mta_gozi,Gozi_2023-07-12.pcap,10.7.12.121:50060-170.130.55.162:443-6-1689203043740,308.85714285714295,489.57606107398635,1514,54,124.85714285714285,173.55728699231233,636,54,1748,398.4814814814814,2005.6433529566661,10432,0,827.6153846153845,2886.3322902506548,10432,0,825.0,2887.1235396728925,10432,0,1.0,0.0,0.0,0.0,0.0,528.063492063492,561.9279055407795,1514.0,54.0,308.85714285714295,19,21,10.7.12.121,170.130.55.162,50060,443,6,28,iamupdate.com,t12d190700_d83cc789557e_2dae41c691ec,4ce0442e9d20d092d9d74e9ce54b363a7151,c2_beaconing,mta_pikabot,Pikabot_2023-05-23.pcap,10.1.0.186:55413-104.238.35.63:8080-6-1684859846929,327.10714285714283,480.4951411698464,1514,54,240.2666666666667,412.9819205082308,1514,54,3604,90.66666666666669,275.0839032843504,1071,0,174.85714285714286,368.08775231810336,1071,0,31.250000000000004,49.21035552512389,148,0,72.5,0.0,0.0,0.0,0.0,633.1868335368335,634.5886613866921,1514.0,54.0,327.10714285714283,19,21,10.1.0.186,104.238.35.63,55413,8080,6,28,turiruy.us,t13d201200_2b729b4bf6f3_2e4f304f1f45,2253c82f03b621c5144709b393fde2c97160,benign,benign,ctu_normal14_win_full_2017.pcap,10.0.2.15:50494-131.253.61.100:443-6-1641798,383.3703703703703,574.697522323911,1514,54,224.8181818181818,434.44834403685286,1514,54,2473,29.038461538461537,62.67215060565946,255,0,75.50000000000001,87.11709871712263,260,0,42.6,75.358950553809,255,0,6.5,0.0,0.0,0.0,0.0,640.5070613542836,624.8129974086156,1514.0,54.0,383.3703703703703,20,22,10.0.2.15,131.253.61.100,50494,443,6,27,login.live.com,t12d1711h2_67e6df579eba_de5ccbe16bdd,4fd467dd264720762ffe286277c00f577170,benign,benign,ctu_normal21_kali_2017.pcap,192.168.1.191:47862-54.77.91.81:443-6-1493727017947,243.68181818181824,333.18954799299286,943,54,223.07692307692304,324.9093364664625,943,54,2900,396.76190476190476,1271.4938420913372,5796,0,694.3333333333334,1648.2764184186922,5796,1,1023.625,2004.3315193065528,5851,0,92.0,0.0,0.0,0.0,0.0,412.4670206336873,376.11827606714934,943.0,54.0,243.68181818181824,17,20,192.168.1.191,54.77.91.81,47862,443,6,22,r.skimresources.com,t12d1109h2_43e74fd21232_fed6c16fddd0,303951d4c50efb2e991652225a6f02b17180,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:51610-34.192.143.182:443-6-1668459892129,515.8461538461538,650.6154581309719,1514,54,142.16666666666669,210.13939817813,571,54,853,14.666666666666666,33.60284980699576,99,0,35.2,47.446812327067875,100,0,17.333333333333336,40.03831498285944,99,0,38.0,0.0,0.0,0.0,0.0,583.9061864061864,561.358133101148,1514.0,54.0,515.8461538461538,5,7,172.16.24.174,34.192.143.182,51610,443,6,13,fls-na.amazon.com,t13d1616h2_e72c3b3287f1_e5627efa2ab1,8d2a028aa94425f76ced7826b1f390397191,c2_beaconing,mta_qakbot,Qakbot_2022-09-29.pcap,10.9.29.201:50368-193.3.19.137:443-6-1664430718533,181.57142857142853,257.4648658416467,998,54,156.25,220.56461638259208,692,54,1875,6826.000000000001,24215.576363811353,105607,0,12410.90909090909,32216.513052950177,105607,0,17046.875,37318.29471083854,105607,1,136.0,0.0,0.0,0.0,0.0,378.1283068783069,379.5525936991866,998.0,54.0,181.57142857142853,14,16,10.9.29.201,193.3.19.137,50368,443,6,21,,t13i201000_2b729b4bf6f3_533b6d20482b,2253c82f03b621c5144709b393fde2c97200,benign,benign,ctu_normal14_win_full_2017.pcap,10.0.2.15:51024-131.253.61.96:443-6-2658440,342.1363636363637,549.5612358491563,1474,54,108.25000000000001,98.06958171187871,294,54,866,104.71428571428571,299.5610359938593,1384,0,298.0,490.3060268852505,1384,1,160.3846153846154,431.4758661581469,1585,0,113.0,0.0,0.0,0.0,0.0,481.1302308802309,548.9694089978362,1474.0,54.0,294.0,15,17,10.0.2.15,131.253.61.96,51024,443,6,22,login.live.com,t12d1711h2_67e6df579eba_de5ccbe16bdd,4fd467dd264720762ffe286277c00f577211,c2_beaconing,mta_gozi,Gozi_2023-07-12.pcap,10.7.12.121:50257-170.130.55.162:443-6-1689203975319,389.76190476190476,560.10507092526,1514,54,164.2222222222222,209.92187700295662,636,54,1478,547.4,2321.4906599447104,10402,0,1368.5000000000002,3652.938856005434,10402,0,991.6363636363637,3123.646947807235,10402,0,37.0,0.0,0.0,0.0,0.0,548.7667548500882,555.6380276457706,1514.0,54.0,389.76190476190476,12,14,10.7.12.121,170.130.55.162,50257,443,6,21,iamupdate.com,t12d190700_d83cc789557e_2dae41c691ec,4ce0442e9d20d092d9d74e9ce54b363a7220,benign,benign,ctu_normal21_kali_2017.pcap,192.168.1.191:53796-95.101.241.120:443-6-1493726993458,281.3333333333333,459.50688755463176,1514,54,88.78571428571428,59.59114360040756,256,54,1243,232.4347826086957,963.342374052065,4645,0,411.23076923076917,1273.4918632017345,4645,0,586.888888888889,1550.6253935464592,4710,0,64.0,0.0,0.0,0.0,0.0,486.55767195767197,569.5995517552312,1514.0,54.0,256.0,17,22,192.168.1.191,95.101.241.120,53796,443,6,24,ads.pubmatic.com,t12d1109h2_43e74fd21232_fed6c16fddd0,8d2a028aa94425f76ced7826b1f390397230,benign,benign,ctu_normal21_kali_2017.pcap,192.168.1.191:45448-172.217.23.238:443-6-1493727073443,111.75999999999999,107.29370904204963,583,66,126.5714285714286,138.0522277343527,583,66,1772,59.208333333333336,120.47874759968418,439,0,109.3076923076923,151.08297092182198,439,0,136.1,177.37559020338736,456,0,21.0,0.0,0.0,0.0,0.0,212.58227994227994,202.9755572572567,583.0,66.0,111.75999999999999,18,19,192.168.1.191,172.217.23.238,45448,443,6,25,www.google-analytics.com,t12d1110h2_43e74fd21232_205f67e4d9f4,2de81c22ea32a57162df5cb08d4a27957241,c2_beaconing,mta_icedid,IcedID_2022-10-31_1.pcap,172.16.0.153:57917-198.44.140.67:8008-6-1667231654330,254.8260869565217,395.57583483665854,1354,60,259.46153846153845,406.70046622885644,1354,60,3373,35.454545454545446,65.59088734088373,154,0,65.0,79.80544524597987,158,0,69.44444444444444,81.18206561659895,156,0,1.0,0.0,0.0,0.0,0.0,556.1208472686734,569.7438502064821,1354.0,60.0,254.8260869565217,14,15,172.16.0.153,198.44.140.67,57917,8008,6,23,clouditsoft.com,t12d190700_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b77251,c2_beaconing,mta_icedid,IcedID_2022-10-31_1.pcap,172.16.0.153:57782-198.44.140.67:8008-6-1667231112179,271.63636363636357,390.60728609186486,1354,60,258.3333333333333,398.22340311423034,1354,60,3100,36.33333333333333,65.57616436887213,153,0,55.63636363636364,76.4045453193365,153,0,67.77777777777777,79.19403035863527,152,0,2.0,0.0,0.0,0.0,0.0,562.1744107744107,566.6297607584588,1354.0,60.0,271.63636363636357,15,16,172.16.0.153,198.44.140.67,57782,8008,6,22,clouditsoft.com,t12d190700_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b77261,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:51369-194.165.16.90:443-6-1668459608804,466.32,610.5326035520134,1514,54,493.1666666666667,647.6681014971864,1514,54,5918,68.95833333333334,164.75237787204395,568,0,150.45454545454547,222.02763955704418,570,0,104.5,201.59522902002507,568,0,1.0,0.0,0.0,0.0,0.0,678.3361253561253,614.6092548983562,1514.0,54.0,466.32,14,16,172.16.24.174,194.165.16.90,51369,443,6,25,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b77271,c2_beaconing,mta_darkgate,DarkGate_2023-12-07.pcap,10.11.28.11:52122-172.67.216.253:443-6-1701961982618,891.3226837060702,656.3402712835975,1430,60,62.297674418604664,17.084308376321236,261,60,13394,1.8432000000000002,22.738149689058943,552,0,5.3831775700934585,43.684667083685696,631,0,2.721951219512193,28.064817677894474,552,0,1.0,0.0,0.0,0.0,0.0,619.9575472260722,602.1766477428366,1430.0,60.0,261.0,444,445,10.11.28.11,172.67.216.253,52122,443,6,626,cdn.boxmedrbopdrv.com,t12d2109h1_76e208dd3e22_7af1ed941c26,a885fb01204bc11cc58efc02fe6408997281,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:51481-194.165.16.90:443-6-1668459782337,450.4615384615385,603.0142439955614,1514,54,459.3846153846154,631.944425096271,1514,54,5972,53.08,130.4118220612431,442,0,110.58333333333333,173.92551087558527,443,0,92.33333333333334,172.77064846118097,442,0,20.0,0.0,0.0,0.0,0.0,672.8205128205128,616.4463618420267,1514.0,54.0,450.4615384615385,16,18,172.16.24.174,194.165.16.90,51481,443,6,26,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b77290,benign,benign,ctu_normal21_kali_2017.pcap,192.168.1.191:49486-54.194.99.187:443-6-1493726900876,89.85714285714286,57.87511184808693,291,54,89.18181818181819,70.04258444948785,291,54,981,356.65000000000003,1271.7041312225188,5747,0,713.3,1801.2063889392455,5827,0,775.7777777777777,1985.958318909147,6063,0,116.5,0.0,0.0,0.0,0.0,137.404329004329,93.32590217708102,291.0,54.0,89.85714285714286,14,17,192.168.1.191,54.194.99.187,49486,443,6,21,p.skimresources.com,t12d1109h2_43e74fd21232_fed6c16fddd0,303951d4c50efb2e991652225a6f02b17301,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:50845-194.165.16.90:443-6-1668458804990,422.1428571428571,581.95645212448,1514,54,430.4285714285715,616.7435215943265,1514,54,6026,57.29629629629629,151.49709690410035,613,0,119.00000000000001,204.47697506891413,613,0,102.23076923076923,204.53367850069495,613,0,4.0,0.0,0.0,0.0,0.0,663.3809523809524,619.9837354314599,1514.0,54.0,422.1428571428571,18,20,172.16.24.174,194.165.16.90,50845,443,6,28,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b77311,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:52278-213.91.235.146:443-6-1668464524628,1316.6580907244397,470.55931254538103,1514,54,61.6223776223776,65.29680925230922,772,54,8812,42.89024390243901,964.2629362981413,31053,0,445.81690140845075,3089.708610786861,31054,0,47.31882970742684,1014.6761275238506,31056,0,1.0,0.0,0.0,0.0,0.0,754.6082079605742,658.9191664618816,1514.0,54.0,772.0,422,424,172.16.24.174,213.91.235.146,52278,443,6,1477,,t12i190600_d83cc789557e_2dae41c691ec,fd4bc6cea4877646ccd62f0792ec0b627321,c2_beaconing,mta_bumblebee,BumbleBee_2022-06-14.pcap,10.6.14.101:49165-172.93.181.105:443-6-1655229949717,152.78947368421055,186.4437892494883,714,60,136.6,166.83937717990253,578,60,1366,23.666666666666664,36.40297337564935,87,0,38.55555555555556,44.51154656690529,94,0,43.0,40.70451010462038,87,0,11.0,0.0,0.0,0.0,0.0,294.01858349577645,270.31316934327367,714.0,60.0,152.78947368421055,13,14,10.6.14.101,172.93.181.105,49165,443,6,19,hocavopeh.com,t12d190700_d83cc789557e_2dae41c691ec,ae4edc6faf64d08308082ad26be607677330,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_0.pcap,172.16.24.174:49975-13.107.5.88:443-6-1668456186839,322.12499999999994,484.716350268269,1514,54,165.27272727272728,183.19502772132813,574,54,1818,10.521739130434783,19.635009468751083,62,0,24.2,24.47129838084699,62,0,16.25,22.9431114637131,63,0,8.0,0.0,0.0,0.0,0.0,522.9159867909868,557.7345496141293,1514.0,54.0,322.12499999999994,18,20,172.16.24.174,13.107.5.88,49975,443,6,24,evoke-windowsservices-tas.msedge.net,t12d1908h2_d83cc789557e_2dae41c691ec,fbe594b39bb5d9c53aa4f6caf8d2950c7340,benign,benign,ctu_normal14_win_full_2017.pcap,10.0.2.15:51234-207.46.194.10:443-6-2741132,316.2352941176471,511.99542593315283,1474,54,111.71428571428572,98.22714201569455,296,54,782,595.375,2202.9330713089457,8852,0,1576.6666666666665,3566.079901890403,8852,6,1052.5555555555557,3034.4281632257794,9144,0,53.0,0.0,0.0,0.0,0.0,477.0388422035481,549.4598044281728,1474.0,54.0,296.0,11,13,10.0.2.15,207.46.194.10,51234,443,6,17,c1.microsoft.com,t12d1711h2_67e6df579eba_de5ccbe16bdd,96c9f2048f1e949c8bb9ad97c36c9eea7350,benign,benign,ctu_normal14_win_full_2017.pcap,10.0.2.15:50639-104.16.99.29:443-6-1950963,107.93333333333331,135.09650871383266,571,54,126.5,180.46922966850295,571,54,1012,637.7857142857142,2204.7428658225895,8292,0,1275.5714285714284,3096.271782705929,8292,0,1484.8333333333333,3466.601702916945,8559,6,23.5,0.0,0.0,0.0,0.0,203.905291005291,201.63358199461481,571.0,54.0,107.93333333333331,7,9,10.0.2.15,104.16.99.29,50639,443,6,15,cfl.dropboxstatic.com,t12d1712h2_67e6df579eba_88be6878e1da,67619a80665d7ab92d1041b1d11f91647361,exfil,mta_lumma,Lumma_2025-08-15.pcap,10.8.15.176:62830-5.10.250.239:443-6-1755287684621,60.0,4.898979485566356,66,54,61.5,3.0,66,60,246,75.33333333333333,82.18921259305668,154,0,100.66666666666666,87.23149278404752,154,0,152.5,3.5355339059327378,155,150,148.5,0.0,0.0,0.0,0.0,60.611111111111114,4.507880616689065,66.0,54.0,60.0,0,1,10.8.15.176,5.10.250.239,62830,443,6,7,,,7371,c2_beaconing,mta_icedid,IcedID_2022-01-12.pcap,10.22.5.47:50274-104.168.44.45:443-6-1642007691945,211.24999999999994,357.7702695717933,1279,60,198.66666666666669,358.34425635219276,1279,60,2384,124.5263157894737,234.6082712430926,677,0,215.0909090909091,279.0743465621498,677,0,257.7142857142857,291.37016221392923,677,0,109.0,0.0,0.0,0.0,0.0,504.6712962962963,525.1658433105772,1279.0,60.0,211.24999999999994,12,13,10.22.5.47,104.168.44.45,50274,443,6,20,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b77381,c2_beaconing,mta_gozi,Gozi_2023-07-12.pcap,10.7.12.121:50208-170.130.55.162:443-6-1689203725641,359.6521739130435,558.2583801183213,1514,54,153.2,200.96201962891726,636,54,1532,495.95454545454544,2228.865085478273,10470,0,1212.3333333333333,3473.271980424223,10470,0,906.9166666666667,3013.081100750023,10470,0,14.5,0.0,0.0,0.0,0.0,539.7015235971758,557.5500657047428,1514.0,54.0,359.6521739130435,14,16,10.7.12.121,170.130.55.162,50208,443,6,23,iamupdate.com,t12d190700_d83cc789557e_2dae41c691ec,4ce0442e9d20d092d9d74e9ce54b363a7390,benign,benign,ctu_normal14_win_full_2017.pcap,10.0.2.15:49271-216.58.201.74:443-6-347240,319.27777777777777,492.2926921773691,1474,54,107.66666666666667,103.77620151075101,312,54,969,619.4117647058823,2430.063863842459,10047,0,1316.2499999999998,3529.0216673423,10047,0,1312.75,3621.365675700654,10275,0,32.0,0.0,0.0,0.0,0.0,486.64814814814815,549.2803010379743,1474.0,54.0,312.0,9,11,10.0.2.15,216.58.201.74,49271,443,6,18,ajax.googleapis.com,t12d1711h2_67e6df579eba_de5ccbe16bdd,f09be93fa9d03eabf66fdd359154a3fa7401,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:51999-194.165.16.90:443-6-1668460440784,466.32,610.5326035520134,1514,54,493.1666666666667,647.6681014971864,1514,54,5918,67.24999999999997,171.36136493184324,596,0,146.72727272727272,234.50760794016512,598,0,116.58333333333334,228.55413455950085,596,0,1.0,0.0,0.0,0.0,0.0,678.3361253561253,614.6092548983562,1514.0,54.0,466.32,14,16,172.16.24.174,194.165.16.90,51999,443,6,25,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b77411,c2_beaconing,mta_icedid,IcedID_2022-01-12.pcap,10.22.5.47:50011-104.168.44.45:443-6-1642006902291,219.21052631578942,365.7496987083696,1279,60,211.27272727272728,373.0335349292583,1279,60,2324,69.77777777777779,114.3398214588506,265,0,125.60000000000001,131.50851260997857,267,0,144.57142857142858,134.21109882427402,267,0,3.0,0.0,0.0,0.0,0.0,506.95647262094633,523.8724558061662,1279.0,60.0,219.21052631578942,12,13,10.22.5.47,104.168.44.45,50011,443,6,19,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b77421,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:51912-194.165.16.90:443-6-1668460306859,466.32,610.5326035520134,1514,54,493.1666666666667,647.6681014971864,1514,54,5918,62.45833333333332,155.66323158237034,561,0,136.27272727272728,211.45405690555617,561,0,106.91666666666666,206.06947563353188,561,0,1.0,0.0,0.0,0.0,0.0,678.3361253561253,614.6092548983562,1514.0,54.0,466.32,14,16,172.16.24.174,194.165.16.90,51912,443,6,25,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b77430,benign,benign,ctu_normal14_win_full_2017.pcap,10.0.2.15:49853-94.31.6.171:443-6-1073157,112.41176470588235,134.5961825347999,571,54,126.5,180.46922966850295,571,54,1012,875.5000000000002,2451.4841763035442,8771,0,2001.0,3521.577629415544,8771,0,1744.5,3339.812997331266,8772,0,12.0,0.0,0.0,0.0,0.0,215.31118373275237,202.55075972982291,571.0,54.0,112.41176470588235,8,10,10.0.2.15,94.31.6.171,49853,443,6,17,p.adsymptotic.com,t12d1712h2_67e6df579eba_88be6878e1da,364ff14b04ef93c3b4cfa429d729c0d97440,c2_beaconing,mta_icedid,IcedID_2022-01-12.pcap,10.22.5.47:50549-204.237.133.123:443-6-1642008064682,190.75,253.51577860164838,571,60,232.33333333333334,293.3092793167876,571,60,697,27.333333333333336,46.47938611183815,81,0,41.0,56.568542494923804,81,1,0.0,0.0,0,0,41.0,0.0,0.0,0.0,0.0,209.2314814814815,202.40608925056193,571.0,60.0,66.0,1,2,10.22.5.47,204.237.133.123,50549,443,6,4,image8.pubmatic.com,t13d1516h2_8daaf6152771_e5627efa2ab1,7451,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:52084-194.165.16.90:443-6-1668460573444,466.32,610.5326035520134,1514,54,493.1666666666667,647.6681014971864,1514,54,5918,77.87499999999999,196.9999586184022,712,0,169.90909090909088,268.5216767955446,712,0,137.33333333333331,263.36850551455404,712,0,1.0,0.0,0.0,0.0,0.0,678.3361253561253,614.6092548983562,1514.0,54.0,466.32,14,16,172.16.24.174,194.165.16.90,52084,443,6,25,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b77460,exfil,mta_lumma,Lumma_2025-02-13.pcap,10.2.14.101:64171-104.21.39.249:443-6-1739488902892,339.6818181818181,508.37634975184767,1514,54,205.2,241.21995495121595,731,54,2052,40.14285714285713,122.31364834485387,545,0,93.66666666666666,178.59941209309733,546,0,71.54545454545455,165.41182765229553,545,0,29.5,0.0,0.0,0.0,0.0,546.4035353535353,557.9783377995288,1514.0,54.0,339.6818181818181,14,16,10.2.14.101,104.21.39.249,64171,443,6,22,dfreamwave.cyou,t13d201200_2b729b4bf6f3_e24568c0d440,907bf3ecef1c987c889946b737b43de87470,exfil,mta_stealc,StealC_2025-06-18.pcap,172.16.1.128:57376-40.119.249.228:443-6-1750264217893,265.103448275862,445.31035283813867,1514,54,192.15384615384613,352.15546901755533,1341,54,2498,133.92857142857142,345.1822844872105,1530,0,312.5,483.9150000493137,1530,0,231.93333333333334,452.2438448869097,1530,0,157.5,0.0,0.0,0.0,0.0,590.2924771588564,620.7375722290573,1514.0,54.0,265.103448275862,21,23,172.16.1.128,40.119.249.228,57376,443,6,29,settings-win.data.microsoft.com,t12d1809h2_4b22cbed5bed_7af1ed941c26,2fe9b0e731d3d41b2b84e8e1d61868367480,benign,benign,ctu_normal14_win_full_2017.pcap,10.0.2.15:49172-216.58.201.110:443-6-122690,56.28571428571429,4.535573676110729,66,54,57.0,6.0,66,54,228,1883.5,4016.4489664378907,10029,1,3766.666666666667,5477.4674196505575,10060,74,5641.0,6283.350857623661,10084,1198,43.0,0.0,0.0,0.0,0.0,57.84656084656085,4.556289846124098,66.0,54.0,56.28571428571429,0,2,10.0.2.15,216.58.201.110,49172,443,6,7,,,7490,benign,benign,ctu_normal21_kali_2017.pcap,192.168.1.191:38706-104.152.141.96:443-6-1493726784581,123.94736842105266,129.95233044133724,583,54,123.90909090909092,156.6202123261583,583,54,1363,298.2222222222223,1102.0377678782454,4707,0,536.8,1525.2687049245528,4874,0,743.8571428571429,1815.7464423363585,4857,0,130.0,0.0,0.0,0.0,0.0,222.98405103668262,204.28368885717413,583.0,54.0,123.94736842105266,11,16,192.168.1.191,104.152.141.96,38706,443,6,19,t.visto1.net,t12d1110h2_43e74fd21232_205f67e4d9f4,eeb544d2926258e376d8da5dc1ab116e7500,benign,benign,ctu_normal20_win_2017_https.pcap,10.0.2.15:49689-172.217.21.202:443-6-2595328,436.2688172043012,603.1450568151431,1474,54,80.88888888888889,54.184751559708204,259,54,2912,2261.0,11653.636516810282,67448,0,5943.200000000001,18465.296171307884,67450,1,3714.178571428572,14849.592080234077,67451,0,2.0,0.0,0.0,0.0,0.0,505.20855603764494,553.5223892332044,1474.0,54.0,259.0,74,76,10.0.2.15,172.217.21.202,49689,443,6,93,ajax.googleapis.com,t12d1509h2_073e58a039a6_e70312a1ce2c,ab41313cfec25328b20865eb1388e0a27511,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:50532-194.165.16.90:443-6-1668458347170,409.44827586206895,572.4708093747723,1514,54,430.42857142857144,616.7435215943265,1514,54,6026,52.107142857142854,137.0729298411546,492,0,112.23076923076921,187.41493797016014,493,0,89.64285714285714,181.70373483433755,492,0,2.0,0.0,0.0,0.0,0.0,659.3048348841452,621.6557528775471,1514.0,54.0,409.44827586206895,18,20,172.16.24.174,194.165.16.90,50532,443,6,29,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b77521,c2_beaconing,mta_icedid,IcedID_2023-10-31.pcap,10.10.31.101:56135-159.89.124.188:443-6-1698796062113,69.39175257731958,24.514263153073646,303,60,69.49180327868854,30.881290425768412,303,60,4239,16905.000000000007,27047.409906155135,59967,0,27047.999999999993,30011.193633743293,59967,0,46364.771428571425,25531.52597117545,60489,0,68.0,0.0,0.0,0.0,0.0,118.3450864531367,98.79552773821686,303.0,60.0,69.39175257731958,64,68,10.10.31.101,159.89.124.188,56135,443,6,97,,,7530,benign,benign,ctu_normal14_win_full_2017.pcap,10.0.2.15:51937-52.6.109.206:443-6-3380848,298.7777777777778,494.65437298981664,1474,54,128.27272727272725,147.60222959636545,520,54,1411,207.23076923076925,800.5942446804028,4117,0,538.8,1260.4727331882714,4117,0,350.1333333333333,1112.9096271015171,4361,0,81.0,0.0,0.0,0.0,0.0,497.00561167227835,545.7051351490301,1474.0,54.0,298.7777777777778,18,20,10.0.2.15,52.6.109.206,51937,443,6,27,content.api.nytimes.com,t12d1710h2_67e6df579eba_4a7a952b215a,303951d4c50efb2e991652225a6f02b17541,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:52464-72.163.4.185:443-6-1668470344730,420.00000000000006,592.7628442081067,1514,54,209.11111111111111,356.66070867297833,1145,54,1882,4.473684210526316,8.18106500166106,22,0,10.625,10.377688980280174,22,0,6.300000000000001,8.844960900610772,21,0,10.5,0.0,0.0,0.0,0.0,617.4062850729517,581.6344675772038,1514.0,54.0,420.00000000000006,13,15,172.16.24.174,72.163.4.185,52464,443,6,20,cisco.com,t12d190700_d83cc789557e_2dae41c691ec,70745099b394fe3f42264227c098cc987551,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:50841-194.165.16.90:443-6-1668458799100,435.77777777777777,589.6705294767014,1514,54,459.3846153846154,631.944425096271,1514,54,5972,57.57692307692308,151.77856846786324,610,0,124.75,208.60712312426395,612,0,97.92307692307692,201.6000419719126,610,0,1.0,0.0,0.0,0.0,0.0,668.1132817799485,618.2566902665315,1514.0,54.0,435.77777777777777,16,18,172.16.24.174,194.165.16.90,50841,443,6,27,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b77560,c2_beaconing,mta_pikabot,Pikabot_2023-10-03.pcap,10.1.2.147:49611-52.165.165.26:443-6-1696349968498,207.26086956521732,345.6027958366635,1430,60,103.07692307692307,68.11933345052334,265,60,1340,17.5,23.971709516487493,59,0,32.08333333333333,35.25351905924579,107,0,36.666666666666664,32.20636583037583,85,0,26.5,0.0,0.0,0.0,0.0,439.78197696023784,537.6054444160947,1430.0,60.0,207.26086956521732,16,17,10.1.2.147,52.165.165.26,49611,443,6,23,slscr.update.microsoft.com,t12d1909h2_d83cc789557e_7af1ed941c26,87b9bed0515be16c82bdc44d88a4a0ec7571,c2_beaconing,mta_icedid,IcedID_2022-01-12.pcap,10.22.5.47:50172-104.168.44.45:443-6-1642007463141,219.21052631578942,365.7496987083696,1279,60,211.27272727272728,373.0335349292583,1279,60,2324,59.00000000000001,96.63880599184478,217,0,106.2,110.92920665401375,218,0,121.85714285714286,113.13771633342641,221,0,2.5,0.0,0.0,0.0,0.0,506.95647262094633,523.8724558061662,1279.0,60.0,219.21052631578942,12,13,10.22.5.47,104.168.44.45,50172,443,6,19,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b77580,exfil,mta_koistealer,KoiStealer_2024-06-12.pcap,10.6.12.101:49675-23.198.7.171:443-6-1718218058448,249.25714285714292,410.2823520496115,1514,54,107.82352941176471,95.77397564978028,351,54,1833,3245.4411764705887,18792.68715152846,109601,0,6896.5625,27388.032914562642,109601,0,6488.470588235294,26571.93004637988,109602,0,22.0,0.0,0.0,0.0,0.0,475.6571117335823,567.6863576920138,1514.0,54.0,249.25714285714292,29,31,10.6.12.101,23.198.7.171,49675,443,6,35,www.bing.com,t13d2012h2_2b729b4bf6f3_9e7b989ebec8,15af977ce25de452b96affa2addb10367591,exfil,mta_lumma,Lumma_2025-08-15.pcap,10.8.15.176:62605-185.95.159.55:443-6-1755275981649,530.0999999999999,609.7382338291601,1430,54,129.69230769230768,137.63017148345088,502,60,1686,2106.586206896552,11219.046733496318,60439,0,5090.916666666666,17430.345057129707,60439,0,3814.3125,15132.076666114492,60559,0,6.0,0.0,0.0,0.0,0.0,558.4540472599297,531.4144281251967,1430.0,54.0,502.0,14,15,10.8.15.176,185.95.159.55,62605,443,6,30,vishneviyjazz.ru,t13d201200_2b729b4bf6f3_e24568c0d440,15af977ce25de452b96affa2addb10367601,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:50187-23.64.146.226:443-6-1668457813974,838.530303030303,673.8281501916317,1514,54,107.95238095238096,182.08637406200285,878,54,2267,1695.4153846153847,13580.664244032198,109501,0,5510.1,24477.076923650744,109501,0,2503.7045454545455,16505.689896432326,109501,0,2.0,0.0,0.0,0.0,0.0,688.2165945165946,596.9527875170131,1514.0,54.0,838.530303030303,45,47,172.16.24.174,23.64.146.226,50187,443,6,66,www.cisco.com,t12d190700_d83cc789557e_2dae41c691ec,d227a8dd2bb7d7ee4f648c1af087578a7610,benign,benign,ctu_normal21_kali_2017.pcap,192.168.1.191:57486-23.227.38.32:443-6-1493726792390,545.3425925925928,629.161007312268,1514,66,345.8135593220339,507.6208357784609,1490,66,20403,343.1121495327102,1652.7909005342242,10011,0,631.2758620689657,2223.1821731915297,10011,0,762.3125,2438.7108571839362,10116,0,83.0,0.0,0.0,0.0,0.0,710.3053320721467,606.5290239569625,1514.0,66.0,545.3425925925928,95,96,192.168.1.191,23.227.38.32,57486,443,6,108,shop.thefader.com,t12d1110h2_43e74fd21232_205f67e4d9f4,8d2a028aa94425f76ced7826b1f390397621,c2_beaconing,mta_icedid,IcedID_2022-01-12.pcap,10.22.5.47:50203-104.168.44.45:443-6-1642007533732,211.25,357.77026957179334,1279,60,198.66666666666669,358.34425635219276,1279,60,2384,577.4736842105262,2256.221530898779,9886,0,997.4545454545455,2949.9569272664426,9886,0,1534.857142857143,3776.6275709320093,10096,0,209.0,0.0,0.0,0.0,0.0,504.6712962962963,525.1658433105772,1279.0,60.0,211.25,13,14,10.22.5.47,104.168.44.45,50203,443,6,20,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b77630,benign,benign,ctu_normal20_win_2017_https.pcap,10.0.2.15:49171-54.192.44.177:443-6-190734,269.3684210526316,450.511956990947,1474,54,96.00000000000001,74.82145414251183,263,54,864,311.2777777777778,1146.3294776118382,4893,0,700.3749999999999,1698.9277238053082,4893,0,619.7777777777778,1687.7664069546013,5114,0,22.0,0.0,0.0,0.0,0.0,462.6409356725146,553.7427991025085,1474.0,54.0,263.0,11,13,10.0.2.15,54.192.44.177,49171,443,6,19,tiles-cloudfront.cdn.mozilla.net,t12d1509h2_073e58a039a6_e70312a1ce2c,76cc3e2d3028143b23ec18e27dbd7ca97640,benign,benign,ctu_normal21_kali_2017.pcap,192.168.1.191:36056-8.27.13.61:443-6-1493726609029,740.3766233766233,708.9285473415616,1514,66,85.05555555555556,86.10058717053624,551,66,3062,116.15789473684212,457.59874861809027,3131,0,251.42857142857144,675.2578281321746,3131,0,202.00000000000003,634.9906520612159,3157,0,26.0,0.0,0.0,0.0,0.0,657.5791851930063,605.1664436674146,1514.0,66.0,551.0,64,65,192.168.1.191,8.27.13.61,36056,443,6,77,cdn1.lockerdome.com,t12d1109h2_43e74fd21232_fed6c16fddd0,5ed80f12dd0750689988b84fe414bc3a7651,c2_beaconing,mta_pikabot,Pikabot_2023-10-03.pcap,10.1.2.147:49586-179.60.149.244:443-6-1696349915265,425.30303030303037,588.3869095272518,1450,60,335.05555555555554,529.120187861524,1450,60,6031,13.15625,27.388612391095638,75,0,24.764705882352946,40.19255125605475,119,0,25.071428571428573,34.73518341729272,76,0,3.0,0.0,0.0,0.0,0.0,644.8842873176206,586.4859718537542,1450.0,60.0,425.30303030303037,15,16,10.1.2.147,179.60.149.244,49586,443,6,33,zzerxc.com,t12d190700_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b77661,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:51736-194.165.16.90:443-6-1668460026915,466.32,610.5326035520134,1514,54,493.1666666666667,647.6681014971864,1514,54,5918,70.08333333333331,173.1432974425385,634,0,152.81818181818184,234.89734701857242,635,0,121.33333333333334,229.55503730372624,634,0,114.0,0.0,0.0,0.0,0.0,678.3361253561253,614.6092548983562,1514.0,54.0,466.32,14,16,172.16.24.174,194.165.16.90,51736,443,6,25,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b77670,benign,benign,ctu_normal21_kali_2017.pcap,192.168.1.191:50146-52.16.29.94:443-6-1493727051221,112.44444444444444,78.91151866348649,291,66,125.83333333333334,94.95770988533089,291,66,755,70.875,113.56488076362844,346,0,113.4,133.64804525319477,346,19,252.0,195.16147160748713,390,114,49.0,0.0,0.0,0.0,0.0,135.6604938271605,85.8303445260305,291.0,66.0,112.44444444444444,5,6,192.168.1.191,52.16.29.94,50146,443,6,9,x.skimresources.com,t12d1109h2_43e74fd21232_fed6c16fddd0,7680,benign,benign,ctu_normal20_win_2017_https.pcap,10.0.2.15:49911-194.226.130.228:443-6-2830931,205.34482758620695,347.0971741110291,1474,54,123.57142857142856,142.67106562661178,475,54,1730,1717.7499999999998,3575.727490082729,10105,0,3699.6153846153848,4566.741590719827,10106,2,3430.714285714286,4556.686775896098,10122,0,15.0,0.0,0.0,0.0,0.0,466.1758803138114,553.8369139025085,1474.0,54.0,205.34482758620695,23,25,10.0.2.15,194.226.130.228,49911,443,6,29,www.tns-counter.ru,t12d1509h2_073e58a039a6_e70312a1ce2c,c67e8b533a9001ce4e36883b8d3489c47691,c2_beaconing,mta_icedid,IcedID_2023-09-28.pcap,10.10.20.147:51003-141.98.80.158:443-6-1695923329468,445.87500000000006,617.6922581726693,1514,54,395.53333333333325,601.9321113436852,1514,54,5933,32.903225806451616,92.74997029243357,370,0,72.85714285714286,129.59276875769618,370,0,52.937500000000014,120.32149641689136,370,0,1.0,0.0,0.0,0.0,0.0,670.633605664488,617.6326270331757,1514.0,54.0,445.87500000000006,18,20,10.10.20.147,141.98.80.158,51003,443,6,32,umomrmwa.com,t12d190800_d83cc789557e_7af1ed941c26,f176ba63b4d68e576b5ba345bec2c7b77701,c2_beaconing,mta_qakbot,Qakbot_2022-06-27_0.pcap,10.6.27.101:63758-45.46.53.140:2222-6-1656353276704,173.1052631578947,224.27312087840133,936,54,142.9,153.67241493225487,464,54,1429,979.1666666666666,3817.1501110891927,16266,0,1958.3333333333333,5367.079093883376,16266,5,2165.625,5699.396056663749,16267,5,104.0,0.0,0.0,0.0,0.0,335.63021442495125,342.45911122183236,936.0,54.0,173.1052631578947,14,16,10.6.27.101,45.46.53.140,63758,2222,6,19,,t12i190600_d83cc789557e_2dae41c691ec,7c02dbae662670040c7af9bd15fb7e2f7711,c2_beaconing,mta_icedid,IcedID_2022-01-12.pcap,10.22.5.47:50198-104.168.44.45:443-6-1642007512722,219.21052631578942,365.7496987083696,1279,60,211.27272727272728,373.0335349292583,1279,60,2324,61.83333333333332,100.58549187865309,232,0,111.3,116.30424660251137,233,0,125.85714285714286,114.52427482332959,229,0,6.0,0.0,0.0,0.0,0.0,506.95647262094633,523.8724558061662,1279.0,60.0,219.21052631578942,12,13,10.22.5.47,104.168.44.45,50198,443,6,19,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b77720,benign,benign,ctu_normal14_win_full_2017.pcap,10.0.2.15:52174-54.231.120.26:443-6-3414212,487.1282051282051,616.5701044141047,1474,54,129.61538461538464,180.04977944147302,689,54,1685,54.84210526315788,171.78860773287454,1030,0,173.66666666666666,283.24718833021046,1030,1,77.67999999999999,251.71126315681624,1263,0,10.0,0.0,0.0,0.0,0.0,564.6253561253561,543.3539078056637,1474.0,54.0,487.1282051282051,28,30,10.0.2.15,54.231.120.26,52174,443,6,39,s3.amazonaws.com,t12d1711h2_67e6df579eba_de5ccbe16bdd,ea615e28cb25adfb2f261151eab3314f7730,benign,benign,ctu_normal20_win_2017_https.pcap,10.0.2.15:51246-46.137.164.212:443-6-5573296,399.5454545454545,535.8357894597871,1474,54,162.56521739130437,210.46675964863442,689,54,3739,1340.277777777778,3213.646323877062,10103,0,3289.772727272727,4422.970698866352,10104,3,2332.7741935483873,4015.8126758243875,10104,0,47.0,0.0,0.0,0.0,0.0,547.8872968818621,541.3992288524033,1474.0,54.0,399.5454545454545,44,46,10.0.2.15,46.137.164.212,51246,443,6,55,a.centrum.cz,t12d1509h2_073e58a039a6_e70312a1ce2c,303951d4c50efb2e991652225a6f02b17740,benign,benign,ctu_normal21_kali_2017.pcap,192.168.1.191:38566-192.229.233.180:443-6-1493726715679,441.573170731707,570.7554022064504,1514,54,129.39024390243907,171.45289120466597,824,54,5305,1537.6790123456792,3543.757140476617,10019,0,3113.8,4569.624313795474,10144,0,3112.4,4576.7102438771735,10137,0,34.0,0.0,0.0,0.0,0.0,594.5243902439024,564.928677856632,1514.0,54.0,441.573170731707,48,53,192.168.1.191,192.229.233.180,38566,443,6,82,static.licdn.com,t12d1110h2_43e74fd21232_205f67e4d9f4,76cc3e2d3028143b23ec18e27dbd7ca97751,c2_beaconing,mta_gozi,Gozi_2023-07-12.pcap,10.7.12.121:50127-170.130.55.162:443-6-1689203324590,328.46153846153845,506.81809208190117,1514,54,130.3076923076923,179.39267200538256,636,54,1694,434.20000000000005,2083.785397619758,10432,0,904.5833333333333,3001.604796781316,10432,0,901.3333333333334,3002.646963577102,10432,0,14.5,0.0,0.0,0.0,0.0,534.5982905982906,560.5224595996882,1514.0,54.0,328.46153846153845,17,19,10.7.12.121,170.130.55.162,50127,443,6,26,iamupdate.com,t12d190700_d83cc789557e_2dae41c691ec,4ce0442e9d20d092d9d74e9ce54b363a7761,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:50918-194.165.16.90:443-6-1668458917352,450.4615384615385,603.0142439955614,1514,54,459.3846153846154,631.944425096271,1514,54,5972,60.63999999999999,153.78959652720334,577,0,126.33333333333333,207.04691314391587,578,0,105.58333333333334,205.33496285264468,577,0,1.0,0.0,0.0,0.0,0.0,672.8205128205128,616.4463618420267,1514.0,54.0,450.4615384615385,16,18,172.16.24.174,194.165.16.90,50918,443,6,26,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b77771,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:50150-194.165.16.90:443-6-1668457761569,466.32,610.5326035520134,1514,54,493.1666666666667,647.6681014971864,1514,54,5918,66.16666666666667,166.36723827429034,617,0,144.27272727272725,227.03924370429485,618,0,110.41666666666666,218.79856170930512,617,0,1.0,0.0,0.0,0.0,0.0,678.3361253561253,614.6092548983562,1514.0,54.0,466.32,14,16,172.16.24.174,194.165.16.90,50150,443,6,25,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b77781,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:52078-194.165.16.90:443-6-1668460563428,466.32,610.5326035520134,1514,54,493.1666666666667,647.6681014971864,1514,54,5918,72.83333333333334,181.55839081508273,611,0,158.9090909090909,246.88720280543282,611,0,127.83333333333331,241.88345553304396,611,0,1.0,0.0,0.0,0.0,0.0,678.3361253561253,614.6092548983562,1514.0,54.0,466.32,14,16,172.16.24.174,194.165.16.90,52078,443,6,25,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b77790,benign,benign,ctu_normal14_win_full_2017.pcap,10.0.2.15:50794-23.7.200.98:443-6-2257389,278.7894736842105,462.6074144272236,1474,54,93.33333333333333,78.06407624509497,270,54,840,153.1666666666667,561.3769049504662,2393,0,344.625,831.7710772802815,2393,0,303.1111111111111,867.4176393820403,2616,0,18.5,0.0,0.0,0.0,0.0,466.42475633528267,553.1841859078102,1474.0,54.0,270.0,11,13,10.0.2.15,23.7.200.98,50794,443,6,19,secure.skypeassets.com,t12d1711h2_67e6df579eba_de5ccbe16bdd,2b33c1374db4ddf06942f92373c0b54b7801,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:50060-194.165.16.90:443-6-1668457628021,466.32,610.5326035520134,1514,54,493.1666666666667,647.6681014971864,1514,54,5918,66.91666666666664,165.5509685516995,612,0,146.00000000000003,224.94888308235718,613,0,114.41666666666666,218.76739757656816,612,0,1.0,0.0,0.0,0.0,0.0,678.3361253561253,614.6092548983562,1514.0,54.0,466.32,14,16,172.16.24.174,194.165.16.90,50060,443,6,25,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b77811,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:50348-194.165.16.90:443-6-1668458055167,466.32,610.5326035520134,1514,54,493.1666666666667,647.6681014971864,1514,54,5918,67.41666666666667,167.06336123359503,632,0,147.00000000000003,226.93831761075518,633,0,116.83333333333334,221.67906094308063,632,0,108.5,0.0,0.0,0.0,0.0,678.3361253561253,614.6092548983562,1514.0,54.0,466.32,14,16,172.16.24.174,194.165.16.90,50348,443,6,25,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b77821,c2_beaconing,mta_pikabot,Pikabot_2023-10-03.pcap,10.1.2.147:49619-167.86.96.3:2222-6-1696350269441,223.45833333333334,338.7919688959668,1430,60,138.28571428571428,194.42634696872847,744,60,1936,5198.826086956522,17621.78820162485,74991,0,9197.923076923076,23010.484684383693,74991,0,13267.77777777778,27116.086068871453,74991,0,162.0,0.0,0.0,0.0,0.0,498.7160052910053,537.7088193964854,1430.0,60.0,223.45833333333334,15,16,10.1.2.147,167.86.96.3,49619,2222,6,24,,t12i190600_d83cc789557e_2dae41c691ec,ec74a5c51106f0419184d0dd08fb05bc7831,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:52046-194.165.16.90:443-6-1668460516613,466.32,610.5326035520134,1514,54,493.1666666666667,647.6681014971864,1514,54,5918,69.33333333333334,171.83957803634803,628,0,151.27272727272728,233.34527675060875,629,0,120.83333333333336,228.33979199005287,628,0,1.0,0.0,0.0,0.0,0.0,678.3361253561253,614.6092548983562,1514.0,54.0,466.32,14,16,172.16.24.174,194.165.16.90,52046,443,6,25,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b77841,c2_beaconing,mta_icedid,IcedID_2023-05-10.pcap,172.16.10.73:50458-77.105.141.154:443-6-1683740232235,397.6333333333333,569.1152530589633,1514,54,400.0666666666666,599.1907002266435,1514,54,6001,39.172413793103445,91.56109161394343,329,0,81.07142857142856,120.83457495888544,331,0,60.21428571428573,104.86414549782499,329,0,1.0,0.0,0.0,0.0,0.0,654.2111111111111,621.8774481309217,1514.0,54.0,397.6333333333333,18,20,172.16.10.73,77.105.141.154,50458,443,6,30,floatfil.com,t13d201200_2b729b4bf6f3_2e4f304f1f45,2253c82f03b621c5144709b393fde2c97850,benign,benign,ctu_normal20_win_2017_https.pcap,10.0.2.15:64899-54.247.160.208:443-6-9527018,129.6060606060606,176.14659012345714,740,54,117.75,129.87609479808052,419,54,1884,1954.1249999999995,3931.656867760265,10074,0,4168.8,4934.628299795523,10075,76,3905.3124999999995,4928.729961071784,10163,18,54.0,0.0,0.0,0.0,0.0,272.12452960982375,271.5225915155039,740.0,54.0,129.6060606060606,27,29,10.0.2.15,54.247.160.208,64899,443,6,33,d.adroll.com,t12d1509h2_073e58a039a6_e70312a1ce2c,303951d4c50efb2e991652225a6f02b17860,benign,benign,ctu_normal20_win_2017_https.pcap,10.0.2.15:52460-31.13.93.36:443-6-8297597,441.24129141886243,530.1112621255509,1514,54,306.4977678571426,396.1487416342025,1514,54,137311,1529.1003401360529,8304.173429099472,64970,0,4022.8635346756173,13107.221755391667,65546,0,2470.0549450549456,10463.549879307533,64972,0,4.0,0.0,0.0,0.0,0.0,659.5317442786477,615.9217612330181,1514.0,54.0,441.24129141886243,1074,1076,10.0.2.15,31.13.93.36,52460,443,6,1177,www.facebook.com,t12d1510h2_073e58a039a6_60bf0a45ed8c,96681175a9547081bf3d417f1a5720917871,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:50362-194.165.16.90:443-6-1668458078245,466.32,610.5326035520134,1514,54,493.1666666666667,647.6681014971864,1514,54,5918,72.25,180.21780300996662,612,0,157.63636363636363,245.60263546113376,614,0,127.00000000000001,240.1968889360257,612,0,1.0,0.0,0.0,0.0,0.0,678.3361253561253,614.6092548983562,1514.0,54.0,466.32,14,16,172.16.24.174,194.165.16.90,50362,443,6,25,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b77880,benign,benign,ctu_normal7_general_2013.pcap,10.0.0.46:43868-199.16.156.198:443-6-1387315554608,122.61538461538464,120.95766371030986,484,66,139.28571428571428,155.3283771945898,484,66,975,2571.916666666667,8564.518396037258,29764,0,5143.833333333333,12183.13124638599,30010,1,6035.2,13265.198856406187,29764,0,173.0,0.0,0.0,0.0,0.0,197.8964183964184,162.16982598238005,484.0,66.0,122.61538461538464,8,9,10.0.0.46,199.16.156.198,43868,443,6,13,twitter.com,t12d1810s2_27d4652c4487_736b2a1ed4d3,91e914bce4ef89cc2b5fdad958d585f77891,c2_beaconing,mta_pikabot,Pikabot_2023-11-02.pcap,10.11.2.101:52987-158.247.202.180:13783-6-1698959006139,232.66666666666669,354.9201788195951,1430,60,145.0909090909091,207.01326264056343,751,60,1596,5516.9,17852.2929498824,74957,0,11006.1,24616.361561864593,74957,0,12234.0,25823.71532138627,74957,0,291.0,0.0,0.0,0.0,0.0,499.75084175084174,537.5116551917249,1430.0,60.0,232.66666666666669,14,15,10.11.2.101,158.247.202.180,52987,13783,6,21,,t12i190700_d83cc789557e_7af1ed941c26,ec74a5c51106f0419184d0dd08fb05bc7900,benign,benign,ctu_normal21_kali_2017.pcap,192.168.1.191:47766-95.101.30.107:443-6-1493727102082,349.3999999999999,499.21349569669513,1514,54,101.88888888888889,71.02542580731995,255,54,917,9.785714285714285,16.4371931509403,56,0,17.125,18.92419086777556,56,0,24.0,28.310775333784132,69,0,17.0,0.0,0.0,0.0,0.0,514.3283950617284,570.635500358299,1514.0,54.0,255.0,12,13,192.168.1.191,95.101.30.107,47766,443,6,15,cdn.iubenda.com,t12d1109h2_43e74fd21232_fed6c16fddd0,7d9824476c0dc081385112c9c462783f7911,c2_beaconing,mta_gootloader,GootLoader_2023-12-29.pcap,10.12.29.101:51387-74.208.236.120:443-6-1703877692021,324.92857142857144,517.0429924522292,1514,54,358.4285714285714,532.7306565056608,1514,54,2509,279.38461538461536,959.6844566888933,3472,0,605.3333333333334,1405.382320461826,3473,0,592.3333333333333,1411.0793977188762,3472,0,3.0,0.0,0.0,0.0,0.0,630.9761904761905,634.3095680485309,1514.0,54.0,324.92857142857144,9,11,10.12.29.101,74.208.236.120,51387,443,6,14,gambrick.com,t12d210700_76e208dd3e22_2dae41c691ec,394441ab65754e2207b1e1b457b3641d7920,benign,benign,ctu_normal14_win_full_2017.pcap,10.0.2.15:51051-40.115.11.100:443-6-2666878,374.15384615384613,508.7387299829013,1474,54,232.0909090909091,332.01188368654954,1115,54,2553,149.36,618.3478578707403,3104,0,373.40000000000003,964.3899856616329,3104,1,260.3571428571429,903.2569791203777,3398,0,38.0,0.0,0.0,0.0,0.0,589.9531209531209,566.4296469162676,1474.0,54.0,374.15384615384613,19,21,10.0.2.15,40.115.11.100,51051,443,6,26,kes.skype.com,t12d1710h2_67e6df579eba_4a7a952b215a,4fd467dd264720762ffe286277c00f577930,benign,benign,ctu_normal21_kali_2017.pcap,192.168.1.191:56376-23.253.41.115:443-6-1493726473746,164.37499999999997,181.027760302115,583,66,201.5,233.34095225656384,583,66,1612,51.79999999999999,65.7051857053264,167,0,92.14285714285715,83.69075729817992,203,5,91.42857142857142,80.61814754933106,172,0,27.0,0.0,0.0,0.0,0.0,248.56944444444446,201.37831581440668,583.0,66.0,164.37499999999997,10,11,192.168.1.191,23.253.41.115,56376,443,6,16,api.autopilothq.com,t12d1110h2_43e74fd21232_205f67e4d9f4,fbe78c619e7ea20046131294ad087f057940,exfil,mta_stealc,StealC_2025-06-18.pcap,172.16.1.128:57360-52.167.17.97:443-6-1750264208603,330.8333333333333,503.2021656752184,1514,54,341.21428571428567,521.7347069110932,1514,54,4777,42.82758620689654,111.58055032944883,577,0,95.53846153846153,158.03249422435005,578,0,70.13333333333334,147.1436939412174,577,0,50.0,0.0,0.0,0.0,0.0,633.0886243386243,633.1162864327189,1514.0,54.0,330.8333333333333,19,21,172.16.1.128,52.167.17.97,57360,443,6,30,settings-win.data.microsoft.com,t12d1809h2_4b22cbed5bed_7af1ed941c26,2fe9b0e731d3d41b2b84e8e1d61868367951,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:50173-194.165.16.90:443-6-1668457795710,422.14285714285717,585.7869486480125,1514,54,430.42857142857144,616.7435215943265,1514,54,6026,52.185185185185176,135.6605030204889,498,0,108.38461538461537,183.16274114456178,499,0,91.30769230769229,181.28862099581457,498,0,5.0,0.0,0.0,0.0,0.0,663.3809523809524,619.9837354314599,1514.0,54.0,422.14285714285717,18,20,172.16.24.174,194.165.16.90,50173,443,6,28,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b77961,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:52045-194.165.16.90:443-6-1668460514832,466.32,610.5326035520134,1514,54,493.1666666666667,647.6681014971864,1514,54,5918,72.99999999999999,184.27201066098854,679,0,159.27272727272725,251.4160261037832,679,0,128.08333333333334,246.1294775051735,679,0,1.0,0.0,0.0,0.0,0.0,678.3361253561253,614.6092548983562,1514.0,54.0,466.32,14,16,172.16.24.174,194.165.16.90,52045,443,6,25,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b77971,c2_beaconing,mta_pikabot,Pikabot_2023-10-03.pcap,10.1.2.147:49388-179.60.149.244:443-6-1696349499724,720.96052631579,681.9845640975084,1430,60,63.07291666666666,26.228654164899876,384,60,12110,2.1794195250659634,10.788711456900337,80,0,4.32460732984293,14.957461497535661,80,0,4.058823529411765,15.043727114322309,84,0,1.0,0.0,0.0,0.0,0.0,622.3199097403674,598.7300366669256,1430.0,60.0,384.0,221,223,10.1.2.147,179.60.149.244,49388,443,6,380,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b77980,benign,benign,ctu_normal21_kali_2017.pcap,192.168.1.191:40534-54.77.116.233:443-6-1493727388243,377.3333333333332,503.87407723982557,1514,54,206.14285714285714,314.95528027234053,1113,54,4329,363.7714285714286,1697.7441275672481,9998,0,636.6000000000001,2232.0266080285355,9998,0,904.0,2672.6487294010844,10037,0,45.5,0.0,0.0,0.0,0.0,612.8306878306878,579.1622546088214,1514.0,54.0,377.3333333333332,27,32,192.168.1.191,54.77.116.233,40534,443,6,36,ml314.com,t12d1109h2_43e74fd21232_fed6c16fddd0,303951d4c50efb2e991652225a6f02b17990,benign,benign,ctu_normal21_kali_2017.pcap,192.168.1.191:54602-104.244.43.144:443-6-1493726743164,365.04,527.7546368026212,1514,54,108.73333333333335,95.69778820153927,382,54,1631,228.87499999999997,975.4200126545264,4802,0,392.3571428571429,1270.530150227598,4802,0,605.3333333333335,1583.0586691591693,4817,0,53.5,0.0,0.0,0.0,0.0,534.1414814814815,565.6429271412891,1514.0,54.0,365.04,18,23,192.168.1.191,104.244.43.144,54602,443,6,25,static.ads-twitter.com,t12d1109h2_43e74fd21232_fed6c16fddd0,76cc3e2d3028143b23ec18e27dbd7ca98000,benign,benign,ctu_normal14_win_full_2017.pcap,10.0.2.15:51924-52.202.38.240:443-6-3376121,178.13043478260872,315.2508819608204,1514,54,266.0,436.66760814147864,1514,54,2926,235.8181818181818,867.5127355378401,4098,0,518.5,1270.6068759979748,4098,0,458.2727272727273,1298.4615582225829,4362,0,103.0,0.0,0.0,0.0,0.0,458.74597423510465,574.3331533031298,1514.0,54.0,178.13043478260872,13,15,10.0.2.15,52.202.38.240,51924,443,6,23,logx.optimizely.com,t12d1710h2_67e6df579eba_4a7a952b215a,303951d4c50efb2e991652225a6f02b18011,exfil,mta_lumma,Lumma_2025-08-15.pcap,10.8.15.176:62837-5.10.250.239:443-6-1755287899496,60.0,4.898979485566356,66,54,61.5,3.0,66,60,246,77.83333333333334,85.02097780352015,160,0,102.66666666666666,88.28552165181635,160,1,160.0,0.0,160,160,153.0,0.0,0.0,0.0,0.0,60.611111111111114,4.507880616689065,66.0,54.0,60.0,0,1,10.8.15.176,5.10.250.239,62837,443,6,7,,,8020,benign,benign,ctu_normal14_win_full_2017.pcap,10.0.2.15:51541-90.182.114.17:443-6-3191274,111.92857142857143,138.9374315658307,571,54,136.85714285714286,192.34381418996261,571,54,958,16.615384615384617,23.11759236865026,74,0,36.0,42.87656702675717,104,1,32.5,25.897876360813836,74,5,19.0,0.0,0.0,0.0,0.0,204.4206349206349,200.98831331997104,571.0,54.0,111.92857142857143,7,9,10.0.2.15,90.182.114.17,51541,443,6,14,scontent.fprg1-1.fna.fbcdn.net,t12d1712h2_67e6df579eba_88be6878e1da,96681175a9547081bf3d417f1a5720918030,benign,benign,ctu_normal14_win_full_2017.pcap,10.0.2.15:52164-104.120.243.32:443-6-3411242,327.57142857142856,490.4572642364756,1514,54,292.81818181818187,472.0031394348598,1514,54,3221,184.7777777777778,839.5241020654012,4378,0,498.90000000000003,1365.9156839115492,4378,0,308.625,1095.457461520072,4410,0,29.0,0.0,0.0,0.0,0.0,626.0498259910024,628.3980732996267,1514.0,54.0,327.57142857142856,19,21,10.0.2.15,104.120.243.32,52164,443,6,28,as-sec.casalemedia.com,t12d1711h2_67e6df579eba_de5ccbe16bdd,2b33c1374db4ddf06942f92373c0b54b8040,benign,benign,ctu_normal14_win_full_2017.pcap,10.0.2.15:51228-162.125.32.5:443-6-2735307,432.87999999999994,582.1572181693418,1514,54,441.5454545454545,609.3871287837254,1514,54,4857,5197.416666666666,17428.566607519784,63700,0,6103.8,18871.144002300327,59809,0,9580.846153846154,23210.42731491658,63703,0,3.0,0.0,0.0,0.0,0.0,662.7218759018759,612.5445817684109,1514.0,54.0,432.87999999999994,19,21,10.0.2.15,162.125.32.5,51228,443,6,25,d.dropbox.com,t12d130500_f38f2214ac9d_c70a3c84db07,758945630046fd37070521b8544d1fe88051,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:52309-23.214.32.215:443-6-1668465029267,909.5666666666668,697.80659664959,1514,54,93.47058823529412,96.76654745252802,416,54,1589,1860.915254237288,14270.258031507272,109615,0,6862.125,27400.769602026387,109615,0,2613.6666666666665,16913.365842731637,109615,0,3.0,0.0,0.0,0.0,0.0,649.0273952475047,608.226474512214,1514.0,54.0,416.0,35,37,172.16.24.174,23.214.32.215,52309,443,6,60,www.cisco.com,t12d190700_d83cc789557e_2dae41c691ec,d227a8dd2bb7d7ee4f648c1af087578a8061,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:50388-194.165.16.90:443-6-1668458125386,450.4615384615385,603.6125400134912,1514,54,459.3846153846154,631.944425096271,1514,54,5972,67.88000000000001,171.66423622874976,613,0,141.33333333333334,230.1652897507802,613,0,121.75000000000001,231.37263333105204,613,0,1.0,0.0,0.0,0.0,0.0,672.8205128205128,616.4463618420267,1514.0,54.0,450.4615384615385,16,18,172.16.24.174,194.165.16.90,50388,443,6,26,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b78070,c2_beaconing,mta_qakbot,Qakbot_2022-09-29.pcap,10.9.29.201:50164-41.105.159.42:443-6-1664422894806,60.0,6.324555320336759,66,54,66.0,0.0,66,66,330,542.3333333333334,388.04284557249605,1172,155,1181.5,569.9628642873732,1684,677,1174.5,583.7947698749393,1688,659,510.0,0.0,0.0,0.0,0.0,60.0,5.656854249492381,66.0,54.0,60.0,0,9,10.9.29.201,41.105.159.42,50164,443,6,10,,,8080,benign,benign,ctu_normal20_win_2017_https.pcap,10.0.2.15:65512-54.192.44.15:443-6-10923675,105.39999999999999,135.15007531312312,571,54,130.37500000000003,179.01710812098378,571,54,1043,646.9999999999999,2232.5694751873816,8398,0,1294.0,3135.2874403048495,8399,1,1504.8333333333333,3378.790991858873,8398,1,21.5,0.0,0.0,0.0,0.0,202.95912698412698,202.2682915771175,571.0,54.0,105.39999999999999,8,10,10.0.2.15,54.192.44.15,65512,443,6,15,cdn-gl.imrworldwide.com,t12d1510h2_073e58a039a6_60bf0a45ed8c,d199ba0af2b08e204c73d6d81a1fd2608091,c2_beaconing,mta_pikabot,Pikabot_2023-10-03.pcap,10.1.2.147:49601-179.60.149.244:443-6-1696349936331,456.5000000000001,583.8155560177169,1450,60,351.2352941176471,540.7953089445863,1450,60,5971,12.068965517241377,25.719546533553537,78,0,21.875,38.515581262652645,115,0,23.416666666666668,33.04118183373133,79,0,6.5,0.0,0.0,0.0,0.0,656.876571141277,583.2948375206743,1450.0,60.0,456.5000000000001,17,18,10.1.2.147,179.60.149.244,49601,443,6,30,zzerxc.com,t12d190700_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b78100,benign,benign,ctu_normal14_win_full_2017.pcap,10.0.2.15:50461-5.45.69.166:443-6-1569436,193.11764705882356,324.57527677584693,1324,54,285.25,455.9325608025818,1324,54,2282,252.81250000000003,583.2834895371775,1776,0,577.8571428571429,802.1804511395651,1776,5,500.125,858.6866113015687,1998,1,44.0,0.0,0.0,0.0,0.0,420.1766521423384,494.7188426853841,1324.0,54.0,193.11764705882356,11,13,10.0.2.15,5.45.69.166,50461,443,6,17,7sim.net,t12d1712h2_67e6df579eba_88be6878e1da,7bee5c1d424b7e5f943b06983bb114228111,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:50200-194.165.16.90:443-6-1668457830226,450.4615384615385,603.0142439955614,1514,54,459.3846153846154,631.944425096271,1514,54,5972,52.27999999999999,130.05816647433818,440,0,108.91666666666667,174.05874574320293,440,0,90.0,172.0369939074944,440,0,101.5,0.0,0.0,0.0,0.0,672.8205128205128,616.4463618420267,1514.0,54.0,450.4615384615385,16,18,172.16.24.174,194.165.16.90,50200,443,6,26,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b78120,benign,benign,ctu_normal20_win_2017_https.pcap,10.0.2.15:64955-192.30.253.117:443-6-9794902,440.7894736842105,588.4825266824209,1514,54,530.2352941176472,664.198627051028,1514,54,9014,300.4324324324325,1605.2957764941732,9792,0,694.6875,2429.587584172809,9795,0,550.7,2225.812190024836,10001,0,4.0,0.0,0.0,0.0,0.0,667.0450800203122,612.138610329228,1514.0,54.0,440.7894736842105,27,29,10.0.2.15,192.30.253.117,64955,443,6,38,api.github.com,t12d1509h2_073e58a039a6_e70312a1ce2c,af90ea6d911dbfbfea950c0fe512e8c48131,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:51375-194.165.16.90:443-6-1668459618333,450.4615384615385,603.6125400134912,1514,54,459.3846153846154,631.944425096271,1514,54,5972,57.39999999999999,140.66775276042006,473,0,119.58333333333331,187.3671448512171,473,0,98.75,185.31257377738834,473,0,125.5,0.0,0.0,0.0,0.0,672.8205128205128,616.4463618420267,1514.0,54.0,450.4615384615385,16,18,172.16.24.174,194.165.16.90,51375,443,6,26,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b78140,benign,benign,ctu_normal20_win_2017_https.pcap,10.0.2.15:52040-2.19.252.132:443-6-6922978,85.36170212765958,102.06124025435498,571,54,98.69565217391303,132.8493455633139,571,54,2270,2953.8695652173906,4535.845155149984,10153,1,6176.227272727273,4823.421251034899,10155,1,5905.739130434783,4915.0409340512315,10155,2,3.0,0.0,0.0,0.0,0.0,208.18229862610065,208.4428957438465,571.0,54.0,85.36170212765958,39,41,10.0.2.15,2.19.252.132,52040,443,6,47,s.cdn.turner.com,t12d1510h2_073e58a039a6_60bf0a45ed8c,410b9bedaf65dd26c6fe547154d60db48150,benign,benign,ctu_normal14_win_full_2017.pcap,10.0.2.15:51092-131.253.61.96:443-6-2675669,329.60869565217394,540.276927235253,1474,54,102.22222222222223,93.50103980408157,294,54,920,226.90909090909093,860.5566807978431,4069,0,609.625,1402.0916963594073,4069,1,375.0,1180.8595033562065,4301,0,87.0,0.0,0.0,0.0,0.0,479.0685146844567,549.7918338411973,1474.0,54.0,294.0,16,18,10.0.2.15,131.253.61.96,51092,443,6,23,login.live.com,t12d1711h2_67e6df579eba_de5ccbe16bdd,4fd467dd264720762ffe286277c00f578161,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:51302-194.165.16.90:443-6-1668459505974,466.32,610.5326035520134,1514,54,493.1666666666667,647.6681014971864,1514,54,5918,68.41666666666666,169.21016432278805,646,0,149.27272727272728,230.15781147251593,648,0,117.83333333333334,224.19384199366135,646,0,1.0,0.0,0.0,0.0,0.0,678.3361253561253,614.6092548983562,1514.0,54.0,466.32,14,16,172.16.24.174,194.165.16.90,51302,443,6,25,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b78171,c2_beaconing,mta_icedid,IcedID_2023-05-10.pcap,172.16.10.73:50322-74.6.143.25:443-6-1683738313445,682.7631578947369,659.420115204036,1514,54,100.66666666666667,110.18145207317056,409,54,1510,14.162162162162165,35.834894162528784,162,0,37.35714285714286,51.72353599498178,163,0,20.000000000000004,42.46342964414035,162,0,1.0,0.0,0.0,0.0,0.0,604.9801254343589,584.1791032033178,1514.0,54.0,409.0,29,31,172.16.10.73,74.6.143.25,50322,443,6,38,www.yahoo.com,t13d201100_2b729b4bf6f3_9e7b989ebec8,f4febc55ea12b31ae17cfb7e614afda88180,benign,benign,ctu_normal20_win_2017_https.pcap,10.0.2.15:51131-104.155.121.149:443-6-4816573,367.6071428571429,486.5752836034282,1474,54,209.84615384615387,305.0515929461349,926,54,2728,347.70370370370375,923.3592023282254,4532,0,782.25,1295.7033277862504,4532,1,652.9285714285716,1319.1815332176302,4800,0,33.0,0.0,0.0,0.0,0.0,568.6429588929589,551.251626209531,1474.0,54.0,367.6071428571429,21,23,10.0.2.15,104.155.121.149,51131,443,6,28,ads.converge-digital.com,t12d1509h2_073e58a039a6_e70312a1ce2c,e35df3e00ca4ef31d42b34bebaa2f86e8191,c2_beaconing,mta_gozi,Gozi_2023-07-12.pcap,10.7.12.121:50589-170.130.55.162:443-6-1689205487200,336.87999999999994,515.5241927721078,1514,54,136.66666666666666,185.8329324632176,636,54,1640,463.8333333333333,2198.2080976512916,10782,0,1011.9999999999999,3240.935389667619,10782,0,924.1666666666667,3105.0023520217514,10782,0,25.5,0.0,0.0,0.0,0.0,535.6932193732193,559.6883804147036,1514.0,54.0,336.87999999999994,17,19,10.7.12.121,170.130.55.162,50589,443,6,25,iamupdate.com,t12d190700_d83cc789557e_2dae41c691ec,4ce0442e9d20d092d9d74e9ce54b363a8201,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:50744-194.165.16.90:443-6-1668458659252,422.14285714285717,585.2161179956554,1514,54,430.42857142857144,616.7435215943265,1514,54,6026,53.25925925925926,138.2588410283665,482,0,110.6153846153846,186.0750468948566,482,0,90.0,181.7658750517636,482,0,7.0,0.0,0.0,0.0,0.0,663.3809523809524,619.9837354314599,1514.0,54.0,422.14285714285717,18,20,172.16.24.174,194.165.16.90,50744,443,6,28,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b78210,benign,benign,ctu_normal20_win_2017_https.pcap,10.0.2.15:52457-151.101.114.2:443-6-8292843,232.19999999999993,399.1924440760464,1474,54,113.96000000000002,109.25256671279324,466,54,2849,3852.0740740740744,15094.397927272963,68140,0,8667.125,21942.71015783265,68140,0,7172.310344827585,20249.442429896062,68389,0,19.0,0.0,0.0,0.0,0.0,472.5437037037037,551.5499667288797,1474.0,54.0,232.19999999999993,46,48,10.0.2.15,151.101.114.2,52457,443,6,55,cdn.taboola.com,t12d1509h2_073e58a039a6_e70312a1ce2c,860fcf58fd757e26aa8911e5eaff6b538220,benign,benign,ctu_normal20_win_2017_https.pcap,10.0.2.15:49918-178.154.131.217:443-6-2837675,279.22727272727275,449.8389057490927,1416,54,146.6,183.57935008539977,571,54,1466,742.7142857142857,2347.474475747439,9877,0,1732.7777777777778,3443.3846277237813,9877,2,1411.0,3226.751834275453,10091,0,3.0,0.0,0.0,0.0,0.0,486.73080808080806,523.2487804858903,1416.0,54.0,279.22727272727275,15,17,10.0.2.15,178.154.131.217,49918,443,6,22,yastatic.net,t12d1510h2_073e58a039a6_60bf0a45ed8c,02bdc318d9f618eea3e10d0a7ba25ba08230,benign,benign,ctu_normal21_kali_2017.pcap,192.168.1.191:60014-185.33.222.187:443-6-1493726842768,363.5000000000001,518.5345571478547,1514,66,157.41666666666666,215.25902296929848,807,66,1889,440.47826086956525,2080.001985785005,9982,0,918.6363636363635,3006.0261566635536,9982,0,918.2727272727271,3011.426708087351,9998,0,8.0,0.0,0.0,0.0,0.0,569.2777777777778,559.1016341826224,1514.0,66.0,363.5000000000001,16,17,192.168.1.191,185.33.222.187,60014,443,6,24,ib.adnxs.com,t12d1109h2_43e74fd21232_fed6c16fddd0,9168bbacb9fd42f7f7cf95dc89c9d30c8241,c2_beaconing,mta_emotet,Emotet_2022-07-07.pcap,10.7.7.101:57461-52.18.235.51:443-6-1657220992824,463.3928571428571,598.4427531819387,1514,54,129.41666666666669,169.22038257487742,619,54,1553,98.22222222222221,251.70897929237694,920,0,241.09090909090907,356.54353297892095,920,0,173.53333333333333,322.2332488534767,920,0,49.0,0.0,0.0,0.0,0.0,568.4093915343915,558.7284176121761,1514.0,54.0,463.3928571428571,25,27,10.7.7.101,52.18.235.51,57461,443,6,28,distinctive-obi-mgw.aws-euw1.cloud-ara.tyk.io,t12d190700_d83cc789557e_2dae41c691ec,61be9ce3d068c08ff99a857f62352f9d8251,c2_beaconing,mta_gozi,Gozi_2023-07-12.pcap,10.7.12.121:50708-170.130.55.162:443-6-1689206010392,308.10714285714283,489.7015220395284,1514,54,124.85714285714285,173.55728699231233,636,54,1748,394.51851851851853,1981.7292248936837,10308,0,819.3846153846155,2851.650531956933,10308,0,816.7692307692307,2852.746254455116,10309,0,1.0,0.0,0.0,0.0,0.0,527.813492063492,561.9710765392798,1514.0,54.0,308.10714285714283,20,22,10.7.12.121,170.130.55.162,50708,443,6,28,iamupdate.com,t12d190700_d83cc789557e_2dae41c691ec,4ce0442e9d20d092d9d74e9ce54b363a8261,c2_beaconing,mta_pikabot,Pikabot_2023-11-02.pcap,10.11.2.101:52978-154.61.75.156:2078-6-1698958127071,232.86363636363635,350.15741976248137,1430,60,152.41666666666666,210.20399543531445,748,60,1829,5213.952380952382,17346.03353356666,75161,0,9922.636363636364,23466.897925685564,75161,0,12128.77777777778,25704.0056886946,75161,0,344.0,0.0,0.0,0.0,0.0,500.29781144781145,536.7995251863942,1430.0,60.0,232.86363636363635,14,15,10.11.2.101,154.61.75.156,52978,2078,6,22,,t12i190700_d83cc789557e_7af1ed941c26,ec74a5c51106f0419184d0dd08fb05bc8270,c2_beaconing,mta_qakbot,Qakbot_2022-09-29.pcap,10.9.29.201:50544-20.123.141.233:443-6-1664445407731,361.4347826086957,545.2107037306316,1514,54,138.7,116.74763856760063,393,54,1387,26.59090909090909,42.36537118124512,107,0,65.0,61.81221562118608,148,0,36.0,51.89675064272066,107,0,55.5,0.0,0.0,0.0,0.0,512.8782237086585,559.1569243207824,1514.0,54.0,361.4347826086957,17,19,10.9.29.201,20.123.141.233,50544,443,6,23,nexusrules.officeapps.live.com,t12d1809h2_4b22cbed5bed_7af1ed941c26,67bfe5d15ae567fb35fd7837f0116eec8280,benign,benign,ctu_normal14_win_full_2017.pcap,10.0.2.15:52168-104.120.243.32:443-6-3411955,283.45454545454544,473.802322379957,1474,54,254.88888888888894,420.5369913706892,1282,54,2294,204.5238095238095,670.0839215387592,2994,0,536.875,1040.1060986402163,2994,0,354.41666666666663,878.3490151552754,2995,0,42.0,0.0,0.0,0.0,0.0,581.5082448415782,595.4943021518196,1474.0,54.0,283.45454545454544,14,16,10.0.2.15,104.120.243.32,52168,443,6,22,ssum-sec.casalemedia.com,t12d1712h2_67e6df579eba_88be6878e1da,410b9bedaf65dd26c6fe547154d60db48290,exfil,mta_lumma,Lumma_2025-02-13.pcap,10.2.14.101:64148-20.44.10.123:443-6-1739488895134,584.4999999999998,658.7756810623656,1514,54,896.5416666666666,668.4695030061397,1514,54,21517,32.040816326530624,118.58206707868209,800,0,68.26086956521739,173.11194943034153,800,0,57.43999999999998,171.1729339975609,842,0,50.5,0.0,0.0,0.0,0.0,720.1670227920227,619.218843687781,1514.0,54.0,584.4999999999998,26,28,10.2.14.101,20.44.10.123,64148,443,6,50,browser.events.data.msn.com,t12d180700_4b22cbed5bed_2dae41c691ec,ae4edc6faf64d08308082ad26be607678300,exfil,mta_xloader,XLoader_2025-01-30.pcap,10.1.30.242:65320-52.113.194.132:443-6-1738201862941,856.7916666666664,637.1929451043695,1430,54,144.35714285714286,228.0255070559692,910,60,2021,11.85106382978723,38.761802535488265,247,0,42.84615384615385,81.46251300838335,301,0,14.212121212121218,45.510134568960005,247,0,2.0,0.0,0.0,0.0,0.0,676.588429816371,566.1913763061721,1430.0,54.0,856.7916666666664,29,30,10.1.30.242,52.113.194.132,65320,443,6,48,ecs.office.com,t12d180800_4b22cbed5bed_7af1ed941c26,60a1c7426de3ff26002f692fbe0d74088310,benign,benign,ctu_normal14_win_full_2017.pcap,10.0.2.15:50801-204.79.197.200:443-6-2259696,413.1666666666667,556.0153005923071,1474,54,184.11111111111111,246.39523353975645,795,54,1657,23.347826086956523,34.5643125145683,133,0,67.125,64.68039557260431,194,4,31.071428571428573,38.31140478060986,133,0,19.5,0.0,0.0,0.0,0.0,561.4308641975309,543.3484065615455,1474.0,54.0,413.1666666666667,17,19,10.0.2.15,204.79.197.200,50801,443,6,24,c.bing.com,t12d1711h2_67e6df579eba_de5ccbe16bdd,4fd467dd264720762ffe286277c00f578321,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:50616-194.165.16.90:443-6-1668458472592,409.44827586206895,572.4708093747723,1514,54,430.42857142857144,616.7435215943265,1514,54,6026,51.07142857142858,136.01087335929313,519,0,109.99999999999999,186.67529741952112,521,0,86.42857142857142,179.64268564429364,519,0,1.0,0.0,0.0,0.0,0.0,659.3048348841452,621.6557528775471,1514.0,54.0,409.44827586206895,18,20,172.16.24.174,194.165.16.90,50616,443,6,29,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b78330,benign,benign,ctu_normal20_win_2017_https.pcap,10.0.2.15:50944-104.244.42.3:443-6-3874871,134.2898550724638,160.29349014792277,950,54,144.84375,190.72444391861393,950,54,4635,6028.294117647059,18096.075503506876,67406,0,13223.322580645163,25160.361730821885,67406,1,11386.250000000002,23833.327066316193,67694,0,29.0,0.0,0.0,0.0,0.0,345.69952969273623,366.4967121966432,950.0,54.0,134.2898550724638,61,63,10.0.2.15,104.244.42.3,50944,443,6,69,analytics.twitter.com,t12d1510h2_073e58a039a6_60bf0a45ed8c,7bee5c1d424b7e5f943b06983bb114228340,benign,benign,ctu_normal20_win_2017_https.pcap,10.0.2.15:51225-192.229.233.50:443-6-5403818,312.52,502.28304769323046,1474,54,116.36363636363637,155.39901719590938,571,54,1280,275.5833333333333,1171.2440772126863,5760,0,661.3000000000001,1796.999910344399,5760,1,507.2307692307691,1644.1246482473155,5969,0,2.0,0.0,0.0,0.0,0.0,508.5029437229437,545.8864969952925,1474.0,54.0,312.52,16,18,10.0.2.15,192.229.233.50,51225,443,6,25,ton.twimg.com,t12d1510h2_073e58a039a6_60bf0a45ed8c,76cc3e2d3028143b23ec18e27dbd7ca98351,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:52300-213.91.235.146:443-6-1668464714524,116.10526315789473,137.24466989724837,587,54,136.27272727272728,175.45887889137495,587,54,1499,3321.888888888889,9490.347938138417,31238,0,5979.4,12347.886172674793,31238,0,8519.285714285714,14269.738291389996,31239,1,80.0,0.0,0.0,0.0,0.0,206.8614433811802,207.3233969046116,587.0,54.0,116.10526315789473,12,14,172.16.24.174,213.91.235.146,52300,443,6,19,,t12i190600_d83cc789557e_2dae41c691ec,fd4bc6cea4877646ccd62f0792ec0b628361,c2_beaconing,mta_pikabot,Pikabot_2023-10-03.pcap,10.1.2.147:49379-209.126.9.47:2078-6-1696349176265,220.95833333333334,338.80858763905474,1430,60,138.35714285714286,194.6660284624994,745,60,1937,4841.391304347826,16759.658758565383,74993,0,8565.538461538463,21919.967946355002,74993,0,12362.666666666666,25851.734100442856,74993,0,93.5,0.0,0.0,0.0,0.0,497.87949735449735,538.096841663627,1430.0,60.0,220.95833333333334,14,15,10.1.2.147,209.126.9.47,49379,2078,6,24,,t12i190600_d83cc789557e_2dae41c691ec,ec74a5c51106f0419184d0dd08fb05bc8370,benign,benign,ctu_normal20_win_2017_https.pcap,10.0.2.15:49443-104.244.42.2:443-6-1060328,172.2089552238806,278.1242657362283,1474,54,134.44827586206898,199.20423586411735,922,54,3899,4166.424242424243,15258.410556462199,64629,0,9820.857142857143,22425.552617517777,64629,1,7431.351351351353,19936.463381921043,64632,0,5.0,0.0,0.0,0.0,0.0,504.40928298615813,577.5878307349533,1474.0,54.0,172.2089552238806,59,61,10.0.2.15,104.244.42.2,49443,443,6,67,api.twitter.com,t12d1509h2_073e58a039a6_e70312a1ce2c,8d2a028aa94425f76ced7826b1f390398380,benign,benign,ctu_normal14_win_full_2017.pcap,10.0.2.15:50815-91.190.218.112:443-6-2263763,344.0952380952382,487.9607468600221,1474,54,210.11111111111106,346.0550694775487,1111,54,1891,321.75000000000006,1314.859883469678,5904,0,804.375,2062.3106276698477,5904,1,579.4545454545455,1836.1237084486634,6115,0,53.0,0.0,0.0,0.0,0.0,579.976631393298,569.7238624992018,1474.0,54.0,344.0952380952382,14,16,10.0.2.15,91.190.218.112,50815,443,6,21,secure.skype.com,t12d1711h2_67e6df579eba_de5ccbe16bdd,e35df3e00ca4ef31d42b34bebaa2f86e8390,benign,benign,ctu_normal14_win_full_2017.pcap,10.0.2.15:50725-172.217.23.228:443-6-2167394,119.26666666666671,141.82608397342887,572,54,147.25,187.2963656119055,572,54,1178,191.5714285714286,630.9946622090109,2375,0,383.1428571428571,882.3369402844222,2375,0,443.66666666666663,1052.9823676902984,2593,1,19.5,0.0,0.0,0.0,0.0,208.20026455026456,200.64112372507392,572.0,54.0,119.26666666666671,7,9,10.0.2.15,172.217.23.228,50725,443,6,15,www.google.com,t12d1712h2_67e6df579eba_88be6878e1da,c74a0764cf5d01aa28d5c7769cd86fc18400,benign,benign,ctu_normal21_kali_2017.pcap,192.168.1.191:38456-136.243.75.34:443-6-1493726905452,154.94520547945203,247.18653519912974,1514,66,100.22826086956522,75.43997006001844,648,66,9221,1625.0413793103448,4322.686007301515,45021,0,2589.3516483516496,5232.200820928515,45021,0,4444.981132075473,6344.150184014362,45391,0,146.5,0.0,0.0,0.0,0.0,486.37112589063156,575.8078929760213,1514.0,66.0,154.94520547945203,102,103,192.168.1.191,136.243.75.34,38456,443,6,146,px.adhigh.net,t12d1109h2_43e74fd21232_fed6c16fddd0,8d2a028aa94425f76ced7826b1f390398411,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:51856-194.165.16.90:443-6-1668460213529,466.32,610.5326035520134,1514,54,493.1666666666667,647.6681014971864,1514,54,5918,68.375,168.5853705809405,612,0,149.0909090909091,228.43180800643964,612,0,118.66666666666666,223.56993346940718,612,0,1.0,0.0,0.0,0.0,0.0,678.3361253561253,614.6092548983562,1514.0,54.0,466.32,14,16,172.16.24.174,194.165.16.90,51856,443,6,25,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b78421,c2_beaconing,mta_icedid,IcedID_2022-10-31_1.pcap,172.16.0.153:57957-66.63.168.75:443-6-1667234036325,205.93333333333334,330.4368248819966,1356,60,120.74999999999999,89.43433345198028,275,60,966,4388.071428571429,15996.286941586864,59961,0,8776.142857142857,22572.931595375994,59961,1,10219.333333333334,24450.299553720535,60125,5,116.0,0.0,0.0,0.0,0.0,421.88544973544975,506.73051467018877,1356.0,60.0,205.93333333333334,9,10,172.16.0.153,66.63.168.75,57957,443,6,15,airsaintol.beauty,t12d190800_d83cc789557e_7af1ed941c26,ec74a5c51106f0419184d0dd08fb05bc8431,c2_beaconing,mta_gozi,Gozi_2023-07-12.pcap,10.7.12.121:50316-170.130.55.162:443-6-1689204253636,337.76,515.2568356331303,1514,54,136.66666666666666,185.8329324632176,636,54,1640,453.7916666666667,2128.253723415487,10441,0,990.0909090909091,3135.8817724699206,10441,0,903.9166666666666,3004.7416303488585,10441,0,20.0,0.0,0.0,0.0,0.0,535.9790313390313,559.649230687594,1514.0,54.0,337.76,18,20,10.7.12.121,170.130.55.162,50316,443,6,25,iamupdate.com,t12d190700_d83cc789557e_2dae41c691ec,4ce0442e9d20d092d9d74e9ce54b363a8440,exfil,mta_stealc,StealC_2025-06-18.pcap,172.16.1.128:57400-23.221.24.19:443-6-1750264237852,374.88235294117646,496.06298520865033,1514,54,232.5,260.3750042864001,782,54,1860,23.8125,48.257944078324215,190,0,54.42857142857143,81.45317088744333,231,0,37.625,64.89758415050154,190,0,39.0,0.0,0.0,0.0,0.0,564.5363108206245,556.0168206184916,1514.0,54.0,374.88235294117646,13,15,172.16.1.128,23.221.24.19,57400,443,6,17,www.bing.com,t12d180700_4b22cbed5bed_2dae41c691ec,4b7d5f58af981be54baeda917533e5d88450,benign,benign,ctu_normal14_win_full_2017.pcap,10.0.2.15:52689-52.1.82.65:443-6-3772772,278.95,434.7354277089263,1474,54,169.88888888888886,224.8791033224544,730,54,1529,193.47368421052633,616.393215805648,2718,0,459.5,920.9394271999806,2718,1,354.0,928.7487400918626,2991,0,70.0,0.0,0.0,0.0,0.0,517.4467452300786,549.6941554643266,1474.0,54.0,278.95,15,17,10.0.2.15,52.1.82.65,52689,443,6,20,messaging-notifications.api.nytimes.com,t12d1710h2_67e6df579eba_4a7a952b215a,303951d4c50efb2e991652225a6f02b18460,exfil,mta_lumma,Lumma_2025-09-03.pcap,160.9.3.101:55720-192.178.220.147:443-6-1756915129559,215.66666666666669,296.8346136803925,1037,54,193.66666666666666,193.0188246432629,453,54,1162,22.72727272727273,31.458197370767795,103,0,50.0,54.05090193512038,144,7,35.6,40.77744474583958,103,1,28.5,0.0,0.0,0.0,0.0,370.6666666666667,375.44866986540745,1037.0,54.0,215.66666666666669,9,11,160.9.3.101,192.178.220.147,55720,443,6,12,www.google.com,t12d180700_4b22cbed5bed_2dae41c691ec,b31c0b82752ea0e2c48b8ce46e9263e58470,benign,benign,ctu_normal14_win_full_2017.pcap,10.0.2.15:50001-45.55.217.192:443-6-1153703,114.41666666666666,149.58394319112617,571,54,150.66666666666666,206.86581802382594,571,54,904,42.18181818181819,60.70060655680169,142,0,92.8,82.13829801012436,160,0,63.0,68.99275324264136,142,0,18.0,0.0,0.0,0.0,0.0,204.69444444444446,201.01362738645787,571.0,54.0,114.41666666666666,5,7,10.0.2.15,45.55.217.192,50001,443,6,12,anon-sms.com,t12d1712h2_67e6df579eba_88be6878e1da,c6227321ea7621862dc7b7351771a62c8481,c2_beaconing,mta_icedid,IcedID_2022-12-20.pcap,10.3.24.178:54646-23.81.246.152:443-6-1671552872485,170.23529411764704,259.10748961863413,943,54,158.66666666666666,224.78712151722573,732,54,1428,43.375,84.84092958786657,292,0,86.625,105.94599365444911,292,0,80.28571428571429,112.19583219489377,292,1,66.5,0.0,0.0,0.0,0.0,365.79466230936816,366.14419051154795,943.0,54.0,170.23529411764704,12,14,10.3.24.178,23.81.246.152,54646,443,6,17,xedefeg.com,t12d190700_d83cc789557e_2dae41c691ec,ae4edc6faf64d08308082ad26be607678491,c2_beaconing,mta_bumblebee,BumbleBee_2022-06-14.pcap,10.6.14.101:65526-172.93.181.105:443-6-1655229914607,157.94444444444446,190.450695247514,714,60,145.11111111111111,174.64209432754495,578,60,1306,23.941176470588232,35.10069548498166,83,0,40.5,43.24019294261169,98,0,41.625,39.13689344558953,83,0,44.5,0.0,0.0,0.0,0.0,295.53703703703707,269.4779869665305,714.0,60.0,157.94444444444446,12,13,10.6.14.101,172.93.181.105,65526,443,6,18,hocavopeh.com,t12d190700_d83cc789557e_2dae41c691ec,ae4edc6faf64d08308082ad26be607678501,c2_beaconing,mta_bumblebee,BumbleBee_2022-06-14.pcap,10.6.14.101:65481-193.233.203.156:443-6-1655228517697,162.88235294117646,290.8590471244064,1270,60,89.44444444444444,52.48359532061212,207,60,805,52.5,92.72755793182522,231,0,105.0,112.41250565916334,231,0,87.0,107.32815722508857,207,0,98.5,0.0,0.0,0.0,0.0,380.5363108206245,479.69657827340194,1270.0,60.0,162.88235294117646,9,12,10.6.14.101,193.233.203.156,65481,443,6,17,,t12i210600_76e208dd3e22_2dae41c691ec,76c691f46143bf86e2d1bb73c61877678510,benign,benign,ctu_normal14_win_full_2017.pcap,10.0.2.15:49169-162.125.66.3:443-6-91581,56.28571428571429,4.535573676110729,66,54,57.0,6.0,66,54,228,14.833333333333334,22.59572230902714,44,0,29.666666666666668,25.69695182961071,45,0,22.5,30.405591591021544,44,1,44.0,0.0,0.0,0.0,0.0,57.84656084656085,4.556289846124098,66.0,54.0,56.28571428571429,0,2,10.0.2.15,162.125.66.3,49169,443,6,7,,,8520,benign,benign,ctu_normal14_win_full_2017.pcap,10.0.2.15:52634-54.164.162.60:443-6-3750933,163.94736842105263,229.21859379790737,730,54,193.55555555555554,262.61383774998944,730,54,1742,305.7222222222223,1044.2184133461935,4473,0,687.875,1540.5887035712772,4473,1,597.4444444444446,1558.944122724666,4747,0,123.0,0.0,0.0,0.0,0.0,313.75588044184536,292.80369041619184,730.0,54.0,163.94736842105263,11,13,10.0.2.15,54.164.162.60,52634,443,6,19,messaging-notifications.api.nytimes.com,t12d1711h2_67e6df579eba_a29fe97f68c7,303951d4c50efb2e991652225a6f02b18530,benign,benign,ctu_normal14_win_full_2017.pcap,10.0.2.15:51917-172.217.23.206:443-6-3373714,305.28571428571433,498.07852220881233,1474,54,102.30000000000001,99.30206442969855,312,54,1023,378.55,1619.6549169499037,7258,0,841.1111111111111,2406.8565829959853,7258,0,755.0,2298.7951916891884,7296,0,10.0,0.0,0.0,0.0,0.0,479.9337662337662,549.9497682965299,1474.0,54.0,305.28571428571433,12,14,10.0.2.15,172.217.23.206,51917,443,6,21,clients5.google.com,t12d1711h2_67e6df579eba_de5ccbe16bdd,7ce1896a8d7190ee334e3c8ea463b0c18540,benign,benign,ctu_normal14_win_full_2017.pcap,10.0.2.15:52335-54.235.146.101:443-6-3523124,254.91666666666669,451.9525674099062,1474,54,214.79999999999998,381.8437143940204,1276,54,2148,138.3478260869565,465.23616766068903,2248,0,353.55555555555554,720.1491357890932,2248,1,234.6153846153846,681.8811649231287,2495,0,3.5,0.0,0.0,0.0,0.0,571.0320105820106,599.9177988193683,1474.0,54.0,254.91666666666669,16,18,10.0.2.15,54.235.146.101,52335,443,6,24,pnytimes.chartbeat.net,t12d1711h2_67e6df579eba_de5ccbe16bdd,303951d4c50efb2e991652225a6f02b18551,c2_beaconing,mta_gozi,Gozi_2023-07-12.pcap,10.7.12.121:50025-170.130.55.162:443-6-1689202871109,376.0909090909091,556.47289833386,1514,54,153.2,200.96201962891726,636,54,1532,519.8095238095239,2256.2600386269223,10359,0,1212.888888888889,3432.375651223379,10359,0,987.0000000000001,3110.773055045964,10359,0,17.5,0.0,0.0,0.0,0.0,546.3471380471381,556.9510799457449,1514.0,54.0,376.0909090909091,13,15,10.7.12.121,170.130.55.162,50025,443,6,22,iamupdate.com,t12d190700_d83cc789557e_2dae41c691ec,4ce0442e9d20d092d9d74e9ce54b363a8560,c2_beaconing,mta_emotet,Emotet_2022-07-07.pcap,10.7.7.101:57329-20.189.173.9:443-6-1657218049043,422.69999999999993,518.4889284888513,1514,54,492.3076923076923,543.4093583747255,1514,54,6400,19.896551724137936,44.61449542436229,154,0,48.08333333333334,61.212681890621525,157,0,34.0625,56.347101374723195,154,0,3.0,0.0,0.0,0.0,0.0,665.3864756158873,619.8776054892228,1514.0,54.0,422.69999999999993,22,24,10.7.7.101,20.189.173.9,57329,443,6,30,v10.events.data.microsoft.com,t12d1909h2_d83cc789557e_7af1ed941c26,678aeaf909676262acfb913ccb78a1268570,c2_beaconing,mta_icedid,IcedID_2023-05-10.pcap,172.16.10.73:50585-204.79.197.200:443-6-1683743556419,977.4244604316549,670.8016292274217,1514,54,141.6206896551724,141.80706555868267,636,54,4107,82.40579710144928,950.2342441725962,11164,0,406.1428571428571,2108.3813822243005,11164,0,104.05504587155963,1069.2756100628264,11165,0,3.0,0.0,0.0,0.0,0.0,682.5353197066172,597.6825930173732,1514.0,54.0,636.0,65,67,172.16.10.73,204.79.197.200,50585,443,6,139,th.bing.com,t13d1616h2_e72c3b3287f1_e5627efa2ab1,a66ea560599a2f5c89eec8c3a0d69cee8580,benign,benign,ctu_normal14_win_full_2017.pcap,10.0.2.15:50473-172.217.23.238:443-6-1608204,317.85,510.04718821941003,1474,54,102.30000000000001,99.30206442969855,312,54,1023,1573.9999999999998,6777.0431359603035,29559,0,3322.7777777777783,9838.850107834982,29559,0,3319.222222222222,9918.671127950782,29769,0,15.0,0.0,0.0,0.0,0.0,486.1722222222222,549.7658699195459,1474.0,54.0,312.0,11,13,10.0.2.15,172.217.23.238,50473,443,6,20,hangouts.google.com,t12d1711h2_67e6df579eba_de5ccbe16bdd,7ce1896a8d7190ee334e3c8ea463b0c18591,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:50078-194.165.16.90:443-6-1668457656286,422.1428571428571,581.95645212448,1514,54,430.4285714285715,616.7435215943265,1514,54,6026,57.33333333333333,152.35813073151036,569,0,119.07692307692308,205.97308138786062,570,0,101.61538461538461,205.45256486658036,569,0,1.0,0.0,0.0,0.0,0.0,663.3809523809524,619.9837354314599,1514.0,54.0,422.1428571428571,18,20,172.16.24.174,194.165.16.90,50078,443,6,28,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b78600,benign,benign,ctu_normal20_win_2017_https.pcap,10.0.2.15:52549-158.85.109.114:443-6-9146963,131.10526315789474,156.53323918823196,571,54,166.66666666666666,207.14729059294982,571,54,1500,975.0,2455.6119160716216,9767,1,2193.625,3420.4938631515106,9767,109,1938.111111111111,3374.5984740574854,10038,2,143.0,0.0,0.0,0.0,0.0,225.54132553606237,201.67029530741013,571.0,54.0,131.10526315789474,13,15,10.0.2.15,158.85.109.114,52549,443,6,19,www.bluehost.com,t12d1510h2_073e58a039a6_60bf0a45ed8c,266bd998df907f9d5064d7f4c208b2008611,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:51791-194.165.16.90:443-6-1668460110385,466.32,610.5326035520134,1514,54,493.1666666666667,647.6681014971864,1514,54,5918,60.916666666666664,153.98416538204765,574,0,132.9090909090909,209.88589973862204,574,0,104.33333333333334,204.4261739750089,574,0,209.0,0.0,0.0,0.0,0.0,678.3361253561253,614.6092548983562,1514.0,54.0,466.32,14,16,172.16.24.174,194.165.16.90,51791,443,6,25,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b78621,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:50858-194.165.16.90:443-6-1668458825631,435.7777777777777,592.4256093081244,1514,54,459.3846153846154,631.944425096271,1514,54,5972,54.38461538461539,137.54128890571786,492,0,117.83333333333334,186.9972451587715,493,0,91.84615384615384,180.78940149330572,492,0,1.0,0.0,0.0,0.0,0.0,668.1132817799485,618.2566902665315,1514.0,54.0,435.7777777777777,16,18,172.16.24.174,194.165.16.90,50858,443,6,27,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b78630,benign,benign,ctu_normal14_win_full_2017.pcap,10.0.2.15:49270-216.58.201.74:443-6-347240,319.27777777777777,492.2011551430807,1474,54,107.66666666666667,103.77620151075101,312,54,969,619.4705882352941,2405.1446192912977,9949,0,1316.25,3490.0736279585035,9949,0,1312.8749999999998,3605.160128700448,10235,1,31.5,0.0,0.0,0.0,0.0,486.64814814814815,549.2803010379743,1474.0,54.0,312.0,10,12,10.0.2.15,216.58.201.74,49270,443,6,18,ajax.googleapis.com,t12d1711h2_67e6df579eba_de5ccbe16bdd,f09be93fa9d03eabf66fdd359154a3fa8640,benign,benign,ctu_normal14_win_full_2017.pcap,10.0.2.15:49661-23.9.12.167:443-6-912621,302.7073170731708,498.4879258268168,1474,54,149.94117647058823,309.67472260991764,1331,54,2549,7736.124999999999,16998.373924022773,45048,0,19340.312500000004,22624.858484179887,45048,1,13452.521739130436,20791.43176422259,45101,0,37.0,0.0,0.0,0.0,0.0,589.3961289122695,603.8890085810056,1474.0,54.0,302.7073170731708,32,34,10.0.2.15,23.9.12.167,49661,443,6,41,sb.voicefive.com,t12d1711h2_67e6df579eba_de5ccbe16bdd,2b33c1374db4ddf06942f92373c0b54b8650,c2_beaconing,mta_pikabot,Pikabot_2023-05-23.pcap,10.1.0.186:55260-51.104.162.50:443-6-1684858477200,238.20833333333334,358.72030756282953,1442,54,173.63636363636363,190.40077348964354,696,54,1910,35.56521739130435,62.660576330631976,167,0,81.8,85.98811287355687,194,0,55.25,77.11163690037027,168,0,42.0,0.0,0.0,0.0,0.0,494.0767612017612,540.3226456923873,1442.0,54.0,238.20833333333334,19,21,10.1.0.186,51.104.162.50,55260,443,6,24,array603.prod.do.dsp.mp.microsoft.com,t12d1809h2_4b22cbed5bed_7af1ed941c26,a02d7ceb8c8cbb4da2e6007f5a1c91e48661,c2_beaconing,mta_pikabot,Pikabot_2023-05-23.pcap,10.1.0.186:55464-104.238.35.63:8080-6-1684859949510,355.03846153846155,522.0718326643743,1514,54,252.71428571428572,425.6414938873809,1514,54,3538,18.320000000000007,39.0680176103165,148,0,35.230769230769226,49.68258220301129,150,0,34.27272727272727,50.81356297110233,148,0,1.0,0.0,0.0,0.0,0.0,642.9077126577126,630.7271861408018,1514.0,54.0,355.03846153846155,18,20,10.1.0.186,104.238.35.63,55464,8080,6,26,turiruy.us,t13d201200_2b729b4bf6f3_2e4f304f1f45,2253c82f03b621c5144709b393fde2c98671,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:50146-194.165.16.90:443-6-1668457755616,435.7777777777777,592.4256093081244,1514,54,459.3846153846154,631.944425096271,1514,54,5972,55.30769230769231,141.22259570784536,487,0,119.83333333333336,192.1887487641125,487,0,94.0,186.32543215209958,487,0,1.0,0.0,0.0,0.0,0.0,668.1132817799485,618.2566902665315,1514.0,54.0,435.7777777777777,16,18,172.16.24.174,194.165.16.90,50146,443,6,27,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b78680,benign,benign,ctu_normal20_win_2017_https.pcap,10.0.2.15:51156-93.184.220.70:443-6-4916598,323.2916666666667,518.7853270667069,1474,54,116.36363636363637,155.39901719590938,571,54,1280,299.3478260869565,1274.4068355939933,6136,0,688.4000000000001,1917.3133517734884,6136,1,569.4166666666666,1838.0898908839297,6402,0,3.0,0.0,0.0,0.0,0.0,513.2266576016576,545.2799284974063,1474.0,54.0,323.2916666666667,15,17,10.0.2.15,93.184.220.70,51156,443,6,24,abs.twimg.com,t12d1510h2_073e58a039a6_60bf0a45ed8c,76cc3e2d3028143b23ec18e27dbd7ca98691,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:50071-194.165.16.90:443-6-1668457644912,466.32,610.5326035520134,1514,54,493.1666666666667,647.6681014971864,1514,54,5918,71.41666666666666,172.9724573869862,612,0,155.72727272727275,233.70326951460945,613,0,119.58333333333334,225.85532711866415,612,0,1.0,0.0,0.0,0.0,0.0,678.3361253561253,614.6092548983562,1514.0,54.0,466.32,14,16,172.16.24.174,194.165.16.90,50071,443,6,25,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b78700,c2_beaconing,mta_pikabot,Pikabot_2023-05-23.pcap,10.1.0.186:55206-23.221.220.66:443-6-1684858032754,381.10638297872345,503.76436149741045,1430,54,153.80000000000004,187.45935699856594,626,54,3076,705.9782608695651,4454.484649025721,30245,0,1709.2105263157896,6913.660459786579,30245,0,1245.2307692307693,5918.0619280821475,30246,0,17.0,0.0,0.0,0.0,0.0,525.8208738289117,524.1778845063961,1430.0,54.0,381.10638297872345,39,41,10.1.0.186,23.221.220.66,55206,443,6,47,assets.msn.com,t13d1616h2_e72c3b3287f1_e5627efa2ab1,15af977ce25de452b96affa2addb10368711,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:51067-194.165.16.90:443-6-1668459148138,466.32,610.5326035520134,1514,54,493.1666666666667,647.6681014971864,1514,54,5918,68.45833333333336,169.48027438553757,612,0,149.27272727272725,230.00656117123742,612,0,118.16666666666666,224.60787379274345,612,0,1.0,0.0,0.0,0.0,0.0,678.3361253561253,614.6092548983562,1514.0,54.0,466.32,14,16,172.16.24.174,194.165.16.90,51067,443,6,25,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b78721,exfil,mta_lumma,Lumma_2025-08-15.pcap,10.8.15.176:62834-5.10.250.239:443-6-1755287812367,60.0,4.898979485566356,66,54,61.5,3.0,66,60,246,74.66666666666667,81.43136168987148,150,0,99.33333333333334,86.02519010925424,149,0,150.0,0.0,150,150,148.5,0.0,0.0,0.0,0.0,60.611111111111114,4.507880616689065,66.0,54.0,60.0,0,1,10.8.15.176,5.10.250.239,62834,443,6,7,,,8731,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:51504-194.165.16.90:443-6-1668459813416,435.7777777777777,592.4256093081244,1514,54,459.3846153846154,631.944425096271,1514,54,5972,59.26923076923079,149.74019038115523,539,0,128.33333333333334,203.21387449649887,539,0,102.23076923076924,198.13301670264931,539,0,3.5,0.0,0.0,0.0,0.0,668.1132817799485,618.2566902665315,1514.0,54.0,435.7777777777777,16,18,172.16.24.174,194.165.16.90,51504,443,6,27,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b78740,benign,benign,ctu_normal14_win_full_2017.pcap,10.0.2.15:50511-172.217.16.110:443-6-1644787,865.4843049327354,667.350299355483,1474,54,126.63492063492069,191.08689980480017,977,54,7978,89.78828828828827,819.2179005307427,9444,0,321.49999999999994,1535.0061648832257,9445,0,124.76100628930823,966.6786701801478,9444,0,1.0,0.0,0.0,0.0,0.0,692.8361639519618,586.0229754247551,1474.0,54.0,865.4843049327354,166,168,10.0.2.15,172.217.16.110,50511,443,6,223,notifications.google.com,t12d1711h2_67e6df579eba_de5ccbe16bdd,f75d3cb3274309c4b0eeaad4f9d4f7c28751,exfil,mta_lumma,Lumma_2025-08-15.pcap,10.8.15.176:62827-5.10.250.239:443-6-1755287532557,60.0,4.898979485566356,66,54,61.5,3.0,66,60,246,77.33333333333333,84.7482546526279,159,0,104.0,90.11659114724658,159,0,152.5,0.7071067811865476,153,152,153.0,0.0,0.0,0.0,0.0,60.611111111111114,4.507880616689065,66.0,54.0,60.0,0,1,10.8.15.176,5.10.250.239,62827,443,6,7,,,8760,c2_beaconing,mta_qakbot,Qakbot_2023-05-10.pcap,172.16.10.73:50390-204.79.197.239:443-6-1683739719767,774.6530612244896,690.9577758149796,1514,54,146.2857142857143,174.80425473233618,571,54,2048,2577.8541666666665,10165.276559517288,45009,0,6939.0,16895.296756790038,45009,0,3638.3529411764703,16308.475191868152,90015,0,34.5,0.0,0.0,0.0,0.0,634.2154195011339,574.7734906969453,1514.0,54.0,571.0,26,28,172.16.10.73,204.79.197.239,50390,443,6,49,edge.microsoft.com,t13d1616h2_e72c3b3287f1_e5627efa2ab1,0f14538e1c9070becdad7739c67d63638770,exfil,mta_lumma,Lumma_2025-12-30.pcap,10.12.30.101:62955-52.137.106.217:443-6-1767064508249,244.99999999999997,402.8965127672365,1398,54,113.16666666666667,84.37452581236002,268,54,1358,26.279999999999998,37.29222439061527,99,0,59.72727272727273,54.900074515597716,144,0,43.38461538461538,44.70931756270808,99,0,42.0,0.0,0.0,0.0,0.0,438.01851851851853,523.1988883948037,1398.0,54.0,244.99999999999997,18,20,10.12.30.101,52.137.106.217,62955,443,6,26,settings-win.data.microsoft.com,t12d1809h2_4b22cbed5bed_7af1ed941c26,2fe9b0e731d3d41b2b84e8e1d61868368780,c2_beaconing,mta_icedid,IcedID_2023-01-12.pcap,172.18.127.129:55958-104.115.117.94:443-6-1673546307991,350.5833333333334,505.70578460178825,1514,54,113.19999999999999,96.68367666433323,288,54,1132,10.608695652173914,17.92342076328365,48,0,27.11111111111111,20.331284049737516,49,0,16.53846153846154,20.94284040197423,48,0,29.0,0.0,0.0,0.0,0.0,495.7695767195767,564.7288677509541,1514.0,54.0,288.0,18,20,172.18.127.129,104.115.117.94,55958,443,6,24,storecatalogrevocation.storequality.microsoft.com,t12d1909h2_d83cc789557e_7af1ed941c26,35af4c8cd9495354f7d701ce8ad7fd2d8790,benign,benign,ctu_normal21_kali_2017.pcap,192.168.1.191:42998-108.161.188.225:443-6-1493727211577,323.5,530.3566663561296,1514,54,106.61111111111111,124.39412644015978,571,54,1919,25.741935483870964,44.870159157236095,197,0,46.94117647058824,66.62063361699146,254,0,59.99999999999999,79.81750016965786,229,0,22.5,0.0,0.0,0.0,0.0,532.6075837742504,562.2371743429951,1514.0,54.0,323.5,26,28,192.168.1.191,108.161.188.225,42998,443,6,32,cdn2.tnwcdn.com,t12d1110h2_43e74fd21232_205f67e4d9f4,b898351eb5e266aefd3723d4669354948800,benign,benign,ctu_normal21_kali_2017.pcap,192.168.1.191:59488-104.155.94.101:443-6-1493726884650,270.17721518987344,345.5283861393197,1474,66,195.04651162790697,221.33802564106418,638,66,8387,2029.4615384615383,3659.8974923275723,10028,0,3768.357142857143,4350.090152255768,10447,0,4522.142857142858,4386.494481010181,10124,0,72.0,0.0,0.0,0.0,0.0,512.1267103871608,542.1745279502452,1474.0,66.0,270.17721518987344,47,49,192.168.1.191,104.155.94.101,59488,443,6,79,x.bidswitch.net,t12d1109h2_43e74fd21232_fed6c16fddd0,30e7675adab2c5b915e4bb356e9e1cc18810,exfil,mta_xloader,XLoader_2025-09-05.pcap,10.9.5.71:58209-20.44.239.154:443-6-1757113298232,307.8636363636364,445.54742096549535,1410,54,165.08333333333331,224.2163964214982,842,60,1981,69.90476190476193,106.42927452628096,238,0,133.45454545454547,125.60442956867695,279,0,137.22222222222223,130.00363242788427,281,0,27.0,0.0,0.0,0.0,0.0,531.3496632996633,527.6013839739973,1410.0,54.0,307.8636363636364,14,15,10.9.5.71,20.44.239.154,58209,443,6,22,settings-win.data.microsoft.com,t12d1809h2_4b22cbed5bed_7af1ed941c26,2fe9b0e731d3d41b2b84e8e1d61868368820,benign,benign,ctu_normal14_win_full_2017.pcap,10.0.2.15:49267-216.58.201.72:443-6-346816,339.1868131868132,501.41368842033717,1474,54,155.49999999999997,176.23952856431342,625,54,5598,3904.3777777777786,12244.32491482178,45060,0,10039.828571428572,18139.834519132542,45061,0,6506.888888888889,15313.934895624356,45060,0,6.5,0.0,0.0,0.0,0.0,521.011666111666,542.8258984246609,1474.0,54.0,339.1868131868132,81,83,10.0.2.15,216.58.201.72,49267,443,6,91,ssl.google-analytics.com,t12d1711h2_67e6df579eba_de5ccbe16bdd,f09be93fa9d03eabf66fdd359154a3fa8830,c2_beaconing,mta_qakbot,Qakbot_2022-06-27_0.pcap,10.6.27.101:64243-13.107.6.156:443-6-1656354126682,859.7962962962963,669.8000090038037,1514,54,148.35714285714286,181.02384336913155,571,54,2077,8.830188679245282,36.59693968345557,252,0,36.0,69.46581893276722,252,0,5.538461538461538,15.455958063999567,86,0,10.0,0.0,0.0,0.0,0.0,653.1059376837154,584.1376987988398,1514.0,54.0,571.0,34,36,10.6.27.101,13.107.6.156,64243,443,6,54,www.office.com,t13d1516h2_8daaf6152771_e5627efa2ab1,a66ea560599a2f5c89eec8c3a0d69cee8841,c2_beaconing,mta_bumblebee,BumbleBee_2022-06-14.pcap,10.6.14.101:49175-172.93.181.105:443-6-1655229962325,143.952380952381,179.06464648011237,714,60,129.63636363636363,159.95391381724468,578,60,1426,19.7,33.62971743468628,80,0,39.4,40.38206422548395,84,0,35.666666666666664,41.15823125451335,81,0,2.0,0.0,0.0,0.0,0.0,291.03208273208276,271.8682087058512,714.0,60.0,143.952380952381,13,14,10.6.14.101,172.93.181.105,49175,443,6,21,hocavopeh.com,t12d190700_d83cc789557e_2dae41c691ec,ae4edc6faf64d08308082ad26be607678851,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:51844-194.165.16.90:443-6-1668460192887,466.32,610.5326035520134,1514,54,493.1666666666667,647.6681014971864,1514,54,5918,66.62499999999999,168.3639464917025,598,0,145.36363636363637,230.05445995558216,599,0,115.00000000000001,223.98133039080815,598,0,1.0,0.0,0.0,0.0,0.0,678.3361253561253,614.6092548983562,1514.0,54.0,466.32,14,16,172.16.24.174,194.165.16.90,51844,443,6,25,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b78861,c2_beaconing,mta_icedid,IcedID_2022-01-12.pcap,10.22.5.47:50063-104.168.44.45:443-6-1642007111654,228.00000000000003,374.2210733840438,1279,60,211.18181818181822,372.9685826398299,1279,60,2323,77.58823529411764,123.3957347437146,298,0,131.9,138.884804384385,299,0,178.33333333333331,139.1612973016085,299,0,2.0,0.0,0.0,0.0,0.0,510.62337662337666,521.969301300526,1279.0,60.0,228.00000000000003,11,12,10.22.5.47,104.168.44.45,50063,443,6,18,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b78871,c2_beaconing,mta_danabot,Danabot_2023-08-03.pcap,10.8.3.101:49794-45.61.169.91:443-6-1691103427334,463.4814814814817,622.0875965471243,1514,54,782.4999999999999,686.0761339228042,1514,54,31300,50.28749999999997,161.04486313769206,1014,0,103.15384615384615,232.53800351108862,1014,0,97.75,223.67143370669905,1014,0,42.0,0.0,0.0,0.0,0.0,676.6917093245006,630.5410828354311,1514.0,54.0,463.4814814814817,45,47,10.8.3.101,45.61.169.91,49794,443,6,81,,,8881,c2_beaconing,mta_gozi,Gozi_2023-07-12.pcap,10.7.12.121:50201-170.130.55.162:443-6-1689203688012,376.4545454545455,554.998217695356,1514,54,153.2,200.96201962891726,636,54,1532,514.4285714285713,2278.632299679537,10457,0,1200.3333333333333,3471.9215140898564,10457,1,978.818181818182,3144.5407237999584,10458,0,3.0,0.0,0.0,0.0,0.0,546.4616161616161,556.9408340161756,1514.0,54.0,376.4545454545455,13,15,10.7.12.121,170.130.55.162,50201,443,6,22,iamupdate.com,t12d190700_d83cc789557e_2dae41c691ec,4ce0442e9d20d092d9d74e9ce54b363a8891,c2_beaconing,mta_icedid,IcedID_2023-03-24.pcap,10.3.24.101:51357-195.20.17.21:443-6-1679685906976,189.64705882352942,314.21030798982207,1348,54,128.375,110.80347789796905,325,54,1027,3979.625,14952.44338505695,60030,0,9096.285714285716,22464.753828418165,60030,1,7894.75,21092.15227621063,60080,1,450.0,0.0,0.0,0.0,0.0,416.1259077705156,505.76349787587867,1348.0,54.0,189.64705882352942,10,12,10.3.24.101,195.20.17.21,51357,443,6,17,keyzishaptu.com,t13d201100_2b729b4bf6f3_9e7b989ebec8,40c63d2de6442242a6b0abc7e768645f8901,c2_beaconing,mta_icedid,IcedID_2022-10-31_1.pcap,172.16.0.153:57820-198.44.140.67:8008-6-1667231303284,271.6363636363635,390.60728609186486,1354,60,276.3636363636363,412.491035715268,1354,60,3040,36.14285714285714,65.45401875689964,152,0,60.900000000000006,77.76381620722528,152,0,60.7,77.72179731438136,152,0,75.5,0.0,0.0,0.0,0.0,561.8787878787879,566.7432973627491,1354.0,60.0,271.6363636363635,15,16,172.16.0.153,198.44.140.67,57820,8008,6,22,clouditsoft.com,t12d190700_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b78911,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:50169-194.165.16.90:443-6-1668457789851,466.32,610.5326035520134,1514,54,493.1666666666667,647.6681014971864,1514,54,5918,61.04166666666667,151.7696994352518,512,0,133.1818181818182,206.2861208040028,512,0,104.5,200.827153180404,512,0,211.0,0.0,0.0,0.0,0.0,678.3361253561253,614.6092548983562,1514.0,54.0,466.32,14,16,172.16.24.174,194.165.16.90,50169,443,6,25,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b78921,c2_beaconing,mta_gozi,Gozi_2023-07-12.pcap,10.7.12.121:50500-170.130.55.162:443-6-1689205105089,375.45454545454544,553.0769969020267,1514,54,153.2,200.96201962891726,636,54,1532,528.5714285714286,2293.9872181733836,10532,0,1233.3333333333333,3489.742397369754,10532,0,1004.9090909090909,3162.3457892692713,10532,0,43.0,0.0,0.0,0.0,0.0,546.1468013468013,556.9692300718543,1514.0,54.0,375.45454545454544,12,14,10.7.12.121,170.130.55.162,50500,443,6,22,iamupdate.com,t12d190700_d83cc789557e_2dae41c691ec,4ce0442e9d20d092d9d74e9ce54b363a8931,c2_beaconing,mta_emotet,Emotet_2022-11-07_1.pcap,192.168.1.133:61110-87.251.67.168:443-6-1667842191375,187.04761904761907,288.94194506690724,1356,54,127.10000000000001,98.14213049337059,274,54,1271,4007.6499999999996,13745.162782727755,59954,0,8905.888888888889,19991.408144778376,59954,1,8001.400000000001,19086.3881234769,60003,2,49.0,0.0,0.0,0.0,0.0,411.5214526214526,510.62404899342084,1356.0,54.0,187.04761904761907,14,16,192.168.1.133,87.251.67.168,61110,443,6,21,spkdeutshnewsupp.com,t12d190800_d83cc789557e_7af1ed941c26,ec74a5c51106f0419184d0dd08fb05bc8940,c2_beaconing,mta_icedid,IcedID_2022-01-12.pcap,10.22.5.47:50462-104.125.247.139:443-6-1642008035255,730.5158730158729,661.2488333958422,1415,60,91.31481481481482,133.47845555080065,1286,60,9862,87.54183266932269,1243.974402165506,19706,0,204.4018691588785,1904.1694463397503,19706,0,152.99300699300701,1648.1236984228055,19706,0,3.0,0.0,0.0,0.0,0.0,703.0830393885949,598.702702509299,1415.0,60.0,730.5158730158729,180,181,10.22.5.47,104.125.247.139,50462,443,6,252,compass-ssl.microsoft.com,t13d1516h2_8daaf6152771_e5627efa2ab1,15af977ce25de452b96affa2addb10368950,benign,benign,ctu_normal14_win_full_2017.pcap,10.0.2.15:50089-31.13.64.21:443-6-1259405,108.06666666666666,134.71635104208858,571,54,126.5,180.46922966850295,571,54,1012,732.7857142857143,2598.6700793518753,9759,0,1465.5714285714284,3658.388892082727,9759,0,1700.1666666666667,4064.168373316572,9996,14,51.5,0.0,0.0,0.0,0.0,202.84074074074073,201.599261326406,571.0,54.0,108.06666666666666,7,9,10.0.2.15,31.13.64.21,50089,443,6,15,staticxx.facebook.com,t12d1712h2_67e6df579eba_88be6878e1da,96681175a9547081bf3d417f1a5720918960,c2_beaconing,mta_bumblebee,BumbleBee_2022-12-07.pcap,10.12.7.101:50192-139.177.146.137:443-6-1670432449755,186.64000000000001,302.9383710702008,1514,54,134.36363636363637,94.54445803670646,312,54,1478,1495.3750000000002,6930.667298398254,34021,0,3588.9,10696.063132968337,34021,0,2754.153846153846,9397.854354817326,34021,0,86.5,0.0,0.0,0.0,0.0,450.07976911976914,574.6573554115225,1514.0,54.0,186.64000000000001,20,22,10.12.7.101,139.177.146.137,50192,443,6,25,,t12i210600_76e208dd3e22_2dae41c691ec,76c691f46143bf86e2d1bb73c61877678971,c2_beaconing,mta_icedid,IcedID_2022-10-31_1.pcap,172.16.0.153:57853-198.44.140.67:8008-6-1667231449305,292.80000000000007,404.28736522949924,1354,60,297.99999999999994,428.1736407891857,1354,60,2980,41.15789473684211,69.53757030706873,156,0,69.55555555555556,82.01236356658536,157,0,69.55555555555556,81.30361478912101,157,0,2.0,0.0,0.0,0.0,0.0,568.9333333333334,563.2082070109103,1354.0,60.0,292.80000000000007,14,15,172.16.0.153,198.44.140.67,57853,8008,6,20,clouditsoft.com,t12d190700_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b78981,exfil,mta_lumma,Lumma_2025-12-30.pcap,10.12.30.101:60514-46.8.227.214:443-6-1767064548590,536.6,621.774574144546,1514,54,146.0,172.36506109335002,498,54,1168,345.1578947368421,1377.406188100498,6027,0,936.8571428571429,2246.1306305564262,6027,8,41.81818181818182,80.70912982038423,260,0,78.0,0.0,0.0,0.0,0.0,574.1777777777778,559.6117181240296,1514.0,54.0,498.0,12,14,10.12.30.101,46.8.227.214,60514,443,6,20,memory-scanner.cc,t13d201100_2b729b4bf6f3_36bf25f296df,15af977ce25de452b96affa2addb10368991,c2_beaconing,mta_pikabot,Pikabot_2023-11-02.pcap,10.11.2.101:52729-15.235.45.155:2221-6-1698934434858,233.57142857142858,356.6745815766202,1430,60,137.75,198.06157215279384,748,60,1653,7572.75,22604.382374069814,74958,0,13768.636363636364,29616.197012016,74959,1,9886.000000000002,26318.37708847999,74958,0,40.0,0.0,0.0,0.0,0.0,502.2949735449736,536.8109835444632,1430.0,60.0,233.57142857142858,14,15,10.11.2.101,15.235.45.155,52729,2221,6,21,,t12i190700_d83cc789557e_7af1ed941c26,ec74a5c51106f0419184d0dd08fb05bc9000,benign,benign,ctu_normal21_kali_2017.pcap,192.168.1.191:60230-198.47.127.15:443-6-1493726920897,194.5,340.7910615304451,1514,54,236.25000000000006,419.6936382648658,1514,54,2835,17.857142857142854,21.663992508966842,68,0,34.090909090909086,28.395262088787085,68,0,37.888888888888886,35.339229067866086,97,1,24.0,0.0,0.0,0.0,0.0,504.90555555555557,579.282131629046,1514.0,54.0,194.5,15,17,192.168.1.191,198.47.127.15,60230,443,6,22,simage2.pubmatic.com,t12d1109h2_43e74fd21232_fed6c16fddd0,ccf031939aa8979b73a604c356f7fd689011,c2_beaconing,mta_gozi,Gozi_2023-07-12.pcap,10.7.12.121:49894-170.130.55.162:443-6-1689202344299,373.54545454545456,549.5017420374248,1514,54,153.2,200.96201962891726,636,54,1532,507.5714285714285,2251.749576916327,10333,0,1184.3333333333333,3431.3624116376864,10333,1,965.0000000000002,3107.9411513090145,10334,0,17.5,0.0,0.0,0.0,0.0,545.5457912457913,557.0253582839282,1514.0,54.0,373.54545454545456,13,15,10.7.12.121,170.130.55.162,49894,443,6,22,iamupdate.com,t12d190700_d83cc789557e_2dae41c691ec,4ce0442e9d20d092d9d74e9ce54b363a9021,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:52397-77.126.81.208:443-6-1668467498788,160.42105263157893,239.47055392851627,841,54,153.1818181818182,225.16208303434138,773,54,1685,7814.444444444444,26405.853201899412,109920,0,14066.0,34919.321311974105,109920,0,20066.142857142855,41097.7792158675,109920,1,197.5,0.0,0.0,0.0,0.0,344.5530967570441,338.39731674305415,841.0,54.0,160.42105263157893,12,14,172.16.24.174,77.126.81.208,52397,443,6,19,,t12i190600_d83cc789557e_2dae41c691ec,fd4bc6cea4877646ccd62f0792ec0b629030,benign,benign,ctu_normal21_kali_2017.pcap,192.168.1.191:35638-172.217.23.234:443-6-1493727211579,117.91304347826086,110.42064737896139,583,66,137.66666666666669,146.98010584821168,583,66,1652,35.54545454545455,106.7764586470825,496,0,70.81818181818181,146.0950500063696,496,0,77.29999999999998,183.50782605170338,590,0,7.5,0.0,0.0,0.0,0.0,214.88259405650712,201.9187912367406,583.0,66.0,117.91304347826086,15,16,192.168.1.191,172.217.23.234,35638,443,6,23,imasdk.googleapis.com,t12d1110h2_43e74fd21232_205f67e4d9f4,2de81c22ea32a57162df5cb08d4a27959040,benign,benign,ctu_normal20_win_2017_https.pcap,10.0.2.15:49594-172.217.22.228:443-6-2359418,193.29078014184387,268.4441825197052,1474,54,151.2222222222222,159.5616418902864,750,54,9527,4879.257142857143,15936.760141832276,66839,0,11017.677419354837,22583.621590075938,66840,0,8870.974025974028,20755.310085914745,66840,0,6.0,0.0,0.0,0.0,0.0,492.4202481259219,562.3543250929334,1474.0,54.0,193.29078014184387,132,134,10.0.2.15,172.217.22.228,49594,443,6,141,www.google.com,t12d1510h2_073e58a039a6_60bf0a45ed8c,67619a80665d7ab92d1041b1d11f91649050,c2_beaconing,mta_qakbot,Qakbot_2022-09-29.pcap,10.9.29.201:50145-187.189.68.8:443-6-1664422595973,64.0,4.898979485566356,66,54,66.0,0.0,66,66,330,15000.4,25280.720634507237,59969,1015,3758.25,3095.1903953284254,8011,1015,0.0,0.0,0,0,4001.0,0.0,0.0,0.0,0.0,60.44444444444444,5.7948465824023545,66.0,54.0,64.0,0,1,10.9.29.201,187.189.68.8,50145,443,6,6,,,9061,c2_beaconing,mta_pikabot,Pikabot_2023-11-02.pcap,10.11.2.101:52836-15.235.44.231:5938-6-1698943615631,232.95454545454544,350.3292977801269,1430,60,152.41666666666666,210.20399543531445,748,60,1829,4795.476190476191,16879.54483574438,74908,0,9146.090909090908,22937.934538465077,74908,0,11180.333333333332,25151.989175808736,74908,0,98.0,0.0,0.0,0.0,0.0,500.3301346801347,536.7874219738859,1430.0,60.0,232.95454545454544,14,15,10.11.2.101,15.235.44.231,52836,5938,6,22,,t12i190700_d83cc789557e_7af1ed941c26,ec74a5c51106f0419184d0dd08fb05bc9071,c2_beaconing,mta_icedid,IcedID_2022-01-12.pcap,10.22.5.47:50020-104.168.44.45:443-6-1642006934346,219.21052631578942,365.7496987083696,1279,60,211.27272727272728,373.0335349292583,1279,60,2324,73.94444444444443,121.53453744039048,307,0,133.1,140.17485112847058,307,0,146.14285714285714,134.37190749486862,264,0,5.0,0.0,0.0,0.0,0.0,506.95647262094633,523.8724558061662,1279.0,60.0,219.21052631578942,12,13,10.22.5.47,104.168.44.45,50020,443,6,19,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b79080,c2_beaconing,mta_emotet,Emotet_2022-11-07_1.pcap,192.168.1.133:60279-54.37.70.105:8080-6-1667841884543,1283.844102564099,516.8200319372157,1514,54,58.40433212996391,56.68437643556899,980,54,16178,2.524371472550026,68.65500191287303,2971,0,17.818840579710155,182.02394389978662,2971,0,2.8654306220095678,74.11465361347469,2972,0,1.0,0.0,0.0,0.0,0.0,777.6655131329725,664.3905511047798,1514.0,54.0,980.0,819,821,192.168.1.133,54.37.70.105,60279,8080,6,1950,,t12i190700_d83cc789557e_7af1ed941c26,ec74a5c51106f0419184d0dd08fb05bc9091,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:50355-194.165.16.90:443-6-1668458066808,450.4615384615385,603.0142439955614,1514,54,459.3846153846154,631.944425096271,1514,54,5972,62.56,149.2436709992532,474,0,130.33333333333334,197.8839574247003,474,0,108.08333333333333,195.78906011472156,474,0,1.0,0.0,0.0,0.0,0.0,672.8205128205128,616.4463618420267,1514.0,54.0,450.4615384615385,16,18,172.16.24.174,194.165.16.90,50355,443,6,26,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b79101,c2_beaconing,mta_pikabot,Pikabot_2023-11-02.pcap,10.11.2.101:53007-45.32.140.39:2078-6-1698961164924,233.0909090909091,350.60449961675505,1430,60,145.23076923076923,202.63314710997386,747,60,1888,7201.285714285715,22340.238783734734,75097,0,12602.25,28865.7401181432,75097,0,9683.499999999998,26439.07488115703,75097,0,84.0,0.0,0.0,0.0,0.0,502.8135198135198,536.2668724998402,1430.0,60.0,233.0909090909091,14,15,10.11.2.101,45.32.140.39,53007,2078,6,22,,t12i190700_d83cc789557e_7af1ed941c26,ec74a5c51106f0419184d0dd08fb05bc9110,benign,benign,ctu_normal21_kali_2017.pcap,192.168.1.191:52976-54.239.29.3:443-6-1493726808824,84.68749999999999,65.27860164964727,279,54,94.875,76.73784221993364,279,54,759,359.26666666666665,1252.8251198600628,4884,0,769.2857142857143,1879.4702014384902,5030,1,753.5714285714286,1868.4211567651494,4988,0,25.0,0.0,0.0,0.0,0.0,131.5625,90.96718921616127,279.0,54.0,84.68749999999999,8,10,192.168.1.191,54.239.29.3,52976,443,6,16,payments.amazon.com,t12d1109h2_43e74fd21232_fed6c16fddd0,d199ba0af2b08e204c73d6d81a1fd2609120,exfil,mta_koistealer,KoiStealer_2025-07-08.pcap,10.7.8.101:54908-52.109.8.89:443-6-1752006992048,398.7142857142857,607.2370502240744,1514,54,112.66666666666667,86.69640515423154,236,54,676,19.23076923076923,29.62024602124321,69,0,50.0,47.312788968734445,111,2,19.857142857142858,32.24607764999526,69,0,46.0,0.0,0.0,0.0,0.0,505.62566137566137,567.2215554727424,1514.0,54.0,236.0,9,11,10.7.8.101,52.109.8.89,54908,443,6,14,officeclient.microsoft.com,t12d180700_4b22cbed5bed_2dae41c691ec,ae4edc6faf64d08308082ad26be607679131,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:51986-194.165.16.90:443-6-1668460420814,450.4615384615385,603.0142439955614,1514,54,459.3846153846154,631.944425096271,1514,54,5972,56.400000000000006,141.7583036956448,494,0,117.5,190.3353499866629,495,0,99.08333333333333,189.53697568420563,494,0,1.0,0.0,0.0,0.0,0.0,672.8205128205128,616.4463618420267,1514.0,54.0,450.4615384615385,16,18,172.16.24.174,194.165.16.90,51986,443,6,26,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b79140,benign,benign,ctu_normal14_win_full_2017.pcap,10.0.2.15:50961-131.253.61.64:443-6-2529461,64.16666666666667,17.6908639321732,99,54,73.0,23.302360395462088,99,54,219,47.599999999999994,62.938859220675425,119,0,62.0,82.02438661763951,120,4,59.5,77.07463914933368,114,5,59.0,0.0,0.0,0.0,0.0,67.83333333333333,17.66946169364562,99.0,54.0,58.0,2,4,10.0.2.15,131.253.61.64,50961,443,6,6,,,9150,exfil,mta_astaroth,Astaroth_2023-01-04_0.pcap,10.1.4.101:49693-142.251.40.232:443-6-1672807431713,720.6219512195125,640.5947398681657,1514,54,91.9642857142857,110.44035834477697,571,54,2575,1031.0987654320986,6513.528916042628,45005,0,3093.2962962962965,11131.824391960523,45005,0,1574.9433962264152,11420.269539819059,83147,0,3.0,0.0,0.0,0.0,0.0,624.4643143918212,580.4872820653366,1514.0,54.0,571.0,68,70,10.1.4.101,142.251.40.232,49693,443,6,82,www.googletagmanager.com,t13d1616h2_e72c3b3287f1_e5627efa2ab1,eb1d94daa7e0344597e756a1fb6e70549160,benign,benign,ctu_normal14_win_full_2017.pcap,10.0.2.15:52709-172.217.23.193:443-6-3820061,300.9523809523809,499.97114678653963,1474,54,102.89999999999999,100.41961959696918,312,54,1029,318.2,1353.4933981912761,6068,0,707.1111111111112,2010.5056854212353,6068,1,634.5,1923.329303866374,6108,0,20.0,0.0,0.0,0.0,0.0,478.53915343915344,550.0472962727389,1474.0,54.0,300.9523809523809,12,14,10.0.2.15,172.217.23.193,52709,443,6,21,lh3.googleusercontent.com,t12d1711h2_67e6df579eba_de5ccbe16bdd,7ce1896a8d7190ee334e3c8ea463b0c19171,c2_beaconing,mta_icedid,IcedID_2022-01-12.pcap,10.22.5.47:50151-104.168.44.45:443-6-1642007415907,211.20000000000007,357.73462672474795,1279,60,198.58333333333337,358.27959075492305,1279,60,2383,63.789473684210535,111.635607097063,331,0,110.18181818181819,129.8312891269421,331,0,125.85714285714285,117.63138551059771,235,0,214.0,0.0,0.0,0.0,0.0,504.6564814814815,525.1743432414038,1279.0,60.0,211.20000000000007,12,13,10.22.5.47,104.168.44.45,50151,443,6,20,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b79181,c2_beaconing,mta_pikabot,Pikabot_2023-11-02.pcap,10.11.2.101:53025-95.179.141.41:1194-6-1698962980836,223.86956521739128,341.19273470201375,1430,60,145.3076923076923,202.8806646838582,748,60,1889,4338.5,16271.757129192549,75009,0,7940.916666666667,21779.71353621753,75009,0,10587.0,24928.145282992875,75009,0,160.0,0.0,0.0,0.0,0.0,498.13080639167595,537.938782678498,1430.0,60.0,223.86956521739128,14,15,10.11.2.101,95.179.141.41,53025,1194,6,23,,t12i190700_d83cc789557e_7af1ed941c26,ec74a5c51106f0419184d0dd08fb05bc9190,benign,benign,ctu_normal14_win_full_2017.pcap,10.0.2.15:49965-45.55.217.192:443-6-1121302,721.5617021276594,678.1849388975826,1474,54,170.58181818181816,285.1807543055152,953,54,9382,136.61965811965808,1246.1328216629372,13825,0,592.0185185185184,2560.370082998695,13825,0,177.77094972067047,1455.876340611159,14121,0,1.0,0.0,0.0,0.0,0.0,649.4511318862383,558.5625565192464,1474.0,54.0,721.5617021276594,182,184,10.0.2.15,45.55.217.192,49965,443,6,235,anon-sms.com,t12d1712h2_67e6df579eba_88be6878e1da,c6227321ea7621862dc7b7351771a62c9201,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:50151-194.165.16.90:443-6-1668457763179,435.77777777777777,589.6705294767014,1514,54,459.3846153846154,631.944425096271,1514,54,5972,63.38461538461538,164.99141236393535,643,0,137.25000000000003,226.19425481008778,644,0,110.92307692307692,220.34611468417194,643,0,1.0,0.0,0.0,0.0,0.0,668.1132817799485,618.2566902665315,1514.0,54.0,435.77777777777777,16,18,172.16.24.174,194.165.16.90,50151,443,6,27,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b79210,c2_beaconing,mta_emotet,Emotet_2022-11-07_0.pcap,192.168.1.133:52510-191.6.220.6:465-6-1667838390225,66.0,0.0,66,66,66.0,0.0,66,66,330,3758.0,3102.0529761218886,8014,1001,3758.0,3102.0529761218886,8014,1001,0.0,0.0,0,0,3008.5,0.0,0.0,0.0,0.0,66.0,0.0,66.0,66.0,66.0,0,0,192.168.1.133,191.6.220.6,52510,465,6,5,,,9221,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:51356-194.165.16.90:443-6-1668459587146,466.32,610.5326035520134,1514,54,493.1666666666667,647.6681014971864,1514,54,5918,65.83333333333334,159.8933521381393,567,0,143.63636363636363,216.24859432018175,568,0,112.41666666666666,210.545809454351,567,0,1.0,0.0,0.0,0.0,0.0,678.3361253561253,614.6092548983562,1514.0,54.0,466.32,14,16,172.16.24.174,194.165.16.90,51356,443,6,25,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b79230,benign,benign,ctu_normal21_kali_2017.pcap,192.168.1.191:41650-172.217.23.238:443-6-1493726748953,663.0827266710781,670.9189174661989,1484,54,177.66723549488069,298.59749116171565,1434,66,104113,163.75231788079464,2263.948013229314,59647,0,422.48376068376064,3628.904288122753,59647,0,267.599567099567,2895.838915538158,59703,0,10.0,0.0,0.0,0.0,0.0,709.705551351773,610.2118923785796,1484.0,54.0,663.0827266710781,1143,1150,192.168.1.191,172.217.23.238,41650,443,6,1511,www.youtube.com,t12d1110h2_43e74fd21232_205f67e4d9f4,554786d4c84f8a7953b7e453c63710679240,benign,benign,ctu_normal14_win_full_2017.pcap,10.0.2.15:50410-104.17.163.12:443-6-1535825,116.16666666666666,150.73084581062986,571,54,150.66666666666666,206.86581802382594,571,54,904,1341.0,4412.118334768459,14644,0,2950.2,6537.0526003696805,14644,1,2941.2,6542.069298012671,14644,6,21.5,0.0,0.0,0.0,0.0,207.61111111111111,200.67364944169157,571.0,54.0,116.16666666666666,5,7,10.0.2.15,104.17.163.12,50410,443,6,12,mellowads.com,t12d1712h2_67e6df579eba_88be6878e1da,c23237dbea656869600e48dfbd00ab7b9250,c2_beaconing,mta_emotet,Emotet_2022-11-07_1.pcap,192.168.1.133:60755-162.214.67.105:465-6-1667842053348,214.65116279069758,371.8030638287226,1514,54,111.23529411764707,49.55240838214212,230,54,1891,21.45238095238096,34.27663812310168,98,0,56.312499999999986,42.03287403925646,126,0,33.120000000000005,42.94698281990637,142,0,1.0,0.0,0.0,0.0,0.0,447.57285418639725,575.5452673328203,1514.0,54.0,214.65116279069758,38,40,192.168.1.133,162.214.67.105,60755,465,6,43,,t12i280600_d943125447b4_a8cc486ca5dc,0debd3853f330c574b05e0b6d882dc279260,c2_beaconing,mta_icedid,IcedID_2022-01-12.pcap,10.22.5.47:50431-13.107.246.69:443-6-1642008008850,807.7627118644064,659.3147142229669,1415,60,80.16470588235293,77.66776727078698,571,60,6814,122.21702127659573,1718.0275585731235,26293,0,341.91666666666663,2871.4866482860652,26293,0,190.98000000000005,2156.06309899447,26363,0,1.0,0.0,0.0,0.0,0.0,631.8072406767923,566.6162397119008,1415.0,60.0,571.0,168,169,10.22.5.47,13.107.246.69,50431,443,6,236,logincdn.msauth.net,t13d1516h2_8daaf6152771_e5627efa2ab1,0f14538e1c9070becdad7739c67d63639270,benign,benign,ctu_normal20_win_2017_https.pcap,10.0.2.15:52521-216.58.211.42:443-6-9132539,463.35051546391765,620.8386807583538,1474,54,85.38709677419354,57.82829608381168,264,54,2647,2132.0208333333326,11493.402206189674,68821,0,6822.466666666667,19991.852008761718,68822,1,3148.292307692308,13917.952614926744,68823,0,2.0,0.0,0.0,0.0,0.0,507.0684889018777,552.0104875507434,1474.0,54.0,264.0,79,81,10.0.2.15,216.58.211.42,52521,443,6,97,ajax.googleapis.com,t12d1509h2_073e58a039a6_e70312a1ce2c,ab41313cfec25328b20865eb1388e0a29280,c2_beaconing,mta_emotet,Emotet_2022-11-07_1.pcap,192.168.1.133:60780-114.147.58.70:465-6-1667842070917,64.0,4.898979485566356,66,54,66.0,0.0,66,66,330,15000.6,25290.711858308776,59987,999,3754.0,3096.244714704142,8000,999,0.0,0.0,0,0,4016.0,0.0,0.0,0.0,0.0,60.44444444444444,5.7948465824023545,66.0,54.0,64.0,0,1,192.168.1.133,114.147.58.70,60780,465,6,6,,,9290,benign,benign,ctu_normal21_kali_2017.pcap,192.168.1.191:37178-151.101.112.69:443-6-1493727013885,996.818181818182,691.0993378744134,1514,54,72.2130177514793,54.24066363379236,583,54,12204,8.186234817813764,68.51598274323533,1210,0,24.071428571428562,123.41767706094863,1210,0,11.858461538461542,88.5229880381705,1236,0,3.0,0.0,0.0,0.0,0.0,703.3521373754974,637.7020942325039,1514.0,54.0,583.0,326,331,192.168.1.191,151.101.112.69,37178,443,6,495,j.gifs.com,t12d1110h2_43e74fd21232_205f67e4d9f4,d199ba0af2b08e204c73d6d81a1fd2609301,c2_beaconing,mta_pikabot,Pikabot_2023-11-02.pcap,10.11.2.101:53028-104.238.144.171:2221-6-1698963339697,250.4,366.7144881095833,1430,60,161.00000000000003,218.87850511185425,750,60,1771,3503.0,14882.743273111088,64951,0,6655.7,20486.661259626144,64951,0,8312.375,22911.99416361595,65008,0,51.5,0.0,0.0,0.0,0.0,506.7851851851852,534.3324241833053,1430.0,60.0,250.4,12,13,10.11.2.101,104.238.144.171,53028,2221,6,20,,t12i190700_d83cc789557e_7af1ed941c26,ec74a5c51106f0419184d0dd08fb05bc9310,benign,benign,ctu_normal14_win_full_2017.pcap,10.0.2.15:52202-104.120.243.32:443-6-3415052,105.13333333333333,134.93271691935243,571,54,136.85714285714286,192.34381418996261,571,54,958,85.5,185.39095903605357,703,0,199.5,263.8179296408794,704,0,163.85714285714286,245.7949203241248,704,0,52.0,0.0,0.0,0.0,0.0,203.2628306878307,201.98838825281535,571.0,54.0,105.13333333333333,7,9,10.0.2.15,104.120.243.32,52202,443,6,15,ssum-sec.casalemedia.com,t12d1712h2_67e6df579eba_88be6878e1da,410b9bedaf65dd26c6fe547154d60db49320,exfil,mta_stealc,StealC_2025-06-18.pcap,172.16.1.128:57354-52.167.17.97:443-6-1750264207114,441.128205128205,595.5655949328724,1514,54,347.7058823529411,560.0814410317801,1514,54,5911,17.73684210526316,33.44110127706688,116,0,42.125,45.949066004290735,116,0,28.333333333333332,47.02481614353567,159,0,42.0,0.0,0.0,0.0,0.0,667.3502521443697,619.6878962145387,1514.0,54.0,441.128205128205,26,28,172.16.1.128,52.167.17.97,57354,443,6,39,settings-win.data.microsoft.com,t12d1809h2_4b22cbed5bed_7af1ed941c26,2fe9b0e731d3d41b2b84e8e1d61868369330,c2_beaconing,mta_emotet,Emotet_2022-04-25.pcap,10.4.25.101:50055-74.208.5.13:465-6-1650907807344,63.0,3.1622776601683795,66,60,66.0,0.0,66,66,330,261.77777777777777,235.3905147716119,515,53,572.75,16.87947471536561,594,556,575.75,9.215023964519405,587,566,80.0,0.0,0.0,0.0,0.0,63.0,2.8284271247461903,66.0,60.0,63.0,0,9,10.4.25.101,74.208.5.13,50055,465,6,10,,,9341,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:51715-194.165.16.90:443-6-1668459974133,466.32,610.5326035520134,1514,54,493.1666666666667,647.6681014971864,1514,54,5918,63.41666666666666,156.66106218775965,538,0,138.36363636363635,212.83950419378104,539,0,106.25,205.4985622599562,538,0,1.0,0.0,0.0,0.0,0.0,678.3361253561253,614.6092548983562,1514.0,54.0,466.32,14,16,172.16.24.174,194.165.16.90,51715,443,6,25,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b79350,c2_beaconing,mta_qakbot,Qakbot_2023-05-10.pcap,172.16.10.73:50484-204.79.197.222:443-6-1683740628042,317.1666666666665,469.84699637222326,1514,54,191.6470588235294,270.6039405608478,920,54,3258,22.885714285714286,83.58925185219738,490,0,50.06250000000001,120.00803792524344,490,0,41.77777777777778,114.31872655794442,490,0,46.0,0.0,0.0,0.0,0.0,560.9208233000802,570.5378948291552,1514.0,54.0,317.1666666666665,30,32,172.16.10.73,204.79.197.222,50484,443,6,36,fp.msedge.net,t12d1809h2_4b22cbed5bed_7af1ed941c26,a66ea560599a2f5c89eec8c3a0d69cee9360,c2_beaconing,mta_qakbot,Qakbot_2022-09-29.pcap,10.9.29.201:49944-41.104.80.233:443-6-1664413458279,61.5,6.2105900340811875,66,54,66.0,0.0,66,66,330,2653.857142857143,2501.2952263824855,6188,502,3097.25,2491.8274920226722,6688,1003,6696.0,8.48528137423857,6702,6690,2011.0,0.0,0.0,0.0,0.0,60.166666666666664,5.676462121975467,66.0,54.0,61.5,0,5,10.9.29.201,41.104.80.233,49944,443,6,8,,,9370,benign,benign,ctu_normal20_win_2017_https.pcap,10.0.2.15:65346-52.72.26.162:443-6-10337691,221.11538461538464,363.9151908808509,1474,54,101.0,69.90513051791888,240,54,1212,174.00000000000006,391.5301180411711,1786,0,395.45454545454544,523.5004037508211,1786,2,325.00000000000006,521.9045251129112,1788,0,3.5,0.0,0.0,0.0,0.0,444.020757020757,557.9153072069432,1474.0,54.0,221.11538461538464,21,23,10.0.2.15,52.72.26.162,65346,443,6,26,issuu.com,t12d1509h2_073e58a039a6_e70312a1ce2c,49b45fc1ab090aa3a159778313fc9b9e9381,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:51929-194.165.16.90:443-6-1668460337015,450.4615384615385,603.6125400134912,1514,54,459.3846153846154,631.944425096271,1514,54,5972,57.800000000000004,148.10778732621276,572,0,120.41666666666667,199.58796572089724,572,0,102.75,199.72122616742112,572,0,1.0,0.0,0.0,0.0,0.0,672.8205128205128,616.4463618420267,1514.0,54.0,450.4615384615385,16,18,172.16.24.174,194.165.16.90,51929,443,6,26,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b79391,c2_beaconing,mta_bumblebee,BumbleBee_2022-06-14.pcap,10.6.14.101:65415-193.233.203.156:443-6-1655226626560,162.88235294117646,290.8590471244064,1270,60,89.44444444444444,52.48359532061212,207,60,805,49.49999999999999,86.92295439065563,198,0,99.0,105.32941523755704,200,0,85.57142857142857,105.49700966197595,201,0,3.5,0.0,0.0,0.0,0.0,380.5363108206245,479.69657827340194,1270.0,60.0,162.88235294117646,9,12,10.6.14.101,193.233.203.156,65415,443,6,17,,t12i210600_76e208dd3e22_2dae41c691ec,76c691f46143bf86e2d1bb73c61877679401,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_0.pcap,172.16.24.174:49905-190.11.198.68:443-6-1668454861098,64.0,4.898979485566356,66,54,66.0,0.0,66,66,330,15000.6,25274.040531739283,59957,1014,3761.5,3096.2947211142546,8016,1014,0.0,0.0,0,0,4002.0,0.0,0.0,0.0,0.0,60.44444444444444,5.7948465824023545,66.0,54.0,64.0,0,1,172.16.24.174,190.11.198.68,49905,443,6,6,,,9411,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:50698-194.165.16.90:443-6-1668458593763,435.77777777777777,589.6705294767014,1514,54,459.3846153846154,631.944425096271,1514,54,5972,51.57692307692308,131.91911857708058,467,0,111.75000000000001,179.72510574865058,468,0,86.46153846153847,173.29580461579528,467,0,2.0,0.0,0.0,0.0,0.0,668.1132817799485,618.2566902665315,1514.0,54.0,435.77777777777777,16,18,172.16.24.174,194.165.16.90,50698,443,6,27,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b79420,c2_beaconing,mta_pikabot,Pikabot_2023-05-23.pcap,10.1.0.186:55123-20.44.10.122:443-6-1684857598221,358.58064516129036,521.8978044402658,1442,54,215.5625,379.4717325879931,1381,54,3449,3663.866666666667,19965.29656719609,109373,0,7327.733333333334,28230.001521852766,109373,0,7844.928571428572,29221.815697981758,109373,0,14.5,0.0,0.0,0.0,0.0,612.4751642771804,590.1797384627603,1442.0,54.0,358.58064516129036,23,25,10.1.0.186,20.44.10.122,55123,443,6,31,teams.events.data.microsoft.com,t12d180800_4b22cbed5bed_7af1ed941c26,986571066668055ae9481cb84fda634a9431,exfil,mta_lumma,Lumma_2024-10-03.pcap,10.10.3.101:49888-104.21.90.47:443-6-1727930385662,329.66666666666663,462.3825765086997,1514,54,143.375,111.10733227701171,356,54,1147,43.64705882352941,145.15549471879743,603,0,106.0,221.60776159692603,606,0,77.77777777777777,197.9695543371365,603,0,3.0,0.0,0.0,0.0,0.0,499.7490740740741,560.8053691289838,1514.0,54.0,329.66666666666663,15,17,10.10.3.101,104.21.90.47,49888,443,6,18,highawaretemptersudwu.xyz,t12d190800_d83cc789557e_7af1ed941c26,6d6b821affda5de6562d217770a7ead09441,c2_beaconing,mta_gozi,Gozi_2023-07-12.pcap,10.7.12.121:50279-170.130.55.162:443-6-1689204084775,391.80952380952385,575.5847130568721,1514,54,164.2222222222222,209.92187700295662,636,54,1478,561.1,2347.099641326671,10518,0,1402.75,3688.301767557995,10518,0,1016.5454545454545,3156.229154026569,10519,0,36.0,0.0,0.0,0.0,0.0,549.3924162257496,555.5815419862272,1514.0,54.0,391.80952380952385,11,13,10.7.12.121,170.130.55.162,50279,443,6,21,iamupdate.com,t12d190700_d83cc789557e_2dae41c691ec,4ce0442e9d20d092d9d74e9ce54b363a9451,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:51518-194.165.16.90:443-6-1668459836730,466.32,610.5326035520134,1514,54,493.1666666666667,647.6681014971864,1514,54,5918,65.16666666666667,159.46504773546886,578,0,142.18181818181816,216.0688863218479,578,0,107.41666666666666,207.40231362492005,578,0,2.0,0.0,0.0,0.0,0.0,678.3361253561253,614.6092548983562,1514.0,54.0,466.32,14,16,172.16.24.174,194.165.16.90,51518,443,6,25,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b79460,benign,benign,ctu_normal21_kali_2017.pcap,192.168.1.191:52084-37.157.2.24:443-6-1493726978543,121.80000000000001,136.30910251546456,583,66,147.62500000000003,178.27982619626772,583,66,1181,384.7857142857142,1310.2389199960926,4934,0,769.0,1867.7861226596583,5003,3,879.0,2000.6765855579958,4959,1,39.0,0.0,0.0,0.0,0.0,218.6345238095238,201.7549500076955,583.0,66.0,121.80000000000001,8,9,192.168.1.191,37.157.2.24,52084,443,6,15,dmp.adform.net,t12d1110h2_43e74fd21232_205f67e4d9f4,57df70f7b256d75f6e1232daa61a70929471,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:50043-194.165.16.90:443-6-1668457604848,435.77777777777777,589.6705294767014,1514,54,459.3846153846154,631.944425096271,1514,54,5972,59.00000000000001,156.96776739190756,634,0,127.83333333333331,215.6701325186361,635,0,101.9230769230769,209.71189027586612,634,0,2.0,0.0,0.0,0.0,0.0,668.1132817799485,618.2566902665315,1514.0,54.0,435.77777777777777,16,18,172.16.24.174,194.165.16.90,50043,443,6,27,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b79481,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:50248-194.165.16.90:443-6-1668457902257,466.32,610.5326035520134,1514,54,493.1666666666667,647.6681014971864,1514,54,5918,63.541666666666664,159.47740174290107,565,0,138.63636363636365,217.22949741104347,565,0,109.66666666666667,211.88733427046182,565,0,209.0,0.0,0.0,0.0,0.0,678.3361253561253,614.6092548983562,1514.0,54.0,466.32,14,16,172.16.24.174,194.165.16.90,50248,443,6,25,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b79491,c2_beaconing,mta_emotet,Emotet_2022-07-07.pcap,10.7.7.101:57427-52.18.235.51:443-6-1657219997220,351.08333333333337,471.12870176119435,1294,54,132.45454545454547,175.92291700421728,619,54,1457,2941.8260869565215,13704.493269966651,65796,0,6766.2,20744.82344425552,65796,0,5634.333333333333,18949.980510104317,65797,0,1.0,0.0,0.0,0.0,0.0,487.62386687386686,474.8063770406759,1294.0,54.0,351.08333333333337,13,15,10.7.7.101,52.18.235.51,57427,443,6,24,distinctive-obi-mgw.aws-euw1.cloud-ara.tyk.io,t12d190700_d83cc789557e_2dae41c691ec,394441ab65754e2207b1e1b457b3641d9501,c2_beaconing,mta_icedid,IcedID_2023-09-28.pcap,10.10.20.147:50991-141.98.80.158:443-6-1695923288107,430.1212121212121,614.7214693245103,1514,54,374.18749999999994,587.756550367582,1514,54,5987,38.4375,107.22389523645099,371,0,82.0,147.66371060139127,372,0,54.93749999999999,124.41782763468157,371,0,1.0,0.0,0.0,0.0,0.0,665.6748242226183,619.615611944142,1514.0,54.0,430.1212121212121,17,19,10.10.20.147,141.98.80.158,50991,443,6,33,umomrmwa.com,t12d190800_d83cc789557e_7af1ed941c26,f176ba63b4d68e576b5ba345bec2c7b79510,benign,benign,ctu_normal14_win_full_2017.pcap,10.0.2.15:52699-172.217.23.238:443-6-3782646,174.9069767441861,264.91794003080673,1431,54,280.7894736842106,370.0928680671272,1431,54,5335,88.16666666666666,365.05080947168835,2112,0,205.72222222222226,544.5151978169157,2112,0,160.08695652173913,523.8570166687123,2310,0,5.5,0.0,0.0,0.0,0.0,433.64219819574777,541.5836190851579,1431.0,54.0,174.9069767441861,35,37,10.0.2.15,172.217.23.238,52699,443,6,43,s.youtube.com,t12d1712h2_67e6df579eba_88be6878e1da,f75d3cb3274309c4b0eeaad4f9d4f7c29521,c2_beaconing,mta_icedid,IcedID_2022-12-20.pcap,10.3.24.178:54602-103.208.85.184:443-6-1671549439500,177.9,298.1009895991625,1356,54,108.22222222222223,75.26416441072368,236,54,974,3561.3157894736846,14875.360302088788,64967,0,8458.125,22840.59374658261,64967,0,6736.6,20488.748506870248,65029,0,180.5,0.0,0.0,0.0,0.0,403.447923681257,513.7581247013677,1356.0,54.0,177.9,14,16,10.3.24.178,103.208.85.184,54602,443,6,20,thinkiwond.skin,t12d190800_d83cc789557e_7af1ed941c26,ec74a5c51106f0419184d0dd08fb05bc9531,c2_beaconing,mta_icedid,IcedID_2023-05-10.pcap,172.16.10.73:50460-77.105.141.154:443-6-1683740239238,439.0740740740741,596.0429725038498,1514,54,453.30769230769226,629.1554371556874,1514,54,5893,37.38461538461539,84.74010947506589,345,0,81.0,111.78469565114082,345,0,63.00000000000001,108.34128175969369,345,0,149.0,0.0,0.0,0.0,0.0,669.137656582101,617.8149112842156,1514.0,54.0,439.0740740740741,16,18,172.16.10.73,77.105.141.154,50460,443,6,27,floatfil.com,t13d201200_2b729b4bf6f3_2e4f304f1f45,2253c82f03b621c5144709b393fde2c99540,benign,benign,ctu_normal20_win_2017_https.pcap,10.0.2.15:49687-93.184.220.78:443-6-2591437,303.78260869565224,481.2109683365819,1474,54,105.9,82.92225274315695,255,54,1059,291.22727272727275,871.1214409799961,3841,0,711.6666666666666,1287.7345417437555,3841,4,529.6666666666667,1151.5716796332451,3850,0,21.0,0.0,0.0,0.0,0.0,470.075845410628,551.947861808954,1474.0,54.0,255.0,16,18,10.0.2.15,93.184.220.78,49687,443,6,23,a1-images.myspacecdn.com,t12d1509h2_073e58a039a6_e70312a1ce2c,49b45fc1ab090aa3a159778313fc9b9e9551,c2_beaconing,mta_icedid,IcedID_2022-01-12.pcap,10.22.5.47:50066-104.168.44.45:443-6-1642007124411,219.21052631578942,365.7496987083696,1279,60,211.27272727272728,373.0335349292583,1279,60,2324,59.05555555555556,96.85676035333718,216,0,106.29999999999998,110.81521155108224,216,0,121.85714285714286,113.10382924762622,217,0,104.5,0.0,0.0,0.0,0.0,506.95647262094633,523.8724558061662,1279.0,60.0,219.21052631578942,12,13,10.22.5.47,104.168.44.45,50066,443,6,19,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b79560,benign,benign,ctu_normal20_win_2017_https.pcap,10.0.2.15:49166-52.34.37.177:443-6-189844,169.4857142857143,306.93430715311536,1474,54,96.0625,94.93960799722456,380,54,1537,1840.9117647058827,3826.0730035301526,10016,0,4172.733333333334,4909.15784844533,10017,14,3467.3333333333335,4767.754620117006,10016,0,179.0,0.0,0.0,0.0,0.0,442.9848893065998,560.1428286435521,1474.0,54.0,169.4857142857143,29,31,10.0.2.15,52.34.37.177,49166,443,6,35,tiles.services.mozilla.com,t12d1509h2_073e58a039a6_e70312a1ce2c,303951d4c50efb2e991652225a6f02b19571,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:51254-194.165.16.90:443-6-1668459428972,466.32,610.5326035520134,1514,54,493.1666666666667,647.6681014971864,1514,54,5918,62.0,154.52057693282202,574,0,135.27272727272728,210.06669936431663,575,0,104.75,203.69010553021246,574,0,223.0,0.0,0.0,0.0,0.0,678.3361253561253,614.6092548983562,1514.0,54.0,466.32,14,16,172.16.24.174,194.165.16.90,51254,443,6,25,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b79581,c2_beaconing,mta_icedid,IcedID_2022-01-12.pcap,10.22.5.47:50223-104.168.44.45:443-6-1642007573848,211.25,357.77026957179334,1279,60,198.66666666666669,358.34425635219276,1279,60,2384,2527.789473684211,10576.793457475913,46198,0,4366.181818181818,13875.675398467505,46198,0,6830.5714285714275,17453.75694854972,46408,0,210.0,0.0,0.0,0.0,0.0,504.6712962962963,525.1658433105772,1279.0,60.0,211.25,13,14,10.22.5.47,104.168.44.45,50223,443,6,20,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b79590,c2_beaconing,mta_qakbot,Qakbot_2022-06-27_1.pcap,10.6.27.101:49754-184.50.61.149:443-6-1656360626375,397.95652173913044,548.7615377342354,1514,54,123.1,119.15857781404857,388,54,1231,4133.090909090909,19319.36651063627,90630,0,10103.111111111111,30197.597720863676,90630,0,7573.166666666666,26177.22437829334,90697,0,35.0,0.0,0.0,0.0,0.0,523.1601263470828,560.2864299690036,1514.0,54.0,388.0,17,19,10.6.27.101,184.50.61.149,49754,443,6,23,kv501.prod.do.dsp.mp.microsoft.com,t12d1909h2_d83cc789557e_7af1ed941c26,35af4c8cd9495354f7d701ce8ad7fd2d9600,benign,benign,ctu_normal21_kali_2017.pcap,192.168.1.191:54154-152.163.56.2:443-6-1493727167380,179.0952380952381,258.70095541338316,1514,54,196.29032258064518,255.3123829805867,763,54,6085,1359.9516129032256,3156.425408318093,11273,0,2810.566666666667,4700.949212170059,16814,0,2704.8709677419356,4179.546217329783,11273,0,321.0,0.0,0.0,0.0,0.0,498.9803400750981,580.3703337257368,1514.0,54.0,179.0952380952381,42,45,192.168.1.191,152.163.56.2,54154,443,6,63,ums.adtechus.com,t12d1109h2_43e74fd21232_fed6c16fddd0,9611,c2_beaconing,mta_icedid,IcedID_2022-01-12.pcap,10.22.5.47:50368-104.168.44.45:443-6-1642007898910,219.21052631578942,365.7496987083696,1279,60,211.27272727272728,373.0335349292583,1279,60,2324,72.05555555555556,118.82833501574605,291,0,129.7,136.31503544689738,291,0,147.57142857142856,138.08675671820373,292,0,3.0,0.0,0.0,0.0,0.0,506.95647262094633,523.8724558061662,1279.0,60.0,219.21052631578942,12,13,10.22.5.47,104.168.44.45,50368,443,6,19,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b79620,benign,benign,ctu_normal21_kali_2017.pcap,192.168.1.191:34162-34.251.18.112:443-6-1493726572151,190.11764705882356,269.7025867397598,911,66,178.8,266.58907204409815,911,66,1788,390.4375,1462.4465332107018,5873,0,694.1111111111112,1942.5787271333718,5873,2,1018.0000000000001,2396.765653959519,5910,2,36.5,0.0,0.0,0.0,0.0,384.355929038282,365.2257496641439,911.0,66.0,190.11764705882356,11,12,192.168.1.191,34.251.18.112,34162,443,6,17,sync.go.sonobi.com,t12d1109h2_43e74fd21232_fed6c16fddd0,303951d4c50efb2e991652225a6f02b19630,benign,benign,ctu_normal20_win_2017_https.pcap,10.0.2.15:64877-52.28.153.152:443-6-9507216,224.39473684210517,395.2065173082319,1474,54,109.94444444444444,130.23393983508032,566,54,1979,1807.7837837837837,3746.003108018636,10268,0,3934.5294117647068,4764.246479214303,10269,2,3519.5263157894738,4705.036726370074,10269,0,28.0,0.0,0.0,0.0,0.0,481.97102014294995,553.1147118784987,1474.0,54.0,224.39473684210517,30,32,10.0.2.15,52.28.153.152,64877,443,6,38,t.myvisualiq.net,t12d1509h2_073e58a039a6_e70312a1ce2c,ccc514751b175866924439bdbb5bba349641,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:50351-194.165.16.90:443-6-1668458059855,466.32,610.5326035520134,1514,54,493.1666666666667,647.6681014971864,1514,54,5918,70.5,175.22432826919697,649,0,153.8181818181818,238.22922498376147,650,0,122.50000000000001,232.90946348703432,649,0,1.0,0.0,0.0,0.0,0.0,678.3361253561253,614.6092548983562,1514.0,54.0,466.32,14,16,172.16.24.174,194.165.16.90,50351,443,6,25,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b79651,c2_beaconing,mta_icedid,IcedID_2022-01-12.pcap,10.22.5.47:50260-104.168.44.45:443-6-1642007654438,211.24999999999994,357.7702695717933,1279,60,198.66666666666669,358.34425635219276,1279,60,2384,66.89473684210526,114.42071235228644,260,0,115.54545454545455,131.84184740541497,260,0,146.14285714285714,136.7850242429443,264,0,248.5,0.0,0.0,0.0,0.0,504.6712962962963,525.1658433105772,1279.0,60.0,211.24999999999994,12,13,10.22.5.47,104.168.44.45,50260,443,6,20,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b79661,c2_beaconing,mta_pikabot,Pikabot_2024-02-08.pcap,10.2.8.101:53328-104.129.55.103:2224-6-1707419531021,224.1428571428571,347.5956394597443,1514,60,123.0909090909091,112.0432546344978,422,60,1354,3061.2499999999995,9210.462762675477,30810,0,6122.499999999999,12581.532014557422,30811,0,6798.222222222223,13176.387458041921,30857,0,46.0,0.0,0.0,0.0,0.0,479.17041847041844,566.1423920686528,1514.0,60.0,224.1428571428571,12,13,10.2.8.101,104.129.55.103,53328,2224,6,21,,t12i190700_d83cc789557e_7af1ed941c26,ec74a5c51106f0419184d0dd08fb05bc9670,c2_beaconing,mta_pikabot,Pikabot_2023-05-23.pcap,52.168.112.66:443-10.1.0.186:55032-6-1684857069876,154.1111111111111,299.5836462678013,953,54,278.75,449.5,953,54,1115,12431.875,20345.693755945365,45013,0,33151.66666666667,49466.05014889842,90025,137,24851.0,23549.603705087407,45013,137,9293.0,0.0,0.0,0.0,0.0,290.029012345679,361.40938699117174,953.0,54.0,55.0,3,3,52.168.112.66,10.1.0.186,443,55032,6,9,,,9680,benign,benign,ctu_normal14_win_full_2017.pcap,10.0.2.15:51084-23.78.86.152:443-6-2674175,105.13333333333333,134.93271691935243,571,54,136.85714285714286,192.34381418996261,571,54,958,459.42857142857133,1658.1742375871727,6220,0,1071.6666666666667,2522.321919713395,6220,0,910.8571428571427,2341.2525442998403,6220,0,15.0,0.0,0.0,0.0,0.0,203.2628306878307,201.98838825281535,571.0,54.0,105.13333333333333,7,9,10.0.2.15,23.78.86.152,51084,443,6,15,cdnssl.clicktale.net,t12d1712h2_67e6df579eba_88be6878e1da,410b9bedaf65dd26c6fe547154d60db49690,c2_beaconing,mta_pikabot,Pikabot_2024-02-08.pcap,10.2.8.101:53276-13.107.246.57:443-6-1707417036731,324.5142857142857,482.7178795740885,1430,60,106.77777777777777,88.02777339504213,382,60,1922,2212.6176470588234,12878.523793191527,75098,0,4425.235294117647,18211.959266267222,75098,0,4700.375,18772.705316939984,75098,0,23.0,0.0,0.0,0.0,0.0,489.81676522460833,528.3139998125879,1430.0,60.0,324.5142857142857,28,29,10.2.8.101,13.107.246.57,53276,443,6,35,fp-afd.azureedge.net,t12d1909h2_d83cc789557e_7af1ed941c26,5311d65cbc4513b3a9318875119306259701,c2_beaconing,mta_icedid,IcedID_2022-01-12.pcap,10.22.5.47:49967-104.168.44.45:443-6-1642006728122,232.36842105263165,380.06917652891616,1279,60,235.3636363636364,397.99830972688125,1279,60,2589,71.66666666666666,116.06438375518385,277,0,129.0,135.5982628535074,279,0,149.71428571428572,135.4495161621902,277,0,10.0,0.0,0.0,0.0,0.0,510.88689526847423,521.729858697781,1279.0,60.0,232.36842105263165,12,13,10.22.5.47,104.168.44.45,49967,443,6,19,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b79710,benign,benign,ctu_normal21_kali_2017.pcap,192.168.1.191:53252-95.172.94.60:443-6-1493726478717,201.12500000000003,296.93565520720705,1093,54,238.22222222222217,361.4781382662642,1093,54,2144,12.933333333333334,15.627204606375503,47,0,20.625,18.6159493829504,47,0,27.166666666666664,25.903024276455955,59,1,16.0,0.0,0.0,0.0,0.0,393.53064373897706,406.3647938684298,1093.0,54.0,201.12500000000003,10,12,192.168.1.191,95.172.94.60,53252,443,6,16,pixel.quantserve.com,t12d1110h2_43e74fd21232_205f67e4d9f4,fbe78c619e7ea20046131294ad087f059721,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:50115-194.165.16.90:443-6-1668457711209,435.7777777777777,592.4256093081244,1514,54,459.3846153846154,631.944425096271,1514,54,5972,57.69230769230769,143.02888358111986,488,0,125.00000000000001,193.3249736959647,488,0,90.38461538461537,179.38391718208672,488,0,119.5,0.0,0.0,0.0,0.0,668.1132817799485,618.2566902665315,1514.0,54.0,435.7777777777777,16,18,172.16.24.174,194.165.16.90,50115,443,6,27,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b79730,exfil,mta_lumma,Lumma_2025-12-30.pcap,10.12.30.101:55891-142.250.113.94:443-6-1767064483087,317.96875,477.1987132161625,1514,54,226.49999999999994,389.57131271733505,1514,54,3171,8.806451612903224,17.296279667101267,70,0,21.0,25.67424130654432,70,0,13.882352941176473,20.51792616512807,70,0,17.0,0.0,0.0,0.0,0.0,626.397762345679,637.5109953493284,1514.0,54.0,317.96875,24,26,10.12.30.101,142.250.113.94,55891,443,6,32,clientservices.googleapis.com,t13d1516h2_8daaf6152771_d8a2da3f94cd,907bf3ecef1c987c889946b737b43de89740,benign,benign,ctu_normal7_general_2013.pcap,10.0.0.46:39340-77.67.96.229:443-6-1387315378069,742.234756097561,686.9807250472788,1506,54,117.74233128834354,137.907268403381,647,66,19192,250.3639143730887,2528.1709177280677,31961,0,504.9567901234568,3581.9028225817974,31999,0,498.82926829268297,3559.5429940513536,31961,0,2.0,0.0,0.0,0.0,0.0,672.4594070159422,606.1847095396964,1506.0,54.0,647.0,306,311,10.0.0.46,77.67.96.229,39340,443,6,328,humblebundle-a.akamaihd.net,t12d1810s2_27d4652c4487_736b2a1ed4d3,1a1694e1fbb28471f66676e1623a7e2b9750,benign,benign,ctu_normal14_win_full_2017.pcap,10.0.2.15:50200-31.13.91.6:443-6-1343027,108.06666666666666,134.71635104208858,571,54,126.5,180.46922966850295,571,54,1012,727.7857142857143,2591.8909396147715,9730,0,1455.5714285714284,3650.1921801983185,9730,1,1687.8333333333335,4065.780290014042,9987,11,33.0,0.0,0.0,0.0,0.0,202.84074074074073,201.599261326406,571.0,54.0,108.06666666666666,7,9,10.0.2.15,31.13.91.6,50200,443,6,15,staticxx.facebook.com,t12d1712h2_67e6df579eba_88be6878e1da,96681175a9547081bf3d417f1a5720919760,benign,benign,ctu_normal20_win_2017_https.pcap,10.0.2.15:49301-52.18.163.110:443-6-720735,206.56521739130426,375.86879070506365,1474,54,90.2,67.59815908078497,247,54,902,272.8636363636364,1106.1574974165792,5215,0,666.8888888888889,1709.341133627548,5215,1,496.6666666666667,1562.771217673233,5454,0,3.5,0.0,0.0,0.0,0.0,438.8713489409142,559.7720989755718,1474.0,54.0,206.56521739130426,15,17,10.0.2.15,52.18.163.110,49301,443,6,23,adobe.demdex.net,t12d1509h2_073e58a039a6_e70312a1ce2c,303951d4c50efb2e991652225a6f02b19770,c2_beaconing,mta_qakbot,Qakbot_2022-12-09.pcap,10.12.9.101:49808-172.64.155.106:443-6-1670629537340,506.92857142857144,626.0735330478911,1514,54,107.66666666666667,111.89795134474765,419,54,1292,12.925925925925926,36.071431190738025,162,0,31.727272727272727,52.7031135875119,163,0,20.799999999999997,46.66170041601876,162,0,22.0,0.0,0.0,0.0,0.0,558.885582010582,565.3251261445301,1514.0,54.0,419.0,23,25,10.12.9.101,172.64.155.106,49808,443,6,28,www.broadcom.com,t12d190700_d83cc789557e_2dae41c691ec,e085e0238ef6992d34d7e070139f18409781,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:51351-194.165.16.90:443-6-1668459583724,466.32,610.5326035520134,1514,54,493.1666666666667,647.6681014971864,1514,54,5918,67.125,166.41339633052647,623,0,146.45454545454544,225.85276780963463,623,0,116.0,220.67128989023058,623,0,110.0,0.0,0.0,0.0,0.0,678.3361253561253,614.6092548983562,1514.0,54.0,466.32,14,16,172.16.24.174,194.165.16.90,51351,443,6,25,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b79791,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:51260-194.165.16.90:443-6-1668459438252,466.32,610.5326035520134,1514,54,493.1666666666667,647.6681014971864,1514,54,5918,60.583333333333336,148.14913657077676,505,0,132.1818181818182,200.428450167045,506,0,102.83333333333334,194.84298262649304,505,0,1.0,0.0,0.0,0.0,0.0,678.3361253561253,614.6092548983562,1514.0,54.0,466.32,14,16,172.16.24.174,194.165.16.90,51260,443,6,25,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b79800,benign,benign,ctu_normal21_kali_2017.pcap,192.168.1.191:38082-185.29.133.33:443-6-1493726680633,59.33333333333333,8.640987597877148,74,54,59.0,10.0,74,54,236,43.8,46.91161902983097,113,0,73.0,34.698703145794944,113,51,168.0,0.0,168,168,55.0,0.0,0.0,0.0,0.0,61.592592592592595,7.56172587553498,74.0,54.0,59.33333333333333,0,2,192.168.1.191,185.29.133.33,38082,443,6,6,,,9810,benign,benign,ctu_normal20_win_2017_https.pcap,10.0.2.15:64864-216.172.188.60:5100-6-9480615,183.73684210526318,330.21017584853155,1474,54,94.66666666666667,71.50699266505339,251,54,852,392.66666666666674,1298.1831195038342,5576,0,883.5,1899.9330063377047,5576,1,766.3333333333334,1902.3890900654367,5830,0,14.0,0.0,0.0,0.0,0.0,433.70038986354774,561.4070578480519,1474.0,54.0,183.73684210526318,12,14,10.0.2.15,216.172.188.60,64864,5100,6,19,chatapi.bluehost.com,t12d1509h2_073e58a039a6_e70312a1ce2c,389ed42c02ebecc32e73aa31def07e149821,exfil,mta_lumma,Lumma_2025-08-15.pcap,10.8.15.176:62815-5.10.250.239:443-6-1755287191975,60.0,4.898979485566356,66,54,61.5,3.0,66,60,246,74.66666666666666,81.43136168987148,150,0,99.66666666666666,86.3268980870582,151,0,150.0,0.0,150,150,148.5,0.0,0.0,0.0,0.0,60.611111111111114,4.507880616689065,66.0,54.0,60.0,0,1,10.8.15.176,5.10.250.239,62815,443,6,7,,,9830,c2_beaconing,mta_icedid,IcedID_2022-01-12.pcap,10.22.5.47:50446-13.107.42.22:443-6-1642008030928,441.8148148148149,556.9478664344858,1415,60,257.91666666666663,394.3905444038326,1415,60,3095,20.73076923076923,47.045133811953555,134,0,37.54545454545454,60.362842272980544,137,0,29.357142857142854,55.370927032510124,135,0,4.0,0.0,0.0,0.0,0.0,634.8516460905349,577.2260577538682,1415.0,60.0,441.8148148148149,19,20,10.22.5.47,13.107.42.22,50446,443,6,27,account.live.com,t13d1516h2_8daaf6152771_e5627efa2ab1,0f14538e1c9070becdad7739c67d63639840,benign,benign,ctu_normal21_kali_2017.pcap,192.168.1.191:48628-23.64.15.24:443-6-1493726773856,509.34513274336257,646.3423430835282,1514,54,84.15789473684212,91.40271750291285,583,54,4797,1038.901785714286,3022.6986390209536,10029,0,2077.8035714285716,4035.346088208963,10048,0,2115.181818181818,4063.2319014361565,10047,0,12.0,0.0,0.0,0.0,0.0,591.180891942245,571.8517589708248,1514.0,54.0,509.34513274336257,82,87,192.168.1.191,23.64.15.24,48628,443,6,113,crtvmp4-a.akamaihd.net,t12d1110h2_43e74fd21232_205f67e4d9f4,73c5401bc2544038f608637524b63c6a9851,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:50093-194.165.16.90:443-6-1668457678381,435.7777777777777,592.4256093081244,1514,54,459.3846153846154,631.944425096271,1514,54,5972,52.26923076923077,134.1174284550096,465,0,113.24999999999999,182.84525250505237,466,0,88.6923076923077,177.01760016797982,465,0,106.0,0.0,0.0,0.0,0.0,668.1132817799485,618.2566902665315,1514.0,54.0,435.7777777777777,16,18,172.16.24.174,194.165.16.90,50093,443,6,27,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b79861,c2_beaconing,mta_pikabot,Pikabot_2023-10-03.pcap,10.1.2.147:49486-179.60.149.244:443-6-1696349781543,430.9062500000002,586.9049139547168,1450,60,335.05555555555554,529.120187861524,1450,60,6031,13.258064516129032,26.548029106929302,74,0,24.176470588235293,39.21293679086923,115,0,26.23076923076923,33.34704846048059,77,0,4.0,0.0,0.0,0.0,0.0,647.7894069664903,585.8551855306317,1450.0,60.0,430.9062500000002,16,17,10.1.2.147,179.60.149.244,49486,443,6,32,zzerxc.com,t12d190700_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b79871,c2_beaconing,mta_icedid,IcedID_2022-01-12.pcap,10.22.5.47:50149-104.168.44.45:443-6-1642007407014,228.05555555555557,374.25651351512465,1279,60,211.27272727272728,373.0335349292583,1279,60,2324,3927.294117647059,15966.150388261669,65884,0,6676.400000000001,20803.709638213833,65884,0,111.33333333333334,119.20011185677079,226,0,3.5,0.0,0.0,0.0,0.0,510.6396504729838,521.9601651415826,1279.0,60.0,228.05555555555557,13,14,10.22.5.47,104.168.44.45,50149,443,6,18,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b79880,benign,benign,ctu_normal14_win_full_2017.pcap,10.0.2.15:50015-45.55.217.192:443-6-1167786,746.8461538461538,669.0151289283693,1474,54,248.75,345.15410364525275,942,54,4975,17.88888888888889,57.12246738062387,313,0,84.73684210526315,109.23259693845115,313,0,21.228571428571424,63.56376951559006,317,0,1.5,0.0,0.0,0.0,0.0,659.4167870470687,551.2298489875038,1474.0,54.0,746.8461538461538,67,69,10.0.2.15,45.55.217.192,50015,443,6,91,anon-sms.com,t12d1712h2_67e6df579eba_88be6878e1da,c6227321ea7621862dc7b7351771a62c9890,benign,benign,ctu_normal20_win_2017_https.pcap,10.0.2.15:65387-104.244.42.193:443-6-10464155,552.2364253393665,618.2753710228811,1514,54,372.258785942492,535.492428656579,1514,54,116517,1063.4077010192527,6210.045736649489,64832,0,3009.5769230769242,10173.554395701402,64832,0,1647.319298245615,7698.358454639016,65135,0,3.0,0.0,0.0,0.0,0.0,693.2653756843629,606.2148190636176,1514.0,54.0,552.2364253393665,678,680,10.0.2.15,104.244.42.193,65387,443,6,884,twitter.com,t12d1509h2_073e58a039a6_e70312a1ce2c,8d2a028aa94425f76ced7826b1f390399900,c2_beaconing,mta_pikabot,Pikabot_2023-05-23.pcap,10.1.0.186:55257-13.107.219.57:443-6-1684858336977,243.64285714285714,393.93880960662625,1514,54,186.66666666666666,199.663383389811,550,54,1120,4915.846153846154,17619.88321398184,63558,0,69.6,89.68444681214241,219,0,9121.285714285714,24004.46922772428,63558,0,70.0,0.0,0.0,0.0,0.0,495.1871693121693,564.2068112791018,1514.0,54.0,243.64285714285714,10,12,10.1.0.186,13.107.219.57,55257,443,6,14,otelrules.azureedge.net,t12d180800_4b22cbed5bed_7af1ed941c26,ae4edc6faf64d08308082ad26be607679911,c2_beaconing,mta_gozi,Gozi_2023-07-12.pcap,10.7.12.121:49876-170.130.55.162:443-6-1689202210031,376.4545454545455,554.998217695356,1514,54,153.2,200.96201962891726,636,54,1532,1868.2380952380952,8482.4462857407,38888,0,4359.222222222223,12948.50063499417,38888,0,3563.272727272727,11716.41949650924,38889,0,3.0,0.0,0.0,0.0,0.0,546.4616161616161,556.9408340161756,1514.0,54.0,376.4545454545455,13,15,10.7.12.121,170.130.55.162,49876,443,6,22,iamupdate.com,t12d190700_d83cc789557e_2dae41c691ec,4ce0442e9d20d092d9d74e9ce54b363a9921,c2_beaconing,mta_gozi,Gozi_2023-07-12.pcap,10.7.12.121:50292-170.130.55.162:443-6-1689204133946,300.0689655172414,474.64362052224305,1418,54,120.13333333333333,168.24169122624352,636,54,1802,382.5,1955.1249936361462,10356,0,765.0,2761.1515713556905,10356,0,820.7692307692307,2866.2790383423985,10358,0,1.0,0.0,0.0,0.0,0.0,505.2288268564131,525.4382359018998,1418.0,54.0,300.0689655172414,21,23,10.7.12.121,170.130.55.162,50292,443,6,29,iamupdate.com,t12d190700_d83cc789557e_2dae41c691ec,4ce0442e9d20d092d9d74e9ce54b363a9930,c2_beaconing,mta_pikabot,Pikabot_2023-05-23.pcap,10.1.0.186:55331-104.238.35.63:8080-6-1684859731256,344.19230769230774,501.26137048296624,1514,54,251.64285714285717,422.77428186515016,1514,54,3523,57.400000000000006,200.83409405111806,1005,0,110.3846153846154,272.662654349515,1005,0,33.09090909090909,48.95805254593884,143,0,66.0,0.0,0.0,0.0,0.0,639.1113146113146,632.0525395260706,1514.0,54.0,344.19230769230774,17,19,10.1.0.186,104.238.35.63,55331,8080,6,26,,t13i201100_2b729b4bf6f3_2e4f304f1f45,2253c82f03b621c5144709b393fde2c99941,c2_beaconing,mta_qakbot,Qakbot_2022-09-29.pcap,10.9.29.201:50380-193.3.19.137:443-6-1664432245570,193.7142857142857,299.7841127973834,1247,54,156.75,221.8923264681646,698,54,1881,1975.5499999999997,6870.705016111597,29892,0,3591.909090909091,9127.22213441248,29892,0,4921.0,10564.70219984589,29893,1,68.0,0.0,0.0,0.0,0.0,438.60714285714283,470.90088071247254,1247.0,54.0,193.7142857142857,14,16,10.9.29.201,193.3.19.137,50380,443,6,21,,t13i201000_2b729b4bf6f3_533b6d20482b,2253c82f03b621c5144709b393fde2c99950,exfil,mta_koistealer,KoiStealer_2024-06-12.pcap,10.6.12.101:49769-23.198.7.184:443-6-1718218797297,368.09523809523813,562.4666127657628,1514,54,101.44444444444444,69.48580990229428,222,54,913,5026.15,22355.5214333118,100004,0,12565.375,35330.62302607632,100004,1,9134.090909090908,30138.200229789916,100004,0,44.0,0.0,0.0,0.0,0.0,494.402557319224,568.7239864697154,1514.0,54.0,222.0,15,17,10.6.12.101,23.198.7.184,49769,443,6,21,www.bing.com,t12d180700_4b22cbed5bed_2dae41c691ec,4b7d5f58af981be54baeda917533e5d89961,c2_beaconing,mta_emotet,Emotet_2022-07-07.pcap,10.7.7.101:57420-52.18.235.51:443-6-1657219855437,392.0588235294117,528.7988069702119,1514,54,110.56250000000001,148.78484185785413,619,54,1769,2827.2121212121215,13227.880912011135,74958,0,6219.866666666668,19425.46364170591,74959,0,5485.470588235294,18288.784647693403,74959,0,24.0,0.0,0.0,0.0,0.0,550.4332334785767,560.5518343245486,1514.0,54.0,392.0588235294117,24,26,10.7.7.101,52.18.235.51,57420,443,6,34,distinctive-obi-mgw.aws-euw1.cloud-ara.tyk.io,t12d190700_d83cc789557e_2dae41c691ec,61be9ce3d068c08ff99a857f62352f9d9970,benign,benign,ctu_normal14_win_full_2017.pcap,10.0.2.15:52474-185.33.223.203:443-6-3630414,280.94444444444446,439.96249468792917,1474,54,228.49999999999997,314.48097830279926,870,54,1828,52.88235294117647,111.6338223573736,471,0,128.42857142857144,155.28989787153697,471,1,89.22222222222223,150.85819316313066,483,0,44.0,0.0,0.0,0.0,0.0,534.704938271605,555.0998010123775,1474.0,54.0,280.94444444444446,11,13,10.0.2.15,185.33.223.203,52474,443,6,18,secure.adnxs.com,t12d1712h2_67e6df579eba_88be6878e1da,266bd998df907f9d5064d7f4c208b2009980,benign,benign,ctu_normal21_kali_2017.pcap,192.168.1.191:34844-23.227.38.162:443-6-1493726768306,121.07142857142857,139.4646160173939,583,66,141.87499999999997,179.22805703508428,583,66,1135,222.0769230769231,553.6163625861116,2048,0,412.42857142857144,808.6175150924482,2242,0,548.8,906.7870201982381,2149,0,143.0,0.0,0.0,0.0,0.0,215.80886243386243,201.7883191221979,583.0,66.0,121.07142857142857,8,9,192.168.1.191,23.227.38.162,34844,443,6,14,v.shopify.com,t12d1110h2_43e74fd21232_205f67e4d9f4,d199ba0af2b08e204c73d6d81a1fd2609991,c2_beaconing,mta_gozi,Gozi_2023-07-12.pcap,10.7.12.121:50469-170.130.55.162:443-6-1689204953360,376.4545454545455,554.998217695356,1514,54,153.2,200.96201962891726,636,54,1532,986.1904761904763,4349.276222764514,19959,0,2301.1111111111113,6624.690699278806,19959,0,1879.545454545455,5999.3936254197615,19960,0,1.0,0.0,0.0,0.0,0.0,546.4616161616161,556.9408340161756,1514.0,54.0,376.4545454545455,13,15,10.7.12.121,170.130.55.162,50469,443,6,22,iamupdate.com,t12d190700_d83cc789557e_2dae41c691ec,4ce0442e9d20d092d9d74e9ce54b363a10000,benign,benign,ctu_normal21_kali_2017.pcap,192.168.1.191:44596-37.157.5.72:443-6-1493727352239,385.14285714285705,541.1691312070826,1514,66,168.9090909090909,207.37572401101076,591,66,1858,9.049999999999999,14.028073356853504,35,0,17.900000000000002,16.21693216637749,36,0,16.22222222222222,23.946700074215748,63,0,6.0,0.0,0.0,0.0,0.0,554.8946608946609,551.8214827274097,1514.0,66.0,385.14285714285705,14,15,192.168.1.191,37.157.5.72,44596,443,6,21,s1.adformdsp.net,t12d1110h2_43e74fd21232_205f67e4d9f4,7bee5c1d424b7e5f943b06983bb1142210011,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:51121-194.165.16.90:443-6-1668459228249,435.77777777777777,589.6705294767014,1514,54,459.3846153846154,631.944425096271,1514,54,5972,57.92307692307693,152.95252154231997,576,0,125.5,209.56513415772542,576,0,99.53846153846155,203.87357822296616,576,0,1.0,0.0,0.0,0.0,0.0,668.1132817799485,618.2566902665315,1514.0,54.0,435.77777777777777,16,18,172.16.24.174,194.165.16.90,51121,443,6,27,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b710020,benign,benign,ctu_normal21_kali_2017.pcap,192.168.1.191:40162-173.241.240.143:443-6-1493727336656,203.10869565217382,321.84483689165563,1514,54,131.48148148148147,182.1519590406213,650,54,3550,323.8666666666667,1071.8824477610322,6398,0,560.5384615384615,1372.67258239594,6398,0,802.0555555555555,1605.841999121891,6398,0,107.0,0.0,0.0,0.0,0.0,497.7205459973067,571.3152122374589,1514.0,54.0,203.10869565217382,37,39,192.168.1.191,173.241.240.143,40162,443,6,46,us-u.openx.net,t12d1109h2_43e74fd21232_fed6c16fddd0,699a80bdb17efe157c861f92c5bf5d1d10030,benign,benign,ctu_normal14_win_full_2017.pcap,10.0.2.15:50127-45.55.217.192:443-6-1302367,114.41666666666666,149.58394319112617,571,54,150.66666666666666,206.86581802382594,571,54,904,43.0,59.694220825805246,135,0,94.6,87.41166970147636,190,0,66.6,63.94372525901193,135,1,31.5,0.0,0.0,0.0,0.0,204.69444444444446,201.01362738645787,571.0,54.0,114.41666666666666,5,7,10.0.2.15,45.55.217.192,50127,443,6,12,anon-sms.com,t12d1712h2_67e6df579eba_88be6878e1da,c6227321ea7621862dc7b7351771a62c10040,c2_beaconing,mta_emotet,Emotet_2022-11-07_1.pcap,192.168.1.133:60784-208.84.244.144:465-6-1667842071022,64.0,4.898979485566356,66,54,66.0,0.0,66,66,330,15000.8,25262.60627290858,59937,1020,3766.75,3094.0542308326358,8015,1020,0.0,0.0,0,0,4016.0,0.0,0.0,0.0,0.0,60.44444444444444,5.7948465824023545,66.0,54.0,64.0,0,1,192.168.1.133,208.84.244.144,60784,465,6,6,,,10050,benign,benign,ctu_normal21_kali_2017.pcap,192.168.1.191:34670-95.154.251.147:443-6-1493726900963,241.11111111111111,386.8630839866141,1431,66,222.50000000000006,326.4762199949978,1031,66,2225,137.1764705882353,407.5834631235236,1710,0,256.1111111111111,574.2563548722043,1782,1,329.2857142857143,626.2522692668705,1739,0,45.0,0.0,0.0,0.0,0.0,535.4429012345679,554.6564556535888,1431.0,66.0,241.11111111111111,11,12,192.168.1.191,95.154.251.147,34670,443,6,18,delivery.g.switchadhub.com,t12d1110h2_43e74fd21232_205f67e4d9f4,8529fd8de0d7f73186ef5ea8b4531a7610060,benign,benign,ctu_normal14_win_full_2017.pcap,10.0.2.15:51049-104.45.14.60:443-6-2666836,361.7857142857143,492.5328608809965,1474,54,232.54545454545456,322.35116368220656,1051,54,2558,139.81481481481478,504.1674048168644,2574,0,377.5,801.3812035063796,2574,2,230.5,656.6801352256668,2610,0,34.5,0.0,0.0,0.0,0.0,577.8603259485612,561.4223924680545,1474.0,54.0,361.7857142857143,21,23,10.0.2.15,104.45.14.60,51049,443,6,28,contacts.skype.com,t12d1710h2_67e6df579eba_4a7a952b215a,4fd467dd264720762ffe286277c00f5710070,benign,benign,ctu_normal21_kali_2017.pcap,192.168.1.191:44568-34.252.8.172:443-6-1493726943335,276.6808510638297,377.03114312509587,1514,54,194.25,254.13114505878437,809,54,5439,1610.4347826086955,3399.4279299917107,10026,0,2743.7037037037035,4157.665115966439,10176,0,4109.444444444443,4569.785015180399,10258,0,150.0,0.0,0.0,0.0,0.0,542.2320828667413,565.2664445272825,1514.0,54.0,276.6808510638297,28,33,192.168.1.191,34.252.8.172,44568,443,6,47,x.skimresources.com,t12d1109h2_43e74fd21232_fed6c16fddd0,303951d4c50efb2e991652225a6f02b110081,c2_beaconing,mta_pikabot,Pikabot_2023-10-03.pcap,10.1.2.147:49554-179.60.149.244:443-6-1696349869791,432.90625000000006,589.9751421431026,1450,60,335.05555555555554,529.120187861524,1450,60,6031,13.58064516129032,27.87086195718674,76,0,24.764705882352946,40.45449513305769,121,0,27.0,35.64874939367906,78,0,45.0,0.0,0.0,0.0,0.0,648.519565696649,585.6936112030472,1450.0,60.0,432.90625000000006,15,16,10.1.2.147,179.60.149.244,49554,443,6,32,zzerxc.com,t12d190700_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b710090,c2_beaconing,mta_icedid,IcedID_2023-05-10.pcap,172.16.10.73:50523-51.104.167.255:443-6-1683741478482,201.40000000000003,331.3634945452522,1514,54,148.07142857142858,176.5548353631525,705,54,2073,3798.2758620689656,20275.75727649816,109221,0,8473.076923076924,30271.09426901495,109221,0,7332.9333333333325,28186.578478992105,109221,0,35.5,0.0,0.0,0.0,0.0,499.17043650793653,574.6155226384681,1514.0,54.0,201.40000000000003,23,25,172.16.10.73,51.104.167.255,50523,443,6,30,array609.prod.do.dsp.mp.microsoft.com,t12d1809h2_4b22cbed5bed_7af1ed941c26,a02d7ceb8c8cbb4da2e6007f5a1c91e410101,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:51160-194.165.16.90:443-6-1668459284922,466.32,610.5326035520134,1514,54,493.1666666666667,647.6681014971864,1514,54,5918,65.5,165.13183139277066,631,0,142.9090909090909,225.32174974709147,632,0,113.16666666666666,219.64137436588155,631,0,1.0,0.0,0.0,0.0,0.0,678.3361253561253,614.6092548983562,1514.0,54.0,466.32,14,16,172.16.24.174,194.165.16.90,51160,443,6,25,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b710110,c2_beaconing,mta_bumblebee,BumbleBee_2022-12-07.pcap,10.12.7.101:50172-23.108.57.213:443-6-1670432358796,116.1,138.42341602945348,635,54,130.90909090909088,177.77651956625462,635,54,1440,25.78947368421052,54.59708879842549,197,0,49.0,69.33173075070958,198,0,48.99999999999999,73.35432599961057,197,0,1.0,0.0,0.0,0.0,0.0,227.889898989899,226.8357569128444,635.0,54.0,116.1,13,15,10.12.7.101,23.108.57.213,50172,443,6,20,ceyuvigi.com,t12d190700_d83cc789557e_2dae41c691ec,ae4edc6faf64d08308082ad26be6076710121,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:51340-194.165.16.90:443-6-1668459567317,466.32,610.5326035520134,1514,54,493.1666666666667,647.6681014971864,1514,54,5918,61.25,152.00493413044197,556,0,133.63636363636363,206.65152925989818,557,0,104.91666666666667,201.2079242671093,556,0,1.0,0.0,0.0,0.0,0.0,678.3361253561253,614.6092548983562,1514.0,54.0,466.32,14,16,172.16.24.174,194.165.16.90,51340,443,6,25,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b710131,c2_beaconing,mta_icedid,IcedID_2022-01-12.pcap,10.22.5.47:50390-104.168.44.45:443-6-1642007945523,219.21052631578942,365.7496987083696,1279,60,211.27272727272728,373.0335349292583,1279,60,2324,68.38888888888889,112.20157222809989,246,0,123.10000000000001,128.50201036040903,248,0,140.85714285714286,130.53662138959137,250,0,3.0,0.0,0.0,0.0,0.0,506.95647262094633,523.8724558061662,1279.0,60.0,219.21052631578942,12,13,10.22.5.47,104.168.44.45,50390,443,6,19,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b710141,c2_beaconing,mta_qakbot,Qakbot_2023-05-10.pcap,172.16.10.73:50336-172.64.155.106:443-6-1683738850872,735.5454545454545,692.6199822025784,1514,54,102.13333333333334,111.46419454993907,412,54,1532,2547.6279069767443,16658.156979494714,109242,0,7824.857142857143,29189.890944685583,109242,0,3911.0714285714284,20642.94410514262,109242,0,1.0,0.0,0.0,0.0,0.0,611.4279112968768,585.0053274700589,1514.0,54.0,412.0,29,31,172.16.10.73,172.64.155.106,50336,443,6,44,www.broadcom.com,t13d201100_2b729b4bf6f3_9e7b989ebec8,907bf3ecef1c987c889946b737b43de810151,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:51666-194.165.16.90:443-6-1668459905336,422.1428571428571,581.95645212448,1514,54,430.4285714285715,616.7435215943265,1514,54,6026,52.66666666666667,139.28692025400716,534,0,109.38461538461539,188.45491877437536,535,0,93.38461538461539,187.6790427216717,534,0,1.5,0.0,0.0,0.0,0.0,663.3809523809524,619.9837354314599,1514.0,54.0,422.1428571428571,18,20,172.16.24.174,194.165.16.90,51666,443,6,28,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b710160,benign,benign,ctu_normal21_kali_2017.pcap,192.168.1.191:38260-95.172.94.25:443-6-1493726919656,204.73333333333332,314.6749948453998,1202,54,274.875,413.84415199789544,1202,54,2199,21.0,17.50164827402529,54,0,37.99999999999999,21.571586249817916,57,3,40.0,29.953296980466106,82,3,23.5,0.0,0.0,0.0,0.0,396.5755291005291,444.10930732657636,1202.0,54.0,204.73333333333332,10,12,192.168.1.191,95.172.94.25,38260,443,6,15,pixel.quantserve.com,t12d1110h2_43e74fd21232_205f67e4d9f4,fbe78c619e7ea20046131294ad087f0510170,benign,benign,ctu_normal7_general_2013.pcap,10.0.0.46:33617-68.232.35.139:443-6-1387315340347,327.9041095890409,498.13438515858456,1506,54,129.93103448275863,157.57989606964526,479,54,3768,4994.680555555557,11223.590000625994,32034,0,12840.714285714286,15077.83867962107,32057,0,8361.860465116277,13573.360931621412,32034,0,44.0,0.0,0.0,0.0,0.0,507.69127863424035,556.6794736614081,1506.0,54.0,327.9041095890409,35,37,10.0.0.46,68.232.35.139,33617,443,6,73,pbs.twimg.com,t12d1810s2_27d4652c4487_736b2a1ed4d3,0c0aff9ccea5e7e1de5c3a0069d103f310180,benign,benign,ctu_normal21_kali_2017.pcap,192.168.1.191:44282-151.101.113.6:443-6-1493726903383,104.64999999999999,118.78342742815155,583,54,111.5833333333333,149.7576577694979,583,54,1339,316.00000000000006,1237.808951332959,5423,0,545.8181818181819,1638.9281752524616,5484,0,854.5714285714284,2116.169799200343,5653,0,51.0,0.0,0.0,0.0,0.0,208.0537037037037,206.00928583556643,583.0,54.0,104.64999999999999,11,18,192.168.1.191,151.101.113.6,44282,443,6,20,cdn.switchadhub.com,t12d1110h2_43e74fd21232_205f67e4d9f4,d199ba0af2b08e204c73d6d81a1fd26010190,benign,benign,ctu_normal21_kali_2017.pcap,192.168.1.191:40716-23.74.167.50:443-6-1493726672852,108.33333333333331,124.43235818992535,583,54,123.09999999999997,162.87108057874758,583,54,1231,388.764705882353,1473.1545883499361,6103,0,734.3333333333334,2047.8659013714741,6194,1,933.1428571428572,2319.0985625576895,6189,0,69.0,0.0,0.0,0.0,0.0,208.81203703703704,205.48993904328012,583.0,54.0,108.33333333333331,10,15,192.168.1.191,23.74.167.50,40716,443,6,18,ak.sail-horizon.com,t12d1110h2_43e74fd21232_205f67e4d9f4,7bee5c1d424b7e5f943b06983bb1142210200,benign,benign,ctu_normal21_kali_2017.pcap,192.168.1.191:54576-52.30.18.161:443-6-1493727084288,221.3636363636364,366.2743010864449,1514,66,133.26315789473688,152.85717447824842,545,66,2532,1982.5312500000005,3918.1059692265485,10032,0,3524.5,4744.308159443767,10080,0,4871.923076923077,4985.600740491535,10071,0,202.0,0.0,0.0,0.0,0.0,496.2839295207716,563.7965128648744,1514.0,66.0,221.3636363636364,17,18,192.168.1.191,52.30.18.161,54576,443,6,33,bcp.crwdcntrl.net,t12d1109h2_43e74fd21232_fed6c16fddd0,303951d4c50efb2e991652225a6f02b110210,exfil,mta_lumma,Lumma_2025-09-03.pcap,160.9.3.101:55586-20.189.173.16:443-6-1756915142085,365.2,550.3251246828031,1514,54,109.28571428571428,92.01578539525032,271,54,765,19.857142857142858,32.20572606243789,79,0,46.333333333333336,52.04485245119508,123,0,22.0,35.97684440488539,79,0,61.5,0.0,0.0,0.0,0.0,502.7345238095238,566.1061600581487,1514.0,54.0,271.0,12,14,160.9.3.101,20.189.173.16,55586,443,6,15,v10.events.data.microsoft.com,t12d180700_4b22cbed5bed_2dae41c691ec,678aeaf909676262acfb913ccb78a12610221,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:50613-194.165.16.90:443-6-1668458468000,466.32,610.5326035520134,1514,54,493.1666666666667,647.6681014971864,1514,54,5918,63.87499999999999,157.1928509548203,539,0,139.36363636363637,213.61660643651874,541,0,104.83333333333334,204.30495625783323,539,0,1.0,0.0,0.0,0.0,0.0,678.3361253561253,614.6092548983562,1514.0,54.0,466.32,14,16,172.16.24.174,194.165.16.90,50613,443,6,25,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b710230,benign,benign,ctu_normal21_kali_2017.pcap,192.168.1.191:43006-108.161.188.225:443-6-1493727211992,679.7307692307694,704.973273382627,1514,54,94.625,111.2360901053947,571,54,3028,1311.2467532467533,8149.332247678243,58010,0,3256.451612903226,12723.956113931205,58062,0,2243.4,10615.022556820979,58023,0,14.0,0.0,0.0,0.0,0.0,624.6796265328875,583.0186079205736,1514.0,54.0,571.0,59,61,192.168.1.191,108.161.188.225,43006,443,6,78,cdn2.tnwcdn.com,t12d1110h2_43e74fd21232_205f67e4d9f4,b898351eb5e266aefd3723d46693549410240,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:51592-209.54.177.41:443-6-1668459890509,436.68965517241367,543.880968033597,1514,54,369.1666666666667,476.96156379034704,1335,54,4430,1064.392857142857,5284.867259549496,28023,0,2709.363636363636,8397.09291686983,28023,0,1858.1875,6990.973067403898,28068,0,71.0,0.0,0.0,0.0,0.0,646.1343625572835,594.3753139074216,1514.0,54.0,436.68965517241367,20,22,172.16.24.174,209.54.177.41,51592,443,6,29,aax-us-iad.amazon.com,t13d1616h2_e72c3b3287f1_e5627efa2ab1,8bbcb0bf0a942234f77bd504ffdd201310251,c2_beaconing,mta_gozi,Gozi_2023-07-12.pcap,10.7.12.121:50310-170.130.55.162:443-6-1689204226481,392.8095238095238,575.2584305377557,1514,54,164.2222222222222,209.92187700295662,636,54,1478,548.35,2345.130189967017,10506,0,1370.875,3693.094770262856,10506,0,994.1818181818185,3156.478443398016,10506,0,15.0,0.0,0.0,0.0,0.0,549.6979717813051,555.5549358917067,1514.0,54.0,392.8095238095238,11,13,10.7.12.121,170.130.55.162,50310,443,6,21,iamupdate.com,t12d190700_d83cc789557e_2dae41c691ec,4ce0442e9d20d092d9d74e9ce54b363a10260,benign,benign,ctu_normal14_win_full_2017.pcap,10.0.2.15:52708-216.58.201.78:443-6-3820057,304.8095238095238,498.0538745003013,1474,54,101.8,98.38902377806176,312,54,1018,318.55,1353.9017096797256,6070,0,707.8888888888889,2011.0216585385426,6070,0,635.0,1924.2156843763644,6111,0,36.0,0.0,0.0,0.0,0.0,479.7747955747956,550.0038549542173,1474.0,54.0,304.8095238095238,13,15,10.0.2.15,216.58.201.78,52708,443,6,21,ogs.google.com,t12d1711h2_67e6df579eba_de5ccbe16bdd,7ce1896a8d7190ee334e3c8ea463b0c110270,benign,benign,ctu_normal20_win_2017_https.pcap,10.0.2.15:50921-185.62.216.152:443-6-3861160,320.0416666666666,490.7357811328393,1474,54,161.8181818181818,248.21394730426334,877,54,1780,588.0869565217391,1640.4237787575025,6571,0,1352.5,2331.503723160465,6571,3,1124.75,2274.58648089953,6787,0,29.0,0.0,0.0,0.0,0.0,546.9758806008806,554.3007032389804,1474.0,54.0,320.0416666666666,17,19,10.0.2.15,185.62.216.152,50921,443,6,24,geo-um.btrll.com,t12d1509h2_073e58a039a6_e70312a1ce2c,ccc514751b175866924439bdbb5bba3410280,benign,benign,ctu_normal14_win_full_2017.pcap,10.0.2.15:52294-54.69.77.229:443-6-3426672,161.57894736842107,245.4185349763573,842,54,174.88888888888889,261.80405098300355,842,54,1574,537.7777777777777,1423.5590673732697,5032,0,1210.0,2056.169462165718,5032,0,1052.777777777778,1994.173561765486,5248,4,15.0,0.0,0.0,0.0,0.0,351.3408706952567,347.00086021369003,842.0,54.0,161.57894736842107,11,13,10.0.2.15,54.69.77.229,52294,443,6,19,r.nexac.com,t12d1711h2_67e6df579eba_de5ccbe16bdd,303951d4c50efb2e991652225a6f02b110291,c2_beaconing,mta_pikabot,Pikabot_2023-05-23.pcap,10.1.0.186:55316-104.238.35.63:8080-6-1684859688082,994.1401515151515,638.8045090754963,1514,54,63.643835616438366,50.30611014993157,388,54,4646,9.06083650190114,42.35865704644695,522,0,33.09722222222222,81.40027333625807,576,0,12.257894736842104,53.920398077886524,607,0,1.5,0.0,0.0,0.0,0.0,665.0620951379486,630.4472012824457,1514.0,54.0,388.0,180,184,10.1.0.186,104.238.35.63,55316,8080,6,264,turiruy.us,t13d201100_2b729b4bf6f3_9e7b989ebec8,15af977ce25de452b96affa2addb103610301,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:50911-194.165.16.90:443-6-1668458905976,466.32,610.5326035520134,1514,54,493.1666666666667,647.6681014971864,1514,54,5918,72.12499999999997,177.77497072814077,612,0,157.27272727272728,241.09586927572644,612,0,124.66666666666666,235.4907191119828,612,0,1.0,0.0,0.0,0.0,0.0,678.3361253561253,614.6092548983562,1514.0,54.0,466.32,14,16,172.16.24.174,194.165.16.90,50911,443,6,25,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b710311,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:51232-23.64.146.226:443-6-1668459396499,867.2343749999999,672.766068029346,1514,54,125.60000000000001,251.71608902428986,1177,54,2512,6.777777777777775,22.61418655825932,154,0,22.47368421052631,37.49128553714943,154,0,8.883720930232558,26.463100367551846,154,0,1.0,0.0,0.0,0.0,0.0,729.3528093434343,615.4652406483622,1514.0,54.0,867.2343749999999,47,49,172.16.24.174,23.64.146.226,51232,443,6,64,www.cisco.com,t12d190700_d83cc789557e_2dae41c691ec,d227a8dd2bb7d7ee4f648c1af087578a10321,c2_beaconing,mta_gozi,Gozi_2023-07-12.pcap,10.7.12.121:50652-170.130.55.162:443-6-1689205766893,378.3636363636364,558.7570002079485,1514,54,153.2,200.96201962891726,636,54,1532,524.1904761904761,2279.5581067182216,10465,0,1223.111111111111,3468.3552097660227,10465,0,996.8181818181818,3142.7077120910185,10465,0,1.0,0.0,0.0,0.0,0.0,547.0626262626263,556.888541395858,1514.0,54.0,378.3636363636364,13,15,10.7.12.121,170.130.55.162,50652,443,6,22,iamupdate.com,t12d190700_d83cc789557e_2dae41c691ec,4ce0442e9d20d092d9d74e9ce54b363a10331,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:52112-194.165.16.90:443-6-1668460618460,466.32,610.5326035520134,1514,54,493.1666666666667,647.6681014971864,1514,54,5918,62.5,151.86893662972514,516,0,136.36363636363637,205.34910407755507,517,0,102.83333333333334,197.0301469011247,516,0,1.0,0.0,0.0,0.0,0.0,678.3361253561253,614.6092548983562,1514.0,54.0,466.32,14,16,172.16.24.174,194.165.16.90,52112,443,6,25,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b710341,c2_beaconing,mta_pikabot,Pikabot_2023-10-03.pcap,10.1.2.147:49402-179.60.149.244:443-6-1696349550064,437.53125000000006,593.5631599066667,1450,60,351.2352941176471,540.7953089445863,1450,60,5971,14.096774193548384,28.12632792564015,80,0,27.3125,43.421528838430675,130,0,25.78571428571428,34.614755794044235,81,0,5.5,0.0,0.0,0.0,0.0,648.2333197167757,585.0188670479846,1450.0,60.0,437.53125000000006,15,16,10.1.2.147,179.60.149.244,49402,443,6,32,zzerxc.com,t12d190700_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b710351,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:50154-194.165.16.90:443-6-1668457767945,466.32,610.5326035520134,1514,54,493.1666666666667,647.6681014971864,1514,54,5918,64.99999999999999,163.50508568077709,612,0,141.8181818181818,223.26478369049525,614,0,111.0,216.7726081320323,612,0,1.0,0.0,0.0,0.0,0.0,678.3361253561253,614.6092548983562,1514.0,54.0,466.32,14,16,172.16.24.174,194.165.16.90,50154,443,6,25,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b710360,benign,benign,ctu_normal21_kali_2017.pcap,192.168.1.191:43636-169.47.30.64:443-6-1493726942657,246.6315789473684,454.81915948677596,1514,54,109.09090909090908,111.0265324554942,396,54,1200,301.77777777777777,1115.7206352612252,4768,0,543.2,1486.4319545662208,4768,0,760.8571428571429,1830.907919455211,4910,0,98.0,0.0,0.0,0.0,0.0,486.3858320042531,566.0213410297578,1514.0,54.0,246.6315789473684,13,15,192.168.1.191,169.47.30.64,43636,443,6,19,stags.bluekai.com,t12d1109h2_43e74fd21232_fed6c16fddd0,f4fb99c318cd91a4dfff259227ba977b10371,c2_beaconing,mta_icedid,IcedID_2022-10-31_1.pcap,172.16.0.153:57773-198.44.140.67:8008-6-1667231089708,329.96296296296293,464.9430470896807,1354,60,397.5625,513.2604236642447,1354,60,6361,29.230769230769223,60.20319439518649,151,0,50.666666666666664,73.73375527305433,152,0,60.900000000000006,77.76524502201052,152,0,75.5,0.0,0.0,0.0,0.0,577.9068696221474,560.3121901309422,1354.0,60.0,329.96296296296293,16,17,172.16.0.153,198.44.140.67,57773,8008,6,27,clouditsoft.com,t12d190700_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b710381,c2_beaconing,mta_icedid,IcedID_2023-01-12.pcap,172.18.127.129:56049-185.173.34.36:443-6-1673550646097,349.36842105263156,497.86055728780525,1514,54,317.3,478.32742156625545,1514,54,3173,101.27777777777777,214.66384269242255,719,0,202.55555555555554,274.07531406125906,719,0,193.625,291.05715565356377,719,0,1.0,0.0,0.0,0.0,0.0,639.2964912280702,629.9864681403977,1514.0,54.0,349.36842105263156,13,15,172.18.127.129,185.173.34.36,56049,443,6,19,fepopeguc.com,t12d190700_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b710391,c2_beaconing,mta_gozi,Gozi_2023-07-12.pcap,10.7.12.121:50350-170.130.55.162:443-6-1689204422361,337.76,506.1952258434157,1514,54,136.66666666666666,185.8329324632176,636,54,1640,451.25000000000006,2142.3070508216133,10507,0,984.5454545454544,3158.8368544018335,10507,0,899.3333333333333,3026.5346320152817,10508,0,16.5,0.0,0.0,0.0,0.0,535.9790313390313,559.649230687594,1514.0,54.0,337.76,18,20,10.7.12.121,170.130.55.162,50350,443,6,25,iamupdate.com,t12d190700_d83cc789557e_2dae41c691ec,4ce0442e9d20d092d9d74e9ce54b363a10400,benign,benign,ctu_normal14_win_full_2017.pcap,10.0.2.15:51821-193.0.160.184:443-6-3363837,291.31578947368416,429.3319167460557,1474,54,183.0,214.4318073421012,651,54,1647,619.0,1768.3590266285923,6740,0,1392.75,2536.1068448650635,6740,0,1226.5555555555557,2505.808856991646,7016,1,46.5,0.0,0.0,0.0,0.0,513.7906432748538,544.8336038691674,1474.0,54.0,291.31578947368416,12,14,10.0.2.15,193.0.160.184,51821,443,6,19,msec.xp1.ru4.com,t12d1711h2_67e6df579eba_de5ccbe16bdd,0a917d753018dad73d9899ace370f8d810411,c2_beaconing,mta_icedid,IcedID_2023-01-12.pcap,172.18.127.129:56026-185.173.34.36:443-6-1673550505596,344.94736842105266,491.86442053388504,1514,54,317.3,478.32742156625545,1514,54,3173,113.11111111111113,237.50910543261008,782,0,226.11111111111111,302.34849282096826,783,0,213.125,319.8961606075143,782,0,154.5,0.0,0.0,0.0,0.0,637.7682261208577,630.6383564101224,1514.0,54.0,344.94736842105266,13,15,172.18.127.129,185.173.34.36,56026,443,6,19,fepopeguc.com,t12d190700_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b710420,benign,benign,ctu_normal14_win_full_2017.pcap,10.0.2.15:51639-172.217.23.206:443-6-3301629,107.93333333333331,135.09650871383266,571,54,126.5,180.46922966850295,571,54,1012,318.3571428571429,1052.1168849326768,3967,0,636.5714285714286,1471.2230577700602,3967,1,739.5,1701.7971383217214,4213,18,28.0,0.0,0.0,0.0,0.0,203.905291005291,201.63358199461481,571.0,54.0,107.93333333333331,7,9,10.0.2.15,172.217.23.206,51639,443,6,15,clients6.google.com,t12d1711h2_67e6df579eba_a29fe97f68c7,c23237dbea656869600e48dfbd00ab7b10431,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:50825-194.165.16.90:443-6-1668458773708,466.32,610.5326035520134,1514,54,493.1666666666667,647.6681014971864,1514,54,5918,62.250000000000014,153.63713602256905,550,0,135.81818181818184,208.61247238926927,552,0,105.83333333333333,202.66310303884455,550,0,1.0,0.0,0.0,0.0,0.0,678.3361253561253,614.6092548983562,1514.0,54.0,466.32,14,16,172.16.24.174,194.165.16.90,50825,443,6,25,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b710440,c2_beaconing,mta_qakbot,Qakbot_2022-09-29.pcap,10.9.29.201:50447-52.109.13.62:443-6-1664438087619,325.9615384615385,521.1692608563349,1514,54,131.0,113.66265877587063,393,54,1441,4789.56,23906.97025813462,119543,0,11973.9,37795.93505024346,119543,0,8550.857142857141,31946.02747629951,119544,0,16.0,0.0,0.0,0.0,0.0,500.9883190883191,560.9511498736241,1514.0,54.0,325.9615384615385,15,17,10.9.29.201,52.109.13.62,50447,443,6,26,nexusrules.officeapps.live.com,t12d1809h2_4b22cbed5bed_7af1ed941c26,67bfe5d15ae567fb35fd7837f0116eec10451,exfil,mta_lumma,Lumma_2025-08-15.pcap,10.8.15.176:62823-5.10.250.239:443-6-1755287430530,60.0,4.898979485566356,66,54,61.5,3.0,66,60,246,79.0,86.05347174867497,169,0,108.0,93.87225362161068,170,0,160.5,13.435028842544403,170,151,150.0,0.0,0.0,0.0,0.0,60.611111111111114,4.507880616689065,66.0,54.0,60.0,0,1,10.8.15.176,5.10.250.239,62823,443,6,7,,,10461,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:51009-194.165.16.90:443-6-1668459057667,435.7777777777779,596.1940400015195,1514,54,430.4285714285715,616.7435215943265,1514,54,6026,61.26923076923076,162.32130055967585,575,0,122.46153846153848,216.72740765941262,577,0,114.5,223.81506164282558,575,0,1.0,0.0,0.0,0.0,0.0,667.74942341609,617.9183340028792,1514.0,54.0,435.7777777777779,17,19,172.16.24.174,194.165.16.90,51009,443,6,27,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b710470,c2_beaconing,mta_qakbot,Qakbot_2023-05-10.pcap,172.16.10.73:50466-142.250.114.106:443-6-1683740490928,54.0,0.0,54,54,54.0,0.0,54,54,108,17.333333333333336,30.02221399786054,52,0,52.0,0.0,52,52,52.0,0.0,52,52,52.0,0.0,0.0,0.0,0.0,54.0,0.0,54.0,54.0,54.0,0,0,172.16.10.73,142.250.114.106,50466,443,6,4,,,10481,c2_beaconing,mta_icedid,IcedID_2022-01-12.pcap,10.22.5.47:50076-104.168.44.45:443-6-1642007167670,219.21052631578942,365.7496987083696,1279,60,211.27272727272728,373.0335349292583,1279,60,2324,71.5,117.06320565253226,263,0,128.7,134.75908544922348,266,0,149.42857142857142,137.67577509358372,267,0,5.0,0.0,0.0,0.0,0.0,506.95647262094633,523.8724558061662,1279.0,60.0,219.21052631578942,12,13,10.22.5.47,104.168.44.45,50076,443,6,19,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b710490,c2_beaconing,mta_icedid,IcedID_2023-10-31.pcap,10.10.31.101:56233-13.89.178.27:443-6-1698796393548,315.6666666666667,468.827395143225,1450,60,231.0625,366.92278365708864,1450,60,3697,11.517241379310345,18.034927798293374,53,0,22.266666666666666,29.84356036464308,93,0,21.923076923076923,22.488743623057065,57,0,20.0,0.0,0.0,0.0,0.0,607.6762566137567,601.8803721068227,1450.0,60.0,315.6666666666667,20,21,10.10.31.101,13.89.178.27,56233,443,6,30,v10.events.data.microsoft.com,t12d1909h2_d83cc789557e_7af1ed941c26,2fe9b0e731d3d41b2b84e8e1d618683610501,c2_beaconing,mta_icedid,IcedID_2022-01-12.pcap,10.22.5.47:49962-104.168.44.45:443-6-1642006710586,259.13636363636374,424.9262451918143,1415,60,293.46153846153845,475.5101848514245,1415,60,3815,66.71428571428571,125.03005352999848,408,0,116.75,149.68641463831221,408,0,144.5,161.8253026304248,409,0,3.0,0.0,0.0,0.0,0.0,548.4614952948286,563.7218338851701,1415.0,60.0,259.13636363636374,14,15,10.22.5.47,104.168.44.45,49962,443,6,22,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b710511,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:50601-194.165.16.90:443-6-1668458448889,435.77777777777777,589.6705294767014,1514,54,459.3846153846154,631.944425096271,1514,54,5972,60.384615384615365,158.52572710398195,632,0,130.83333333333331,217.51565600218436,632,0,103.6923076923077,210.95196317937118,632,0,1.0,0.0,0.0,0.0,0.0,668.1132817799485,618.2566902665315,1514.0,54.0,435.77777777777777,16,18,172.16.24.174,194.165.16.90,50601,443,6,27,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b710520,benign,benign,ctu_normal14_win_full_2017.pcap,10.0.2.15:50955-40.115.1.44:443-6-2495930,64.16666666666667,17.6908639321732,99,54,73.0,23.302360395462088,99,54,219,15.4,20.19405853215247,38,0,20.0,28.284271247461902,40,0,19.5,24.748737341529164,37,2,37.0,0.0,0.0,0.0,0.0,67.83333333333333,17.66946169364562,99.0,54.0,58.0,2,4,10.0.2.15,40.115.1.44,50955,443,6,6,,,10531,c2_beaconing,mta_pikabot,Pikabot_2023-11-02.pcap,10.11.2.101:52802-15.235.202.109:2226-6-1698940586615,241.23809523809524,356.8627053590645,1430,60,152.5,210.46161386127142,749,60,1830,7981.949999999999,24139.412685209267,81947,0,14512.636363636364,31670.030051367896,81947,0,9677.375000000002,26406.57404044628,75023,0,331.0,0.0,0.0,0.0,0.0,504.69929453262785,535.3961010327233,1430.0,60.0,241.23809523809524,14,15,10.11.2.101,15.235.202.109,52802,2226,6,21,,t12i190700_d83cc789557e_7af1ed941c26,ec74a5c51106f0419184d0dd08fb05bc10540,benign,benign,ctu_normal21_kali_2017.pcap,192.168.1.191:56476-207.244.110.3:443-6-1493727283892,196.7222222222222,302.7155149749281,1255,66,166.39999999999998,190.82347863929115,583,66,1664,55.352941176470594,57.44012227579972,174,0,99.11111111111111,68.02654710560512,220,22,109.57142857142857,118.50577643144257,284,0,57.0,0.0,0.0,0.0,0.0,432.083024691358,464.7798548540248,1255.0,66.0,196.7222222222222,11,12,192.168.1.191,207.244.110.3,56476,443,6,18,b1sync.zemanta.com,t12d1110h2_43e74fd21232_205f67e4d9f4,7bee5c1d424b7e5f943b06983bb1142210550,benign,benign,ctu_normal21_kali_2017.pcap,192.168.1.191:44012-77.238.185.35:443-6-1493726773991,302.90909090909093,475.5517005683188,1514,54,91.6923076923077,61.81745251866527,259,54,1192,63.80952380952381,180.0948691794464,827,0,111.66666666666666,230.52404068411894,827,0,160.625,315.3351674918972,910,0,60.0,0.0,0.0,0.0,0.0,495.95571095571097,569.379564046013,1514.0,54.0,259.0,17,20,192.168.1.191,77.238.185.35,44012,443,6,22,pr-bh.ybp.yahoo.com,t12d1109h2_43e74fd21232_fed6c16fddd0,b898351eb5e266aefd3723d46693549410560,benign,benign,ctu_normal14_win_full_2017.pcap,10.0.2.15:51271-207.46.194.10:443-6-2771170,316.2352941176471,511.99542593315283,1474,54,111.71428571428572,98.22714201569455,296,54,782,592.5,2180.202314771116,8763,0,1571.1666666666667,3525.530622000987,8763,2,1047.4444444444443,3012.38411026512,9080,0,53.0,0.0,0.0,0.0,0.0,477.0388422035481,549.4598044281728,1474.0,54.0,296.0,11,13,10.0.2.15,207.46.194.10,51271,443,6,17,c1.microsoft.com,t12d1711h2_67e6df579eba_de5ccbe16bdd,96c9f2048f1e949c8bb9ad97c36c9eea10571,c2_beaconing,mta_qakbot,Qakbot_2022-06-27_1.pcap,10.6.27.101:49820-94.59.15.180:2222-6-1656362013674,217.28571428571428,327.7474855520851,1198,54,148.00000000000003,199.6902146280128,703,54,1776,5500.7,18358.91234337097,78005,0,10001.272727272726,24308.189904190353,78005,0,13714.0,28042.39855239613,78006,1,153.0,0.0,0.0,0.0,0.0,437.32804232804233,449.3295223155392,1198.0,54.0,217.28571428571428,14,16,10.6.27.101,94.59.15.180,49820,2222,6,21,,t12i190600_d83cc789557e_2dae41c691ec,7c02dbae662670040c7af9bd15fb7e2f10580,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:51638-104.18.33.19:443-6-1668459893632,245.87500000000003,393.9625828256621,1514,54,128.12499999999997,180.30643558754556,571,54,1025,1776.1333333333334,6803.467412878175,26369,0,3805.9999999999995,9949.452179224074,26369,0,3800.5714285714284,9972.523265739434,26416,0,35.5,0.0,0.0,0.0,0.0,499.84722222222223,565.6509977996401,1514.0,54.0,245.87500000000003,9,11,172.16.24.174,104.18.33.19,51638,443,6,16,ssum-sec.casalemedia.com,t13d1616h2_e72c3b3287f1_e5627efa2ab1,eb1d94daa7e0344597e756a1fb6e705410590,c2_beaconing,mta_pikabot,Pikabot_2023-11-02.pcap,10.11.2.101:52867-23.198.7.173:443-6-1698946383492,328.6129032258065,469.6552407471786,1450,60,220.93750000000003,378.2603105005863,1450,60,3535,2010.8000000000002,10968.286589857204,60084,0,4021.6,15509.486736464602,60085,0,14.785714285714285,26.585648446045155,91,0,9.0,0.0,0.0,0.0,0.0,611.4463410991636,600.8663052557434,1450.0,60.0,328.6129032258065,20,21,10.11.2.101,23.198.7.173,52867,443,6,31,www.bing.com,t12d1909h2_d83cc789557e_7af1ed941c26,42ec7b1db61428bf1cc6e01b9ef02b0410600,benign,benign,ctu_normal14_win_full_2017.pcap,10.0.2.15:52073-208.81.233.32:443-6-3391454,308.08,474.23753893311033,1474,54,168.4,202.06610579488859,635,54,1684,33.70833333333334,53.790640180374254,139,0,89.77777777777777,87.01835693946677,217,1,48.357142857142854,58.200723155508776,139,0,9.5,0.0,0.0,0.0,0.0,513.6311111111111,544.3860988600818,1474.0,54.0,308.08,18,20,10.0.2.15,208.81.233.32,52073,443,6,25,tlg.mookie1.com,t12d1711h2_67e6df579eba_de5ccbe16bdd,f4fb99c318cd91a4dfff259227ba977b10611,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:50566-194.165.16.90:443-6-1668458394061,435.7777777777777,592.4256093081244,1514,54,459.3846153846154,631.944425096271,1514,54,5972,57.11538461538461,147.58057512371386,566,0,123.75,201.5125193494078,567,0,96.61538461538463,194.93739955070126,566,0,115.0,0.0,0.0,0.0,0.0,668.1132817799485,618.2566902665315,1514.0,54.0,435.7777777777777,16,18,172.16.24.174,194.165.16.90,50566,443,6,27,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b710621,c2_beaconing,mta_gozi,Gozi_2023-07-12.pcap,10.7.12.121:50189-170.130.55.162:443-6-1689203633091,376.4545454545455,554.998217695356,1514,54,153.2,200.96201962891726,636,54,1532,533.8571428571429,2341.3135263290624,10748,0,1245.6666666666667,3564.672425342895,10748,0,1014.0909090909091,3230.291579859176,10750,0,5.0,0.0,0.0,0.0,0.0,546.4616161616161,556.9408340161756,1514.0,54.0,376.4545454545455,13,15,10.7.12.121,170.130.55.162,50189,443,6,22,iamupdate.com,t12d190700_d83cc789557e_2dae41c691ec,4ce0442e9d20d092d9d74e9ce54b363a10630,benign,benign,ctu_normal20_win_2017_https.pcap,10.0.2.15:51067-52.85.174.15:443-6-4316609,113.28205128205126,180.70927339746981,784,54,112.30769230769228,164.8744584359094,629,54,4380,3624.96103896104,4850.721268781524,10392,0,7345.315789473684,4502.328545321212,10392,2,7344.499999999999,4541.6504367013085,10466,1,4564.0,0.0,0.0,0.0,0.0,299.87179487179486,309.6402084036215,784.0,54.0,113.28205128205126,71,73,10.0.2.15,52.85.174.15,51067,443,6,78,api-v2.soundcloud.com,t12d1510h2_073e58a039a6_60bf0a45ed8c,d199ba0af2b08e204c73d6d81a1fd26010641,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:50139-194.165.16.90:443-6-1668457745787,466.32,610.5326035520134,1514,54,493.1666666666667,647.6681014971864,1514,54,5918,55.04166666666667,133.32062665901935,445,0,120.0909090909091,179.93635238353286,446,0,91.25000000000001,173.34313055062466,445,0,216.0,0.0,0.0,0.0,0.0,678.3361253561253,614.6092548983562,1514.0,54.0,466.32,14,16,172.16.24.174,194.165.16.90,50139,443,6,25,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b710651,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:51493-194.165.16.90:443-6-1668459794854,450.4615384615385,603.6125400134912,1514,54,459.3846153846154,631.944425096271,1514,54,5972,68.07999999999998,173.07703487175877,612,0,141.83333333333331,232.2631083817478,612,0,124.24999999999999,234.52665093758534,612,0,1.0,0.0,0.0,0.0,0.0,672.8205128205128,616.4463618420267,1514.0,54.0,450.4615384615385,16,18,172.16.24.174,194.165.16.90,51493,443,6,26,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b710660,benign,benign,ctu_normal20_win_2017_https.pcap,10.0.2.15:49806-172.217.23.166:443-6-2665372,532.8526315789475,643.7003063806094,1474,54,82.51515151515152,75.31854071712738,413,54,2723,97.90425531914892,470.20197145502505,3898,0,287.59375000000006,779.4356047135398,3898,0,150.32786885245898,615.7719469985476,4180,0,2.0,0.0,0.0,0.0,0.0,545.6573522434303,551.0155445579256,1474.0,54.0,413.0,73,75,10.0.2.15,172.217.23.166,49806,443,6,95,static.doubleclick.net,t12d1509h2_073e58a039a6_e70312a1ce2c,ab41313cfec25328b20865eb1388e0a210670,benign,benign,ctu_normal21_kali_2017.pcap,192.168.1.191:53496-52.18.30.8:443-6-1493727303726,278.06521739130426,422.7603157121808,1514,66,237.54166666666666,339.7969955552959,1514,66,5701,1791.5555555555557,6692.778077068512,30746,0,3505.217391304347,9172.469772276174,30947,0,3832.476190476191,9547.6017911256,30789,0,50.0,0.0,0.0,0.0,0.0,619.7644012589665,638.6001010594698,1514.0,66.0,278.06521739130426,37,38,192.168.1.191,52.18.30.8,53496,443,6,46,ie02.zopim.com,t12d1110h1_43e74fd21232_205f67e4d9f4,91e914bce4ef89cc2b5fdad958d585f710681,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:50127-194.165.16.90:443-6-1668457728632,422.14285714285717,585.7869486480125,1514,54,430.42857142857144,616.7435215943265,1514,54,6026,53.25925925925926,139.72902143148156,530,0,110.61538461538463,188.7593434603695,531,0,93.15384615384615,187.05651826557937,530,0,1.0,0.0,0.0,0.0,0.0,663.3809523809524,619.9837354314599,1514.0,54.0,422.14285714285717,18,20,172.16.24.174,194.165.16.90,50127,443,6,28,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b710690,benign,benign,ctu_normal21_kali_2017.pcap,192.168.1.191:43688-52.85.185.242:443-6-1493726479837,207.1272727272727,340.2316234211005,1514,66,151.86666666666662,186.39053056702602,583,66,4556,2229.092592592593,4085.7365067495,10031,0,4149.999999999999,4848.709872592031,10080,0,5014.875000000001,4910.760016557253,10056,0,25.0,0.0,0.0,0.0,0.0,493.49265993265993,566.3007226715791,1514.0,66.0,207.1272727272727,27,28,192.168.1.191,52.85.185.242,43688,443,6,55,static.quantcast.com,t12d1110h2_43e74fd21232_205f67e4d9f4,d199ba0af2b08e204c73d6d81a1fd26010701,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:50327-194.165.16.90:443-6-1668458021979,466.32,610.5326035520134,1514,54,493.1666666666667,647.6681014971864,1514,54,5918,58.458333333333336,142.90859929907361,505,0,127.54545454545453,193.79802044208998,506,0,97.58333333333334,186.86089056900704,505,0,1.0,0.0,0.0,0.0,0.0,678.3361253561253,614.6092548983562,1514.0,54.0,466.32,14,16,172.16.24.174,194.165.16.90,50327,443,6,25,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b710710,exfil,mta_lumma,Lumma_2025-12-30.pcap,10.12.30.101:58621-142.250.115.188:5228-6-1767064489038,415.6400000000001,581.6507313958552,1514,54,231.54545454545456,433.30644205604966,1514,54,2547,1922.5833333333333,9177.312213879099,45001,0,4614.199999999999,14192.883019316407,45001,0,85.23076923076923,234.58799125493536,857,0,42.0,0.0,0.0,0.0,0.0,656.8301298701299,627.4103400492473,1514.0,54.0,415.6400000000001,16,18,10.12.30.101,142.250.115.188,58621,5228,6,25,mtalk.google.com,t13d151400_8daaf6152771_0a20fe35d3a5,eb1d94daa7e0344597e756a1fb6e705410720,c2_beaconing,mta_bumblebee,BumbleBee_2022-12-07.pcap,10.12.7.101:50194-139.177.146.137:443-6-1670432520317,176.8148148148148,282.46157492753116,1418,54,134.36363636363637,94.54445803670646,312,54,1478,1101.5384615384614,5285.93127636574,27005,0,2863.9999999999995,8485.614559031328,27005,0,1904.0000000000002,6947.199651658214,27005,0,80.0,0.0,0.0,0.0,0.0,425.24205013093905,536.6372512351317,1418.0,54.0,176.8148148148148,20,22,10.12.7.101,139.177.146.137,50194,443,6,27,,t12i210600_76e208dd3e22_2dae41c691ec,76c691f46143bf86e2d1bb73c618776710730,benign,benign,ctu_normal21_kali_2017.pcap,192.168.1.191:43084-74.117.199.102:443-6-1493726679534,323.5454545454545,456.6306965958301,1466,66,146.15384615384616,147.5018904702841,487,66,1900,105.66666666666666,184.16740573004049,801,0,173.66666666666669,220.39234986448116,801,0,249.875,343.20482743025127,976,0,142.5,0.0,0.0,0.0,0.0,518.4974531641199,536.571150823906,1466.0,66.0,323.5454545454545,16,17,192.168.1.191,74.117.199.102,43084,443,6,22,ad.afy11.net,t12d1109h2_43e74fd21232_fed6c16fddd0,561f6f4eb311a85575d2d0a0a823233310740,benign,benign,ctu_normal21_kali_2017.pcap,192.168.1.191:44000-34.252.8.172:443-6-1493726903207,308.7625,337.1766709556117,1514,54,231.16666666666663,250.7698218408652,770,54,11096,1430.7848101265822,3226.3562907152877,10030,0,2404.936170212766,3945.018247625486,10112,0,3644.8064516129034,4415.500865657673,10417,0,80.0,0.0,0.0,0.0,0.0,548.5650462962963,558.6389865791454,1514.0,54.0,308.7625,55,60,192.168.1.191,34.252.8.172,44000,443,6,80,x.skimresources.com,t12d1109h2_43e74fd21232_fed6c16fddd0,303951d4c50efb2e991652225a6f02b110750,benign,benign,ctu_normal14_win_full_2017.pcap,10.0.2.15:51891-52.49.239.148:443-6-3372805,91.74999999999999,76.50920919019546,293,54,104.33333333333334,94.51490182329275,293,54,626,772.6363636363637,2419.2961899166985,8066,0,1699.8,3560.0939875233626,8067,1,1662.0,3581.1350156060853,8068,24,62.0,0.0,0.0,0.0,0.0,136.02777777777777,94.21362316630996,293.0,54.0,91.74999999999999,5,7,10.0.2.15,52.49.239.148,51891,443,6,12,adadvisor.net,t12d1711h2_67e6df579eba_de5ccbe16bdd,76c691f46143bf86e2d1bb73c618776710760,c2_beaconing,mta_emotet,Emotet_2022-11-07_1.pcap,192.168.1.133:60922-202.141.239.243:465-6-1667842130704,300.2758620689656,478.6410746322584,1514,54,92.08333333333331,56.51943886572981,230,54,1105,80.0357142857143,126.51115662787512,354,0,203.72727272727275,141.93385143022851,410,0,124.9375,147.23517186234182,354,0,3.0,0.0,0.0,0.0,0.0,473.2882766133273,570.4470183701955,1514.0,54.0,230.0,21,23,192.168.1.133,202.141.239.243,60922,465,6,29,,t12i280600_d943125447b4_a8cc486ca5dc,ec74a5c51106f0419184d0dd08fb05bc10771,c2_beaconing,mta_gozi,Gozi_2023-07-12.pcap,10.7.12.121:50747-170.130.55.162:443-6-1689206207355,393.8095238095238,574.9684877493391,1514,54,164.2222222222222,209.92187700295662,636,54,1478,546.8,2332.0772895018995,10448,0,1366.9999999999998,3671.5956826893203,10448,0,991.6363636363637,3138.729911054065,10449,0,14.5,0.0,0.0,0.0,0.0,550.0035273368607,555.5289729985876,1514.0,54.0,393.8095238095238,11,13,10.7.12.121,170.130.55.162,50747,443,6,21,iamupdate.com,t12d190700_d83cc789557e_2dae41c691ec,4ce0442e9d20d092d9d74e9ce54b363a10780,benign,benign,ctu_normal14_win_full_2017.pcap,10.0.2.15:51543-90.182.114.17:443-6-3191275,108.06666666666666,134.71635104208858,571,54,126.5,180.46922966850295,571,54,1012,336.9285714285714,1120.9087291661526,4220,0,673.8571428571428,1568.5618071523809,4220,0,782.6666666666667,1843.375888598597,4545,3,21.0,0.0,0.0,0.0,0.0,202.84074074074073,201.599261326406,571.0,54.0,108.06666666666666,7,9,10.0.2.15,90.182.114.17,51543,443,6,15,scontent.fprg1-1.fna.fbcdn.net,t12d1712h2_67e6df579eba_88be6878e1da,96681175a9547081bf3d417f1a57209110791,c2_beaconing,mta_icedid,IcedID_2022-01-12.pcap,10.22.5.47:50436-104.168.44.45:443-6-1642008014820,219.21052631578942,365.7496987083696,1279,60,211.27272727272728,373.0335349292583,1279,60,2324,67.77777777777776,110.56781552542927,246,0,122.0,127.58004023618531,248,0,140.28571428571428,128.78886375992076,250,0,5.0,0.0,0.0,0.0,0.0,506.95647262094633,523.8724558061662,1279.0,60.0,219.21052631578942,12,13,10.22.5.47,104.168.44.45,50436,443,6,19,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b710801,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:50988-194.165.16.90:443-6-1668459023495,466.32,610.5326035520134,1514,54,493.1666666666667,647.6681014971864,1514,54,5918,69.37499999999999,175.3478065470725,612,0,151.36363636363637,239.8229650084715,613,0,121.49999999999999,234.17378938806033,612,0,1.0,0.0,0.0,0.0,0.0,678.3361253561253,614.6092548983562,1514.0,54.0,466.32,14,16,172.16.24.174,194.165.16.90,50988,443,6,25,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b710810,exfil,mta_xloader,XLoader_2025-09-05.pcap,10.9.5.71:59243-40.119.249.228:443-6-1757119479259,291.58333333333337,433.004459929503,1410,54,159.6153846153846,225.61823894266558,876,60,2075,69.95652173913045,111.04727832646513,306,0,134.08333333333334,133.51639894739068,310,0,137.0,145.71738247565236,349,0,21.5,0.0,0.0,0.0,0.0,529.193796943797,531.6001183694647,1410.0,54.0,291.58333333333337,16,17,10.9.5.71,40.119.249.228,59243,443,6,24,settings-win.data.microsoft.com,t12d1809h2_4b22cbed5bed_7af1ed941c26,2fe9b0e731d3d41b2b84e8e1d618683610821,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:50623-194.165.16.90:443-6-1668458483295,466.32,610.5326035520134,1514,54,493.1666666666667,647.6681014971864,1514,54,5918,62.625,152.82977529719562,554,0,136.54545454545453,206.86341563281005,555,0,107.41666666666667,201.73180140218273,554,0,1.0,0.0,0.0,0.0,0.0,678.3361253561253,614.6092548983562,1514.0,54.0,466.32,14,16,172.16.24.174,194.165.16.90,50623,443,6,25,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b710830,exfil,mta_xloader,XLoader_2023-11-29.pcap,10.11.29.101:60570-40.126.28.23:443-6-1701280320798,378.1666666666667,504.30817492295085,1430,60,146.36363636363637,183.17438288542027,657,60,1610,38.70588235294117,76.64264862487005,316,0,65.8,113.86619828162839,380,0,88.5,117.19684296089208,316,0,52.5,0.0,0.0,0.0,0.0,551.550986050986,528.099855201699,1430.0,60.0,378.1666666666667,11,12,10.11.29.101,40.126.28.23,60570,443,6,18,login.microsoftonline.com,t12d1908h2_d83cc789557e_2dae41c691ec,678aeaf909676262acfb913ccb78a12610840,benign,benign,ctu_normal14_win_full_2017.pcap,10.0.2.15:52461-95.172.94.49:443-6-3627954,300.05,456.2605990117121,1474,54,213.99999999999997,320.3123475609393,982,54,1712,34.52631578947369,47.452161197770344,180,0,93.57142857142857,79.0418816047483,227,1,55.36363636363636,53.5262042877556,182,0,46.5,0.0,0.0,0.0,0.0,551.4962962962964,562.2043116809958,1474.0,54.0,300.05,14,16,10.0.2.15,95.172.94.49,52461,443,6,20,pixel.quantserve.com,t12d1711h2_67e6df579eba_de5ccbe16bdd,ccc514751b175866924439bdbb5bba3410850,benign,benign,ctu_normal14_win_full_2017.pcap,10.0.2.15:52224-52.55.166.116:443-6-3419061,86.2,69.07263257925364,294,54,97.28571428571429,88.7218768318808,294,54,681,516.1428571428572,1786.6447650508246,6721,0,1204.3333333333333,2703.412633444378,6721,1,1013.7142857142857,2518.1573762234502,6723,0,31.0,0.0,0.0,0.0,0.0,134.33174603174604,95.1974779524962,294.0,54.0,86.2,7,9,10.0.2.15,52.55.166.116,52224,443,6,15,et.nytimes.com,t12d1711h2_67e6df579eba_de5ccbe16bdd,303951d4c50efb2e991652225a6f02b110861,c2_beaconing,mta_gozi,Gozi_2023-07-12.pcap,10.7.12.121:50369-170.130.55.162:443-6-1689204510252,390.42857142857144,576.0949202543425,1514,54,164.2222222222222,209.92187700295662,636,54,1478,544.8499999999999,2334.2063065588154,10457,0,1362.125,3676.506238944795,10457,0,987.2727272727275,3142.893160478386,10459,0,18.0,0.0,0.0,0.0,0.0,548.9704585537919,555.6193409814846,1514.0,54.0,390.42857142857144,11,13,10.7.12.121,170.130.55.162,50369,443,6,21,iamupdate.com,t12d190700_d83cc789557e_2dae41c691ec,4ce0442e9d20d092d9d74e9ce54b363a10871,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:51010-194.165.16.90:443-6-1668459059293,435.77777777777777,592.4256093081244,1514,54,459.3846153846154,631.944425096271,1514,54,5972,72.30769230769232,180.48684588762012,622,0,156.66666666666666,244.28386369264356,622,0,120.46153846153845,235.06900241723898,622,0,1.0,0.0,0.0,0.0,0.0,668.1132817799485,618.2566902665315,1514.0,54.0,435.77777777777777,15,17,172.16.24.174,194.165.16.90,51010,443,6,27,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b710880,benign,benign,ctu_normal21_kali_2017.pcap,192.168.1.191:41596-172.217.23.238:443-6-1493726746068,200.47499999999994,356.38390330998607,1484,54,100.09090909090908,55.062656164555875,260,66,2202,4500.794871794873,15738.47816855487,58767,0,8356.619047619046,20906.231753896227,58812,0,10325.0,22905.265041579412,58777,0,15.0,0.0,0.0,0.0,0.0,447.30361952861955,561.369392919518,1484.0,54.0,200.47499999999994,34,35,192.168.1.191,172.217.23.238,41596,443,6,40,translate.google.com,t12d1109h2_43e74fd21232_fed6c16fddd0,ea9bd07e32dfe1d6dd7b2e678bfdd5ad10891,c2_beaconing,mta_pikabot,Pikabot_2023-12-15.pcap,10.12.15.101:51112-45.77.85.150:443-6-1702656318518,965.5401069518722,635.477912798368,1514,54,55.113207547169814,14.872136176014738,341,54,26289,3.635451505016732,44.14804351684932,1483,0,11.418067226890754,78.43438833119122,1483,0,5.0225933202357576,53.16010288917284,1483,0,2.0,0.0,0.0,0.0,0.0,660.3744114572592,637.4211411229408,1514.0,54.0,341.0,1317,1319,10.12.15.101,45.77.85.150,51112,443,6,1496,keebling.com,t13d2012h1_2b729b4bf6f3_9e7b989ebec8,15af977ce25de452b96affa2addb103610900,benign,benign,ctu_normal21_kali_2017.pcap,192.168.1.191:35256-192.0.66.2:443-6-1493726990795,1165.4082980524968,620.0388571552188,1514,54,60.131899641577014,47.11285430226463,1128,54,83884,46.071646341463364,1561.7239542946934,59691,0,195.1269727403157,3217.2083579507134,60203,0,60.32091372809936,1788.6768117951456,59691,0,2.0,0.0,0.0,0.0,0.0,783.4249394333648,664.6160509823409,1514.0,54.0,1128.0,2775,2777,192.168.1.191,192.0.66.2,35256,443,6,5905,laughingsquid.com,t12d1109h2_43e74fd21232_fed6c16fddd0,b898351eb5e266aefd3723d46693549410911,exfil,mta_lumma,Lumma_2025-09-24.pcap,10.9.24.101:49913-164.90.129.126:443-6-1758755264624,969.4837188412309,648.9629781472545,1430,54,1424.9259757738912,80.61009730070698,1430,60,4234880,0.9860736747529228,6.296449709266672,364,0,1.4776169639851913,17.255919411125785,921,0,2.9121621621621614,10.802379382583938,364,0,1.0,0.0,0.0,0.0,0.0,765.3259627672741,648.8633793230973,1430.0,54.0,969.4837188412309,1325,1326,10.9.24.101,164.90.129.126,49913,443,6,4453,fixatmu.pics,t13d201200_2b729b4bf6f3_e24568c0d440,15af977ce25de452b96affa2addb103610920,c2_beaconing,mta_pikabot,Pikabot_2023-11-02.pcap,10.11.2.101:52763-20.7.2.167:443-6-1698936482488,333.4074074074074,427.70984586599394,1430,60,250.0769230769231,295.81031690889955,1147,60,3251,33.99999999999999,65.99515133704901,181,0,73.66666666666666,83.17597263779021,181,0,55.92307692307693,87.3274122087499,186,0,27.0,0.0,0.0,0.0,0.0,575.696671641116,555.3590380388612,1430.0,60.0,333.4074074074074,23,24,10.11.2.101,20.7.2.167,52763,443,6,27,client.wns.windows.com,t12d210700_76e208dd3e22_2dae41c691ec,ae4edc6faf64d08308082ad26be6076710931,c2_beaconing,mta_icedid,IcedID_2022-10-31_1.pcap,172.16.0.153:57783-198.44.140.67:8008-6-1667231117794,281.71428571428567,397.3117343921701,1354,60,276.3636363636363,412.4910357152681,1354,60,3040,38.300000000000004,67.23493765971129,153,0,61.50000000000001,78.75454131526497,154,0,68.33333333333333,80.32901094872263,155,0,2.0,0.0,0.0,0.0,0.0,565.2975468975469,565.0122623570202,1354.0,60.0,281.71428571428567,15,16,172.16.0.153,198.44.140.67,57783,8008,6,21,clouditsoft.com,t12d190700_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b710941,c2_beaconing,mta_bumblebee,BumbleBee_2022-06-14.pcap,10.6.14.101:65464-193.233.203.156:443-6-1655228057480,162.88235294117646,290.8590471244064,1270,60,89.44444444444444,52.48359532061212,207,60,805,53.31249999999999,94.9657613739464,248,0,106.62500000000001,114.83520801566043,249,0,86.28571428571428,107.63319544594393,205,0,3.0,0.0,0.0,0.0,0.0,380.5363108206245,479.69657827340194,1270.0,60.0,162.88235294117646,9,12,10.6.14.101,193.233.203.156,65464,443,6,17,,t12i210600_76e208dd3e22_2dae41c691ec,76c691f46143bf86e2d1bb73c618776710950,benign,benign,ctu_normal14_win_full_2017.pcap,10.0.2.15:52427-151.101.16.193:443-6-3622598,265.52631578947376,449.5731763969827,1474,54,92.1111111111111,74.97740400354704,259,54,829,211.6111111111111,713.7854463343259,3053,0,476.12500000000006,1048.2233182867094,3053,0,417.44444444444446,1106.5536714401962,3364,0,51.0,0.0,0.0,0.0,0.0,460.91526965562053,554.3695387005389,1474.0,54.0,259.0,11,13,10.0.2.15,151.101.16.193,52427,443,6,19,i.imgur.com,t12d1711h2_67e6df579eba_de5ccbe16bdd,860fcf58fd757e26aa8911e5eaff6b5310961,c2_beaconing,mta_pikabot,Pikabot_2023-11-02.pcap,10.11.2.101:53014-154.92.19.139:2222-6-1698961901193,175.7575757575758,295.2566712098804,1430,60,123.94444444444441,174.08330400134915,748,60,2231,2349.6250000000005,4280.182847692073,10445,0,4422.823529411766,5082.634752705703,10445,2,5347.357142857142,5159.415390364462,10445,1,305.0,0.0,0.0,0.0,0.0,480.62615039281707,546.0927631703411,1430.0,60.0,175.7575757575758,27,30,10.11.2.101,154.92.19.139,53014,2222,6,33,,t12i190700_d83cc789557e_7af1ed941c26,ec74a5c51106f0419184d0dd08fb05bc10970,benign,benign,ctu_normal20_win_2017_https.pcap,10.0.2.15:49500-77.75.78.150:443-6-1429254,255.49999999999994,462.05853195944957,1474,54,86.81818181818183,64.80558337337638,246,54,955,249.43478260869568,1043.505186905563,5019,0,573.6999999999999,1567.1067502460278,5019,1,477.25,1507.4419708415132,5252,0,4.5,0.0,0.0,0.0,0.0,455.17210567210566,555.9163186646128,1474.0,54.0,246.0,16,18,10.0.2.15,77.75.78.150,49500,443,6,24,email.seznam.cz,t12d1509h2_073e58a039a6_e70312a1ce2c,ccc514751b175866924439bdbb5bba3410980,benign,benign,ctu_normal14_win_full_2017.pcap,10.0.2.15:50130-31.13.64.21:443-6-1302749,108.06666666666666,134.71635104208858,571,54,126.5,180.46922966850295,571,54,1012,765.9285714285713,2740.6876864220585,10286,0,1531.7142857142858,3861.447212047391,10286,0,1778.8333333333333,4276.445131960267,10508,4,41.0,0.0,0.0,0.0,0.0,202.84074074074073,201.599261326406,571.0,54.0,108.06666666666666,7,9,10.0.2.15,31.13.64.21,50130,443,6,15,staticxx.facebook.com,t12d1712h2_67e6df579eba_88be6878e1da,96681175a9547081bf3d417f1a57209110990,benign,benign,ctu_normal21_kali_2017.pcap,192.168.1.191:49932-95.172.94.19:443-6-1493726478966,101.00000000000001,125.88983279042036,571,54,122.77777777777777,169.0700873733862,571,54,1105,361.6875,1377.5894269217758,5527,0,723.375,1956.330817591223,5564,0,823.1428571428571,2086.260085142105,5554,0,31.0,0.0,0.0,0.0,0.0,199.47530864197532,202.84779293728465,571.0,54.0,101.00000000000001,10,12,192.168.1.191,95.172.94.19,49932,443,6,17,pixel.quantserve.com,t12d1110h2_43e74fd21232_205f67e4d9f4,fbe78c619e7ea20046131294ad087f0511001,c2_beaconing,mta_qakbot,Qakbot_2022-09-29.pcap,10.9.29.201:50073-186.81.122.168:443-6-1664417988918,188.1428571428571,280.3494757823324,1139,54,156.0,219.9028711210309,689,54,1872,5299.25,17855.366422790245,75767,0,9635.0,23659.97623413853,75767,0,13236.375,27301.35200701083,75767,2,1.5,0.0,0.0,0.0,0.0,411.57142857142856,430.33402625130617,1139.0,54.0,188.1428571428571,14,16,10.9.29.201,186.81.122.168,50073,443,6,21,,t13i201000_2b729b4bf6f3_533b6d20482b,2253c82f03b621c5144709b393fde2c911010,benign,benign,ctu_normal14_win_full_2017.pcap,10.0.2.15:50786-172.217.23.196:443-6-2251772,135.78378378378378,152.47971361155902,766,54,173.29411764705884,201.5200873070357,766,54,2946,235.0277777777778,917.9377036475721,4287,0,528.8125,1342.2754917800344,4287,0,440.36842105263156,1280.9192537013894,4290,0,18.5,0.0,0.0,0.0,0.0,270.88643349231586,277.0216915891109,766.0,54.0,135.78378378378378,27,29,10.0.2.15,172.217.23.196,50786,443,6,37,www.google.com,t12d1712h2_67e6df579eba_88be6878e1da,c74a0764cf5d01aa28d5c7769cd86fc111021,c2_beaconing,mta_gootloader,GootLoader_2023-12-29.pcap,10.12.29.101:51360-185.68.16.114:443-6-1703877095892,219.28571428571422,394.95889339591713,1514,54,368.4285714285714,533.2947456278617,1514,54,2579,7709.307692307691,27612.260526755785,99608,0,16703.5,40614.86683838813,99608,0,16669.5,40632.011817039034,99609,0,202.0,0.0,0.0,0.0,0.0,445.6507936507936,579.368735800595,1514.0,54.0,163.0,6,8,10.12.29.101,185.68.16.114,51360,443,6,14,parubok-lesia.com,t12d210700_76e208dd3e22_2dae41c691ec,394441ab65754e2207b1e1b457b3641d11030,c2_beaconing,mta_icedid,IcedID_2022-01-12.pcap,10.22.5.47:50414-13.107.42.16:443-6-1642007982793,336.3571428571429,472.8490648137502,1415,60,152.00000000000003,179.63081798296966,571,60,2128,1698.5925925925926,8645.439933012527,44957,0,3517.846153846154,12451.110966805021,44957,0,3517.230769230769,12503.580015032003,45131,0,43.5,0.0,0.0,0.0,0.0,510.0079365079365,517.2256800778778,1415.0,60.0,336.3571428571429,20,21,10.22.5.47,13.107.42.16,50414,443,6,28,config.edge.skype.com,t13d1516h2_8daaf6152771_e5627efa2ab1,0f14538e1c9070becdad7739c67d636311040,c2_beaconing,mta_icedid,IcedID_2022-12-20.pcap,10.3.24.178:54611-52.109.20.82:443-6-1671549622648,644.4509803921569,659.4242432220852,1442,54,98.70000000000002,99.79563327647475,442,54,1974,16.92,36.35922811870124,135,0,44.526315789473685,56.53746881597158,145,0,21.133333333333333,43.20658740750418,179,0,5.0,0.0,0.0,0.0,0.0,580.8554852765479,552.2146916403386,1442.0,54.0,442.0,36,38,10.3.24.178,52.109.20.82,54611,443,6,51,officeclient.microsoft.com,t12d1909h2_d83cc789557e_7af1ed941c26,67bfe5d15ae567fb35fd7837f0116eec11051,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:50895-194.165.16.90:443-6-1668458880491,466.32,610.5326035520134,1514,54,493.1666666666667,647.6681014971864,1514,54,5918,67.33333333333336,163.52945929700562,562,0,146.9090909090909,221.40571561974392,564,0,115.25,215.49230106475224,562,0,1.0,0.0,0.0,0.0,0.0,678.3361253561253,614.6092548983562,1514.0,54.0,466.32,14,16,172.16.24.174,194.165.16.90,50895,443,6,25,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b711061,c2_beaconing,mta_qakbot,Qakbot_2022-06-27_1.pcap,10.6.27.101:49837-94.59.15.180:2222-6-1656363153765,221.71428571428572,341.55440896834324,1286,54,148.41666666666666,200.9547476574281,708,54,1781,5500.1,18349.096719199188,77923,0,10000.181818181818,24294.204098171984,77923,0,13709.875,28026.496577537375,77923,1,3.0,0.0,0.0,0.0,0.0,459.06393298059965,482.37562973361463,1286.0,54.0,221.71428571428572,14,16,10.6.27.101,94.59.15.180,49837,2222,6,21,,t12i190600_d83cc789557e_2dae41c691ec,7c02dbae662670040c7af9bd15fb7e2f11070,benign,benign,ctu_normal20_win_2017_https.pcap,10.0.2.15:49339-161.69.13.21:443-6-927930,59.44444444444444,11.080513425729773,87,54,63.0,14.38749456993816,87,54,315,47.00000000000001,81.25093406056503,182,1,93.75,100.86748732867296,185,2,67.0,99.69453345093702,182,5,2.0,0.0,0.0,0.0,0.0,63.49382716049383,12.886026833265168,87.0,54.0,58.0,2,4,10.0.2.15,161.69.13.21,49339,443,6,9,,,11080,benign,benign,ctu_normal20_win_2017_https.pcap,10.0.2.15:50152-172.217.22.227:443-6-3514413,665.8756720430108,683.4828121751771,1474,54,93.56979405034315,140.59248091918906,1278,54,40890,505.8897108271688,4866.498476856228,67018,0,1725.3623853211006,8876.870982935674,67019,0,716.4057142857141,5789.2121917339155,67018,0,3.0,0.0,0.0,0.0,0.0,672.3647515449957,595.1453926760034,1474.0,54.0,665.8756720430108,1118,1120,10.0.2.15,172.217.22.227,50152,443,6,1488,www.google.cz,t12d1510h2_073e58a039a6_60bf0a45ed8c,67619a80665d7ab92d1041b1d11f916411091,exfil,mta_lumma,Lumma_2025-06-26.pcap,10.6.26.101:50966-144.172.112.32:16443-6-1750979236810,97.95397489539747,167.0134912998068,1514,54,96.76415094339626,144.93128433432184,1514,54,10257,2276.277310924368,4956.954192639048,15015,0,5159.561904761907,6401.390470833134,15015,0,4103.780303030302,8476.340220373262,30002,0,56.0,0.0,0.0,0.0,0.0,555.2911534975435,678.1462929603198,1514.0,54.0,97.95397489539747,228,230,10.6.26.101,144.172.112.32,50966,16443,6,239,metallurgify.com,t13d131000_f57a46bbacb6_e7c285222651,f4febc55ea12b31ae17cfb7e614afda811100,benign,benign,ctu_normal21_kali_2017.pcap,192.168.1.191:48742-54.231.114.0:443-6-1493726792355,191.99999999999997,360.3405056332136,1486,54,80.60000000000001,63.19335408094748,276,54,1209,231.67999999999998,1025.2306943642816,5148,0,413.7142857142858,1363.5986567547272,5148,0,568.3,1648.8991647628293,5255,0,104.0,0.0,0.0,0.0,0.0,447.389898989899,563.8686142618478,1486.0,54.0,191.99999999999997,21,23,192.168.1.191,54.231.114.0,48742,443,6,26,s3.amazonaws.com,t12d1109h2_43e74fd21232_fed6c16fddd0,ea615e28cb25adfb2f261151eab3314f11111,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:51873-194.165.16.90:443-6-1668460241420,466.32,610.5326035520134,1514,54,493.1666666666667,647.6681014971864,1514,54,5918,71.08333333333334,176.5428674797456,612,0,155.0,239.78740584109082,612,0,124.5,234.94157881172387,612,0,1.0,0.0,0.0,0.0,0.0,678.3361253561253,614.6092548983562,1514.0,54.0,466.32,14,16,172.16.24.174,194.165.16.90,51873,443,6,25,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b711120,benign,benign,ctu_normal21_kali_2017.pcap,192.168.1.191:50800-199.96.57.6:443-6-1493727221029,111.05882352941177,128.01194797177882,583,54,123.09999999999997,162.87108057874758,583,54,1231,28.12499999999999,72.87146217827662,296,0,49.99999999999999,112.46443882401228,349,0,70.0,123.46821453313399,316,0,18.0,0.0,0.0,0.0,0.0,210.0017740429505,205.11247040434648,583.0,54.0,111.05882352941177,9,14,192.168.1.191,199.96.57.6,50800,443,6,17,platform.twitter.com,t12d1110h2_43e74fd21232_205f67e4d9f4,d199ba0af2b08e204c73d6d81a1fd26011130,benign,benign,ctu_normal21_kali_2017.pcap,192.168.1.191:54596-152.115.75.210:443-6-1493726986179,121.80000000000001,136.30910251546456,583,66,147.62500000000003,178.27982619626772,583,66,1181,462.35714285714283,1486.7308280065545,5611,0,908.7142857142858,2116.9484101953385,5696,0,1071.1666666666667,2464.2249423838452,6100,0,85.0,0.0,0.0,0.0,0.0,218.6345238095238,201.7549500076955,583.0,66.0,121.80000000000001,8,9,192.168.1.191,152.115.75.210,54596,443,6,15,track.adform.net,t12d1110h2_43e74fd21232_205f67e4d9f4,57df70f7b256d75f6e1232daa61a709211140,benign,benign,ctu_normal20_win_2017_https.pcap,10.0.2.15:52125-104.83.106.154:443-6-7083920,251.11999999999998,433.0333243527569,1474,54,116.36363636363637,155.39901719590938,571,54,1280,269.5833333333333,1203.8935716599112,5914,0,646.8000000000001,1853.9097305124887,5914,0,494.7692307692308,1721.2247651912553,6223,0,3.5,0.0,0.0,0.0,0.0,489.4981818181818,550.526568158766,1474.0,54.0,251.11999999999998,17,19,10.0.2.15,104.83.106.154,52125,443,6,25,z.moatads.com,t12d1510h2_073e58a039a6_60bf0a45ed8c,2b33c1374db4ddf06942f92373c0b54b11150,benign,benign,ctu_normal21_kali_2017.pcap,192.168.1.191:52256-192.0.76.3:443-6-1493726907561,108.55,118.62167859029373,571,54,128.72727272727275,153.81488283588874,571,54,1416,127.00000000000001,159.91004415677654,430,0,240.89999999999995,264.5270202539703,721,7,247.875,271.1380447036422,711,0,119.5,0.0,0.0,0.0,0.0,203.24068462401794,201.6807642303544,571.0,54.0,108.55,13,14,192.168.1.191,192.0.76.3,52256,443,6,20,pixel.wp.com,t12d1110h2_43e74fd21232_205f67e4d9f4,d199ba0af2b08e204c73d6d81a1fd26011160,benign,benign,ctu_normal21_kali_2017.pcap,192.168.1.191:37904-72.21.206.135:443-6-1493726972289,302.7272727272728,511.95630224781434,1514,54,87.33333333333333,69.82619114413279,277,54,1048,275.2857142857143,1108.049869945263,5107,0,522.7272727272727,1521.5835232355198,5107,0,629.2222222222222,1746.2937022289364,5284,0,39.0,0.0,0.0,0.0,0.0,490.9178451178451,569.1204106989884,1514.0,54.0,277.0,15,17,192.168.1.191,72.21.206.135,37904,443,6,22,fls-na.amazon.com,t12d1109h2_43e74fd21232_fed6c16fddd0,159d46e54a2c066ef95e656fdf034e1d11171,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:50954-194.165.16.90:443-6-1668458974400,435.7777777777777,592.4256093081244,1514,54,459.3846153846154,631.944425096271,1514,54,5972,61.07692307692308,156.69739578612607,613,0,132.33333333333331,213.35175109890636,613,0,100.84615384615384,204.51236562200265,613,0,6.0,0.0,0.0,0.0,0.0,668.1132817799485,618.2566902665315,1514.0,54.0,435.7777777777777,16,18,172.16.24.174,194.165.16.90,50954,443,6,27,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b711181,c2_beaconing,mta_gozi,Gozi_2023-07-12.pcap,10.7.12.121:50391-170.130.55.162:443-6-1689204580425,369.32000000000005,530.0230120790354,1514,54,199.9230769230769,307.04545307887275,1097,54,2599,8.79166666666667,29.396804272731337,140,0,17.58333333333333,40.85552890887894,141,0,16.363636363636363,42.29012349774526,140,0,1.0,0.0,0.0,0.0,0.0,601.0084900284901,580.0037689296994,1514.0,54.0,369.32000000000005,17,19,10.7.12.121,170.130.55.162,50391,443,6,25,iamupdate.com,t12d190700_d83cc789557e_2dae41c691ec,4ce0442e9d20d092d9d74e9ce54b363a11191,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:51951-194.165.16.90:443-6-1668460365440,466.32,610.5326035520134,1514,54,493.1666666666667,647.6681014971864,1514,54,5918,66.04166666666666,166.5301850603424,644,0,144.0,227.0924921700407,645,0,113.16666666666667,221.01206603562014,644,0,114.0,0.0,0.0,0.0,0.0,678.3361253561253,614.6092548983562,1514.0,54.0,466.32,14,16,172.16.24.174,194.165.16.90,51951,443,6,25,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b711201,c2_beaconing,mta_icedid,IcedID_2022-01-12.pcap,10.22.5.47:50067-104.168.44.45:443-6-1642007130019,219.21052631578942,365.7496987083696,1279,60,211.27272727272728,373.0335349292583,1279,60,2324,68.72222222222221,112.90641911390239,250,0,123.7,129.18380531458095,251,0,141.57142857142858,131.89245258019523,254,0,4.0,0.0,0.0,0.0,0.0,506.95647262094633,523.8724558061662,1279.0,60.0,219.21052631578942,12,13,10.22.5.47,104.168.44.45,50067,443,6,19,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b711210,benign,benign,ctu_normal14_win_full_2017.pcap,10.0.2.15:49204-40.127.129.109:443-6-135728,64.16666666666667,17.6908639321732,99,54,73.0,23.302360395462088,99,54,219,24.8,31.71277345171816,60,0,31.5,44.54772721475249,63,0,32.5,38.890872965260115,60,5,31.5,0.0,0.0,0.0,0.0,67.83333333333333,17.66946169364562,99.0,54.0,58.0,2,4,10.0.2.15,40.127.129.109,49204,443,6,6,,,11220,benign,benign,ctu_normal21_kali_2017.pcap,192.168.1.191:37302-54.76.24.249:443-6-1493726770009,90.0,58.679324790719406,289,54,90.0909090909091,68.95426679394762,289,54,991,237.52631578947364,858.3643598548381,3776,0,451.3,1197.2977026992446,3856,0,557.0,1368.2148954020345,3937,0,80.0,0.0,0.0,0.0,0.0,136.99775533108865,92.575446441564,289.0,54.0,90.0,12,17,192.168.1.191,54.76.24.249,37302,443,6,20,bcp.crwdcntrl.net,t12d1109h2_43e74fd21232_fed6c16fddd0,303951d4c50efb2e991652225a6f02b111231,exfil,mta_koistealer,KoiStealer_2024-06-12.pcap,10.6.12.101:49723-5.255.127.72:443-6-1718218138272,310.5000000000001,473.51330641424573,1514,54,308.76190476190476,468.4088923965795,1514,54,6484,6262.864864864864,14705.334563352175,45014,0,11586.3,18569.053687590855,45014,0,14473.25,30452.528443464267,90015,0,163.5,0.0,0.0,0.0,0.0,626.2121070650483,636.4444568512005,1514.0,54.0,310.5000000000001,26,28,10.6.12.101,5.255.127.72,49723,443,6,38,mucecsas.com,t13d1516h2_8daaf6152771_02713d6af862,f4febc55ea12b31ae17cfb7e614afda811241,c2_beaconing,mta_gozi,Gozi_2023-07-12.pcap,10.7.12.121:50414-170.130.55.162:443-6-1689204684866,315.1481481481482,491.14957017684566,1451,54,124.85714285714285,173.55728699231233,636,54,1748,416.1923076923077,2025.5990920067231,10342,0,832.3846153846154,2858.811015628162,10342,0,898.25,2975.5976977896235,10342,0,2.0,0.0,0.0,0.0,0.0,517.7869126758015,537.1223825862089,1451.0,54.0,315.1481481481482,20,22,10.7.12.121,170.130.55.162,50414,443,6,27,iamupdate.com,t12d190700_d83cc789557e_2dae41c691ec,4ce0442e9d20d092d9d74e9ce54b363a11250,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:51652-52.41.79.126:443-6-1668459893785,342.00000000000006,552.6760565913922,1514,54,135.875,181.13959691748397,571,54,1087,1560.7647058823532,6305.764580221536,26030,0,3790.4285714285716,9806.943031294084,26030,3,2938.8888888888887,8682.988115338585,26093,0,60.0,0.0,0.0,0.0,0.0,527.3083333333334,558.6758074033435,1514.0,54.0,342.00000000000006,11,13,172.16.24.174,52.41.79.126,51652,443,6,18,dpm.demdex.net,t13d1616h2_e72c3b3287f1_e5627efa2ab1,303951d4c50efb2e991652225a6f02b111261,c2_beaconing,mta_qakbot,Qakbot_2022-09-29.pcap,10.9.29.201:50485-193.3.19.137:443-6-1664441404935,198.04761904761898,317.33050218825105,1351,54,155.66666666666666,219.02276068246815,685,54,1868,6012.700000000001,20666.362586019877,88792,0,10932.181818181818,27428.607222453647,88792,0,15014.25,31700.56851563211,88792,1,135.0,0.0,0.0,0.0,0.0,461.91887125220455,509.49943940821225,1351.0,54.0,198.04761904761898,14,16,10.9.29.201,193.3.19.137,50485,443,6,21,,t13i201000_2b729b4bf6f3_533b6d20482b,2253c82f03b621c5144709b393fde2c911270,benign,benign,ctu_normal20_win_2017_https.pcap,10.0.2.15:50785-199.38.164.165:443-6-3523923,155.9130434782609,301.52337857301706,1474,54,114.2608695652174,174.7169704489116,827,54,2628,3037.6666666666665,4554.227237114187,10120,0,6213.409090909091,4775.907409757866,10122,6,6208.500000000001,4821.963419011566,10121,0,95.0,0.0,0.0,0.0,0.0,489.4154589371981,573.3602721910498,1474.0,54.0,155.9130434782609,39,41,10.0.2.15,199.38.164.165,50785,443,6,46,ckm-m.xp1.ru4.com,t12d1509h2_073e58a039a6_e70312a1ce2c,5dcc087b1a1d0a5b0658981a7e8b2c3c11281,c2_beaconing,mta_pikabot,Pikabot_2023-11-02.pcap,10.11.2.101:53015-51.195.232.97:13782-6-1698962021320,251.14999999999995,368.13102287093386,1430,60,160.9090909090909,218.6094483527437,749,60,1770,3419.4210526315787,14446.982777328318,63073,0,6496.9,19881.43397158934,63073,0,8101.374999999999,22275.89304246377,63228,0,146.5,0.0,0.0,0.0,0.0,506.94483726150395,534.1944644064149,1430.0,60.0,251.14999999999995,12,13,10.11.2.101,51.195.232.97,53015,13782,6,20,,t12i190700_d83cc789557e_7af1ed941c26,ec74a5c51106f0419184d0dd08fb05bc11291,c2_beaconing,mta_icedid,IcedID_2023-09-28.pcap,10.10.20.147:51025-141.98.80.158:443-6-1695923368888,420.94117647058823,594.7432825955357,1514,54,338.61111111111114,561.7265546707064,1514,54,6095,30.93939393939394,90.08015159912428,372,0,60.05882352941177,119.95231895853208,372,0,56.33333333333333,123.35295854154606,372,0,1.0,0.0,0.0,0.0,0.0,664.1238652868554,621.0552689692864,1514.0,54.0,420.94117647058823,20,22,10.10.20.147,141.98.80.158,51025,443,6,34,umomrmwa.com,t12d190800_d83cc789557e_7af1ed941c26,f176ba63b4d68e576b5ba345bec2c7b711301,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:52026-194.165.16.90:443-6-1668460484114,466.32,610.5326035520134,1514,54,493.1666666666667,647.6681014971864,1514,54,5918,69.0,170.2116329749527,567,0,150.54545454545456,230.7277025570894,567,0,120.41666666666667,226.05327543155252,567,0,1.0,0.0,0.0,0.0,0.0,678.3361253561253,614.6092548983562,1514.0,54.0,466.32,14,16,172.16.24.174,194.165.16.90,52026,443,6,25,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b711311,c2_beaconing,mta_pikabot,Pikabot_2023-11-02.pcap,10.11.2.101:52840-51.68.147.114:2083-6-1698944098224,249.35000000000002,361.98826311301724,1430,60,160.8181818181818,218.34047640408693,748,60,1769,8843.684210526315,26259.224114907873,90996,0,16803.0,35079.74969187273,90996,0,9604.625,26402.25504404338,74942,0,188.0,0.0,0.0,0.0,0.0,506.19152637485973,534.3655774268477,1430.0,60.0,249.35000000000002,14,15,10.11.2.101,51.68.147.114,52840,2083,6,20,,t12i190700_d83cc789557e_7af1ed941c26,ec74a5c51106f0419184d0dd08fb05bc11321,c2_beaconing,mta_gozi,Gozi_2023-07-12.pcap,10.7.12.121:50478-170.130.55.162:443-6-1689204995843,376.4545454545455,554.9982176953558,1514,54,153.2,200.96201962891726,636,54,1532,528.6666666666667,2297.42293305637,10547,0,1233.5555555555557,3495.3224855194376,10547,0,1005.4545454545454,3167.1786928948727,10547,0,40.0,0.0,0.0,0.0,0.0,546.4616161616161,556.9408340161756,1514.0,54.0,376.4545454545455,12,14,10.7.12.121,170.130.55.162,50478,443,6,22,iamupdate.com,t12d190700_d83cc789557e_2dae41c691ec,4ce0442e9d20d092d9d74e9ce54b363a11330,benign,benign,ctu_normal21_kali_2017.pcap,192.168.1.191:46884-172.217.23.226:443-6-1493726495098,177.55938037865758,230.12934594363009,1484,54,213.36194029850748,289.6297254631792,1434,66,57181,832.5965517241381,5259.442540512101,58505,0,1808.5992509363282,7672.3408756212575,58756,0,1547.75,7110.219119298454,58521,0,27.0,0.0,0.0,0.0,0.0,568.2028304479775,638.0523639813238,1484.0,54.0,177.55938037865758,551,559,192.168.1.191,172.217.23.226,46884,443,6,581,cm.g.doubleclick.net,t12d1109h2_43e74fd21232_fed6c16fddd0,2f69c2b8f42fd1701f8da1ce6d3dd25611341,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:50082-194.165.16.90:443-6-1668457662990,422.14285714285717,585.7869486480125,1514,54,430.42857142857144,616.7435215943265,1514,54,6026,53.81481481481482,139.73327257452846,503,0,111.76923076923075,188.0652164570196,503,0,94.61538461538461,187.12363936781585,503,0,10.0,0.0,0.0,0.0,0.0,663.3809523809524,619.9837354314599,1514.0,54.0,422.14285714285717,18,20,172.16.24.174,194.165.16.90,50082,443,6,28,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b711351,exfil,mta_lumma,Lumma_2025-07-02.pcap,10.7.2.101:49761-144.172.115.212:443-6-1751482555161,717.5862068965517,716.0687247678846,1514,54,1341.2586206896553,448.19202339695937,1514,54,77793,10.104347826086956,90.24764893793812,965,0,20.385964912280702,128.35049034159286,966,0,19.50877192982456,133.3142263878596,1006,0,1.5,0.0,0.0,0.0,0.0,759.528735632184,662.7349352978626,1514.0,54.0,717.5862068965517,24,26,10.7.2.101,144.172.115.212,49761,443,6,116,ponqcf.top,t13d201200_2b729b4bf6f3_e24568c0d440,15af977ce25de452b96affa2addb103611360,benign,benign,ctu_normal20_win_2017_https.pcap,10.0.2.15:49817-34.250.255.134:443-6-2671475,331.3333333333334,494.28166850095914,1514,54,220.28571428571428,400.198879130293,1514,54,3084,309.103448275862,1001.3391870328878,5283,0,689.5384615384615,1502.2113486115848,5499,0,593.8666666666667,1446.605478188096,5541,0,55.0,0.0,0.0,0.0,0.0,627.1243386243386,629.6534672024868,1514.0,54.0,331.3333333333334,21,23,10.0.2.15,34.250.255.134,49817,443,6,30,keymaker.go.sonobi.com,t12d1509h2_073e58a039a6_e70312a1ce2c,303951d4c50efb2e991652225a6f02b111370,benign,benign,ctu_normal21_kali_2017.pcap,192.168.1.191:41670-172.217.23.238:443-6-1493726749811,302.65454545454537,486.49320417703433,1484,54,99.7,58.41595790476292,278,66,2991,3281.925925925926,13565.284825963066,58799,0,6105.6551724137935,18180.715851606263,58813,0,7384.083333333332,19832.05150631864,58814,0,40.5,0.0,0.0,0.0,0.0,485.39494949494946,554.915808521883,1484.0,54.0,278.0,45,48,192.168.1.191,172.217.23.238,41670,443,6,55,s.ytimg.com,t12d1109h2_43e74fd21232_fed6c16fddd0,ea9bd07e32dfe1d6dd7b2e678bfdd5ad11381,c2_beaconing,mta_gootloader,GootLoader_2023-12-29.pcap,10.12.29.101:51389-172.67.141.155:443-6-1703877736050,294.30769230769226,444.346783607763,1514,54,359.57142857142856,532.7969773259033,1514,54,2517,72.66666666666667,221.87356486945168,775,0,145.33333333333331,309.8294154315672,776,0,165.2,341.4962664510404,775,0,2.0,0.0,0.0,0.0,0.0,553.5606430606431,572.0509742758369,1514.0,54.0,294.30769230769226,8,10,10.12.29.101,172.67.141.155,51389,443,6,13,latesthentai.com,t12d210700_76e208dd3e22_2dae41c691ec,b31c0b82752ea0e2c48b8ce46e9263e511391,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:50061-194.165.16.90:443-6-1668457629662,435.77777777777777,589.6705294767014,1514,54,459.3846153846154,631.944425096271,1514,54,5972,52.1923076923077,131.64619834412818,451,0,113.08333333333333,179.108630487622,452,0,86.61538461538461,171.56268944690862,451,0,1.0,0.0,0.0,0.0,0.0,668.1132817799485,618.2566902665315,1514.0,54.0,435.77777777777777,16,18,172.16.24.174,194.165.16.90,50061,443,6,27,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b711401,c2_beaconing,mta_gozi,Gozi_2023-07-12.pcap,10.7.12.121:50104-170.130.55.162:443-6-1689203227274,350.45833333333337,539.218676231732,1514,54,144.18181818181816,192.9812520333611,636,54,1586,470.4347826086957,2174.168489458294,10441,0,1082.0,3289.3297865134236,10441,1,898.3333333333333,3006.666995901346,10443,0,1.0,0.0,0.0,0.0,0.0,538.4044612794613,558.5652418639056,1514.0,54.0,350.45833333333337,15,17,10.7.12.121,170.130.55.162,50104,443,6,24,iamupdate.com,t12d190700_d83cc789557e_2dae41c691ec,4ce0442e9d20d092d9d74e9ce54b363a11410,benign,benign,ctu_normal21_kali_2017.pcap,192.168.1.191:37702-72.21.206.135:443-6-1493726951539,291.1379310344828,460.4700024460978,1514,54,220.1875,389.4993741971867,1340,54,3523,615.7142857142858,2160.048350918765,9996,0,1149.3333333333337,2906.5713887835677,9996,0,1419.7499999999998,3271.3192258281256,10118,0,81.0,0.0,0.0,0.0,0.0,602.1985521662245,614.7654566362046,1514.0,54.0,291.1379310344828,19,21,192.168.1.191,72.21.206.135,37702,443,6,29,fls-na.amazon.com,t12d1109h2_43e74fd21232_fed6c16fddd0,11420,benign,benign,ctu_normal20_win_2017_https.pcap,10.0.2.15:49857-144.76.57.125:443-6-2684844,302.0357142857142,461.4588366653173,1474,54,118.91666666666667,135.5134735557742,500,54,1427,659.2592592592594,2088.753522164182,9911,0,1618.090909090909,3106.431214578731,9911,4,1185.2,2791.533275562272,10115,0,4.0,0.0,0.0,0.0,0.0,496.70304232804233,545.9031178412109,1474.0,54.0,302.0357142857142,21,23,10.0.2.15,144.76.57.125,49857,443,6,28,ads.lfstmedia.com,t12d1509h2_073e58a039a6_e70312a1ce2c,452c3b3abf0ed48df1b925f6977db72b11430,benign,benign,ctu_normal21_kali_2017.pcap,192.168.1.191:37906-95.172.94.25:443-6-1493726900304,307.34999999999997,477.1180230244262,1514,54,182.9090909090909,311.17340970765946,1101,54,2012,24.789473684210527,46.75180204176142,207,0,43.3,61.1410936550315,207,0,54.25,84.11174540030491,239,0,22.0,0.0,0.0,0.0,0.0,582.3003928170594,586.2011626939774,1514.0,54.0,307.34999999999997,15,17,192.168.1.191,95.172.94.25,37906,443,6,20,pixel.quantserve.com,t12d1109h2_43e74fd21232_fed6c16fddd0,ccc514751b175866924439bdbb5bba3411441,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:52124-194.165.16.90:443-6-1668460638430,466.32,610.5326035520134,1514,54,493.1666666666667,647.6681014971864,1514,54,5918,58.12499999999999,142.83079454223173,479,0,126.81818181818181,193.9524777783559,481,0,98.75,188.20449468113617,479,0,1.0,0.0,0.0,0.0,0.0,678.3361253561253,614.6092548983562,1514.0,54.0,466.32,14,16,172.16.24.174,194.165.16.90,52124,443,6,25,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b711451,c2_beaconing,mta_qakbot,Qakbot_2022-09-29.pcap,10.9.29.201:50120-186.81.122.168:443-6-1664421804689,168.38095238095238,217.529417824458,718,54,156.5,221.22777238115307,695,54,1878,7011.5,24777.617375152797,107879,0,12748.181818181818,32954.94676013961,107879,0,17517.125,38160.01784380198,107880,2,1.5,0.0,0.0,0.0,0.0,311.34479717813053,286.19786817207995,718.0,54.0,168.38095238095238,14,16,10.9.29.201,186.81.122.168,50120,443,6,21,,t13i201000_2b729b4bf6f3_533b6d20482b,2253c82f03b621c5144709b393fde2c911460,benign,benign,ctu_normal20_win_2017_https.pcap,10.0.2.15:49905-213.180.193.119:443-6-2818867,356.34782608695656,541.504269159336,1474,54,86.54545454545455,64.07084147467339,243,54,952,341.4090909090909,1226.4300752334923,5736,0,751.1,1780.6687538986894,5736,1,679.9090909090909,1798.3267475375799,6020,0,4.5,0.0,0.0,0.0,0.0,488.839994144342,553.9108907906539,1474.0,54.0,243.0,15,17,10.0.2.15,213.180.193.119,49905,443,6,23,mc.yandex.ru,t12d1509h2_073e58a039a6_e70312a1ce2c,efa27390e911df97bf93c574f658aaa711471,c2_beaconing,mta_pikabot,Pikabot_2023-11-02.pcap,10.11.2.101:53084-45.32.140.39:2078-6-1698968663256,233.0909090909091,350.60449961675505,1430,60,152.33333333333334,209.94645782083384,747,60,1828,6330.285714285714,19811.055360941416,75058,0,12076.272727272728,26622.25808263044,75058,0,14760.555555555555,29027.853645727544,75058,0,92.0,0.0,0.0,0.0,0.0,500.2693602693603,536.7205895193964,1430.0,60.0,233.0909090909091,14,15,10.11.2.101,45.32.140.39,53084,2078,6,22,,t12i190700_d83cc789557e_7af1ed941c26,ec74a5c51106f0419184d0dd08fb05bc11481,c2_beaconing,mta_pikabot,Pikabot_2024-02-08.pcap,10.2.8.101:53351-158.220.80.157:9785-6-1707421967846,239.78947368421052,351.27412197873304,1430,60,128.3,112.95530089376062,411,60,1283,3405.666666666666,14112.762196803624,59953,0,6811.333333333333,19928.97038233536,59953,0,7641.625,21223.841209744023,60167,0,144.0,0.0,0.0,0.0,0.0,464.75068226120857,530.387233399006,1430.0,60.0,239.78947368421052,12,13,10.2.8.101,158.220.80.157,53351,9785,6,19,,t12i190700_d83cc789557e_7af1ed941c26,ec74a5c51106f0419184d0dd08fb05bc11490,benign,benign,ctu_normal14_win_full_2017.pcap,10.0.2.15:50460-5.45.69.166:443-6-1568186,442.59999999999997,567.0546394330656,1474,54,410.0666666666666,537.513782769025,1324,54,6151,135.7948717948718,382.98173513458005,1721,0,378.21428571428567,592.0044410659082,1722,0,218.79166666666666,515.3482553335776,2000,0,45.0,0.0,0.0,0.0,0.0,638.7540740740741,578.563299254192,1474.0,54.0,442.59999999999997,33,35,10.0.2.15,5.45.69.166,50460,443,6,40,7sim.net,t12d1712h2_67e6df579eba_88be6878e1da,7bee5c1d424b7e5f943b06983bb1142211500,c2_beaconing,mta_pikabot,Pikabot_2023-05-23.pcap,10.1.0.186:55059-13.107.246.57:443-6-1684857124479,328.2758620689655,514.8253446247381,1430,54,95.73333333333333,79.43412964451082,344,54,1436,13.214285714285715,27.49728221298478,114,0,26.42857142857143,35.239213921456845,115,0,24.615384615384617,36.65955642016249,115,0,2.0,0.0,0.0,0.0,0.0,485.2708629812078,532.0659288412729,1430.0,54.0,328.2758620689655,24,26,10.1.0.186,13.107.246.57,55059,443,6,29,maps.windows.com,t13d2012h2_2b729b4bf6f3_9e7b989ebec8,d55869f1ff717e3288bbb9dd25d116cd11511,c2_beaconing,mta_emotet,Emotet_2022-07-07.pcap,10.7.7.101:57404-52.18.235.51:443-6-1657219315452,383.6,531.295431275404,1514,54,107.23529411764707,144.7120111686331,619,54,1823,2628.7352941176473,12875.33783565903,74709,0,5586.0625,18630.422899006702,74710,0,5254.823529411765,18090.518567177995,74710,0,56.0,0.0,0.0,0.0,0.0,549.3829339143065,561.1573734688156,1514.0,54.0,383.6,27,29,10.7.7.101,52.18.235.51,57404,443,6,35,distinctive-obi-mgw.aws-euw1.cloud-ara.tyk.io,t12d190700_d83cc789557e_2dae41c691ec,61be9ce3d068c08ff99a857f62352f9d11521,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:51423-194.165.16.90:443-6-1668459694022,450.4615384615385,603.6125400134912,1514,54,459.3846153846154,631.944425096271,1514,54,5972,62.96000000000001,157.9700604545051,550,0,131.16666666666666,211.749780866403,551,0,113.08333333333334,212.66040291906006,550,0,1.0,0.0,0.0,0.0,0.0,672.8205128205128,616.4463618420267,1514.0,54.0,450.4615384615385,16,18,172.16.24.174,194.165.16.90,51423,443,6,26,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b711530,c2_beaconing,mta_emotet,Emotet_2022-11-07_0.pcap,192.168.1.133:52634-62.149.128.202:465-6-1667838437756,60.0,6.324555320336759,66,54,66.0,0.0,66,66,330,307.0,190.89853325785404,515,138,656.25,12.685293322058685,672,641,653.5,18.37570860311697,681,643,166.0,0.0,0.0,0.0,0.0,60.0,5.656854249492381,66.0,54.0,60.0,0,9,192.168.1.133,62.149.128.202,52634,465,6,10,,,11541,c2_beaconing,mta_pikabot,Pikabot_2023-10-03.pcap,10.1.2.147:49588-179.60.149.244:443-6-1696349917715,456.5000000000001,597.903045421361,1450,60,351.2352941176471,540.7953089445863,1450,60,5971,3719.068965517241,19962.61571382696,107514,0,6740.812499999999,26872.87653680752,107514,0,22.666666666666668,31.88426038982339,79,0,5.0,0.0,0.0,0.0,0.0,656.876571141277,583.2948375206743,1450.0,60.0,456.5000000000001,16,17,10.1.2.147,179.60.149.244,49588,443,6,30,zzerxc.com,t12d190700_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b711550,benign,benign,ctu_normal14_win_full_2017.pcap,10.0.2.15:49194-172.217.23.227:443-6-130413,295.14285714285705,499.02127066030823,1474,54,85.2,68.23781942588728,261,54,852,21.400000000000002,33.445005920953754,107,0,47.55555555555556,48.00549737038225,116,0,39.6,43.41837808527117,107,0,23.0,0.0,0.0,0.0,0.0,470.815873015873,553.5518714597337,1474.0,54.0,261.0,12,14,10.0.2.15,172.217.23.227,49194,443,6,21,fonts.gstatic.com,t12d1710h2_67e6df579eba_4a7a952b215a,2157c9e56433c78142661ce68e17a9ab11560,benign,benign,ctu_normal21_kali_2017.pcap,192.168.1.191:34534-172.217.23.230:443-6-1493726916747,233.8928571428571,395.19627934274536,1484,66,103.33333333333333,65.25955503839667,258,66,1550,31.962962962962965,65.07716217719575,279,0,61.64285714285713,100.69115547657992,362,0,68.33333333333333,92.4803009327179,283,0,27.0,0.0,0.0,0.0,0.0,460.6405168905169,556.5459252880046,1484.0,66.0,233.8928571428571,21,22,192.168.1.191,172.217.23.230,34534,443,6,28,ad.doubleclick.net,t12d1109h2_43e74fd21232_fed6c16fddd0,2f69c2b8f42fd1701f8da1ce6d3dd25611570,benign,benign,ctu_normal20_win_2017_https.pcap,10.0.2.15:52571-74.220.195.201:443-6-9159186,241.50000000000009,308.5627270454731,1275,54,190.27272727272725,206.41612868624918,571,54,2093,588.695652173913,2061.3531838616595,9962,0,1353.8999999999999,3047.1841446015555,9965,0,1112.75,2808.8856452660757,9973,0,11.0,0.0,0.0,0.0,0.0,444.4020979020979,469.54626686322,1275.0,54.0,241.50000000000009,17,19,10.0.2.15,74.220.195.201,52571,443,6,24,bluehost-cdn.com,t12d1510h2_073e58a039a6_60bf0a45ed8c,929396ee1cf23d90570e05a4ce02f0e811581,c2_beaconing,mta_bumblebee,BumbleBee_2022-06-14.pcap,10.6.14.101:49259-193.233.203.156:443-6-1655231465167,162.88235294117646,290.8590471244064,1270,60,89.44444444444444,52.48359532061212,207,60,805,54.125,95.9658793530284,245,0,108.24999999999999,116.22607280640604,245,0,88.71428571428571,109.77509475546549,213,0,100.5,0.0,0.0,0.0,0.0,380.5363108206245,479.69657827340194,1270.0,60.0,162.88235294117646,9,12,10.6.14.101,193.233.203.156,49259,443,6,17,,t12i210600_76e208dd3e22_2dae41c691ec,76c691f46143bf86e2d1bb73c618776711591,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:50380-194.165.16.90:443-6-1668458111041,466.32,610.5326035520134,1514,54,493.1666666666667,647.6681014971864,1514,54,5918,72.99999999999999,183.05261776212112,729,0,159.27272727272725,249.19835108165978,730,0,119.74999999999999,238.800078041711,729,0,254.0,0.0,0.0,0.0,0.0,678.3361253561253,614.6092548983562,1514.0,54.0,466.32,14,16,172.16.24.174,194.165.16.90,50380,443,6,25,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b711600,benign,benign,ctu_normal21_kali_2017.pcap,192.168.1.191:35208-216.58.201.106:443-6-1493726995076,244.0333333333333,389.1201820671269,1484,66,99.70588235294117,62.12161933043354,259,66,1695,91.93103448275865,220.12608903510653,1063,0,166.625,278.96639582573385,1063,0,218.41666666666669,347.1801885668785,1127,0,56.0,0.0,0.0,0.0,0.0,466.8342718283895,555.7812920837221,1484.0,66.0,244.0333333333333,24,25,192.168.1.191,216.58.201.106,35208,443,6,30,ajax.googleapis.com,t12d1109h2_43e74fd21232_fed6c16fddd0,2f69c2b8f42fd1701f8da1ce6d3dd25611610,benign,benign,ctu_normal20_win_2017_https.pcap,10.0.2.15:49167-54.192.44.177:443-6-190722,269.3684210526316,450.511956990947,1474,54,96.00000000000001,74.82145414251183,263,54,864,313.6111111111111,1133.170312669874,4841,0,705.625,1675.7940495265434,4841,1,624.5555555555557,1675.2362602862256,5085,0,13.5,0.0,0.0,0.0,0.0,462.6409356725146,553.7427991025085,1474.0,54.0,263.0,11,13,10.0.2.15,54.192.44.177,49167,443,6,19,tiles-cloudfront.cdn.mozilla.net,t12d1509h2_073e58a039a6_e70312a1ce2c,76cc3e2d3028143b23ec18e27dbd7ca911620,c2_beaconing,mta_icedid,IcedID_2022-01-12.pcap,10.22.5.47:50448-104.208.16.90:443-6-1642008032334,529.7272727272729,581.5092172072337,1415,60,356.45454545454544,485.3601474444237,1415,60,3921,34.47619047619048,54.669570190023485,149,0,72.4,79.17238575833538,204,0,60.5,62.7450750612703,149,0,41.0,0.0,0.0,0.0,0.0,668.2424242424242,567.6876477263562,1415.0,60.0,529.7272727272729,14,15,10.22.5.47,104.208.16.90,50448,443,6,22,browser.events.data.microsoft.com,t13d1516h2_8daaf6152771_e5627efa2ab1,986571066668055ae9481cb84fda634a11631,c2_beaconing,mta_pikabot,Pikabot_2023-10-03.pcap,10.1.2.147:49504-179.60.149.244:443-6-1696349816117,429.90625000000006,585.445755696378,1450,60,335.05555555555554,529.120187861524,1450,60,6031,12.258064516129034,26.565601495085687,78,0,22.35294117647059,34.969524547222875,88,0,23.69230769230769,34.279208021249595,79,0,3.0,0.0,0.0,0.0,0.0,647.4243276014109,585.9373853056031,1450.0,60.0,429.90625000000006,16,17,10.1.2.147,179.60.149.244,49504,443,6,32,zzerxc.com,t12d190700_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b711640,benign,benign,ctu_normal20_win_2017_https.pcap,10.0.2.15:52542-74.220.195.201:443-6-9146121,152.57142857142856,175.68340030537075,571,54,158.70000000000002,187.84393640584847,571,54,1587,564.8499999999999,2224.6266931070054,10005,0,1255.111111111111,3284.661947767397,10005,5,1109.6,3128.7466145052044,10007,4,7.5,0.0,0.0,0.0,0.0,250.36349206349206,212.87628838059658,571.0,54.0,152.57142857142856,14,16,10.0.2.15,74.220.195.201,52542,443,6,21,bluehost-cdn.com,t12d1510h2_073e58a039a6_60bf0a45ed8c,929396ee1cf23d90570e05a4ce02f0e811651,c2_beaconing,mta_qakbot,Qakbot_2022-09-29.pcap,10.9.29.201:50038-186.81.122.168:443-6-1664415122898,172.5238095238095,229.2776960473083,814,54,155.75,219.2425493706581,686,54,1869,5595.95,19100.873420302563,81756,0,10174.454545454546,25337.05114398136,81756,0,13976.875,29266.77543093875,81758,1,1.0,0.0,0.0,0.0,0.0,333.24029982363317,315.71758292746546,814.0,54.0,172.5238095238095,14,16,10.9.29.201,186.81.122.168,50038,443,6,21,,t13i201000_2b729b4bf6f3_533b6d20482b,2253c82f03b621c5144709b393fde2c911660,benign,benign,ctu_normal14_win_full_2017.pcap,10.0.2.15:52553-204.11.109.77:443-6-3638816,337.90000000000003,500.4240202068641,1474,54,115.1111111111111,120.44546945033305,372,54,1036,139.05263157894737,290.2354357881451,1258,0,330.25,408.4821206088987,1258,11,243.2,485.5248706297134,1602,0,20.0,0.0,0.0,0.0,0.0,495.02143658810326,546.2075407075828,1474.0,54.0,337.90000000000003,13,15,10.0.2.15,204.11.109.77,52553,443,6,20,tags.expo9.exponential.com,t12d1711h2_67e6df579eba_de5ccbe16bdd,f2330448a99fe144021ca92cace91bbe11671,c2_beaconing,mta_icedid,IcedID_2023-09-28.pcap,10.10.20.147:51006-141.98.80.158:443-6-1695923337152,451.6451612903227,605.5861925103145,1514,54,374.1875,587.756550367582,1514,54,5987,33.633333333333326,93.28432005335137,372,0,67.26666666666668,125.08652243642437,372,0,60.92857142857144,127.18881438827277,372,0,2.0,0.0,0.0,0.0,0.0,673.7888142174432,617.2388527865573,1514.0,54.0,451.6451612903227,18,20,10.10.20.147,141.98.80.158,51006,443,6,31,umomrmwa.com,t12d190800_d83cc789557e_7af1ed941c26,f176ba63b4d68e576b5ba345bec2c7b711680,benign,benign,ctu_normal20_win_2017_https.pcap,10.0.2.15:49751-185.29.133.34:443-6-2647797,137.91860465116275,265.26994974559426,1474,54,114.73809523809523,198.71809417458928,1063,54,4819,3431.6117647058827,4680.273333730773,10237,0,7114.29268292683,4378.187617290415,10238,2,6782.2558139534885,4576.857952647799,10239,0,57.5,0.0,0.0,0.0,0.0,509.5224616038569,596.7831980821815,1474.0,54.0,137.91860465116275,80,82,10.0.2.15,185.29.133.34,49751,443,6,86,sync.mathtag.com,t12d1509h2_073e58a039a6_e70312a1ce2c,389ed42c02ebecc32e73aa31def07e1411691,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:50141-194.165.16.90:443-6-1668457748507,435.77777777777777,589.6705294767014,1514,54,459.3846153846154,631.944425096271,1514,54,5972,53.65384615384616,135.69375587924222,484,0,116.25,184.61218565118904,485,0,88.92307692307693,176.94182732302232,484,0,2.0,0.0,0.0,0.0,0.0,668.1132817799485,618.2566902665315,1514.0,54.0,435.77777777777777,16,18,172.16.24.174,194.165.16.90,50141,443,6,27,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b711701,c2_beaconing,mta_qakbot,Qakbot_2023-05-10.pcap,172.16.10.73:50414-52.13.171.212:443-6-1683739941931,344.9259259259259,528.101747621096,1514,54,106.61538461538461,106.95835518364025,391,54,1386,4191.923076923076,19859.21616967412,101427,0,9082.5,29118.39732571458,101427,0,8361.384615384615,27999.764515493287,101428,0,83.0,0.0,0.0,0.0,0.0,510.97284402839955,562.4471457587264,1514.0,54.0,344.9259259259259,15,17,172.16.10.73,52.13.171.212,50414,443,6,27,broadcom.com,t12d180800_4b22cbed5bed_7af1ed941c26,e36e593c5f33a620e2c9d3801f61be4a11711,c2_beaconing,mta_gootloader,GootLoader_2023-12-29.pcap,10.12.29.101:51352-104.21.94.236:443-6-1703876945569,411.71428571428567,548.937532225402,1514,54,256.5,452.3443255849341,1514,54,2565,35.65,126.72650825591639,570,0,79.22222222222223,185.20446658880678,570,0,66.89999999999999,177.71728484684132,570,0,4.5,0.0,0.0,0.0,0.0,647.6702741702742,611.8716086108082,1514.0,54.0,411.71428571428567,15,17,10.12.29.101,104.21.94.236,51352,443,6,21,latesthentai.com,t12d210700_76e208dd3e22_2dae41c691ec,466556e923186364e82cbdb4cad8df2c11720,benign,benign,ctu_normal20_win_2017_https.pcap,10.0.2.15:51388-94.31.6.172:443-6-5659871,165.75000000000003,210.26253430731148,637,54,199.375,250.95585126813498,637,54,1595,210.13333333333333,472.1812404252459,1836,0,450.1428571428571,634.0442751552473,1836,25,447.0,639.3147373034141,1839,0,40.0,0.0,0.0,0.0,0.0,274.5833333333333,239.4081605984038,637.0,54.0,165.75000000000003,10,12,10.0.2.15,94.31.6.172,51388,443,6,16,p.adsymptotic.com,t12d1510h2_073e58a039a6_60bf0a45ed8c,364ff14b04ef93c3b4cfa429d729c0d911730,c2_beaconing,mta_qakbot,Qakbot_2023-05-10.pcap,172.16.10.73:50562-152.216.11.110:443-6-1683742680578,156.47058823529414,273.2400770492542,1180,54,208.77777777777774,370.24173784764514,1180,54,1879,6901.75,27422.147801852912,109734,0,13803.500000000002,38762.03417557664,109734,0,15766.142857142857,41436.64988239506,109735,1,33.0,0.0,0.0,0.0,0.0,359.65259622367466,443.53428232370794,1180.0,54.0,156.47058823529414,10,12,172.16.10.73,152.216.11.110,50562,443,6,17,irs.gov,t12d180800_4b22cbed5bed_7af1ed941c26,76c691f46143bf86e2d1bb73c618776711740,benign,benign,ctu_normal20_win_2017_https.pcap,10.0.2.15:49974-192.229.233.50:443-6-3038750,323.2916666666667,518.7853270667069,1474,54,116.36363636363637,155.39901719590938,571,54,1280,250.08695652173915,1106.4957344141367,5321,0,575.1,1669.2092905191835,5321,2,477.08333333333337,1597.4134466996857,5549,0,2.0,0.0,0.0,0.0,0.0,513.2266576016576,545.2799284974063,1474.0,54.0,323.2916666666667,15,17,10.0.2.15,192.229.233.50,49974,443,6,24,pbs.twimg.com,t12d1510h2_073e58a039a6_60bf0a45ed8c,76cc3e2d3028143b23ec18e27dbd7ca911750,benign,benign,ctu_normal20_win_2017_https.pcap,10.0.2.15:51425-91.198.174.192:443-6-5721610,746.0162162162162,677.9646019827393,1474,54,84.04430379746837,115.21236801844093,1243,54,13279,409.6462093862815,4728.527681397019,65252,0,1445.5031847133757,8817.792370545696,65252,0,573.0050505050507,5610.341850635047,65548,0,2.0,0.0,0.0,0.0,0.0,688.0590614176974,598.2341568519981,1474.0,54.0,746.0162162162162,406,408,10.0.2.15,91.198.174.192,51425,443,6,555,de.wikipedia.org,t12d1509h2_073e58a039a6_e70312a1ce2c,e1780de8814476f0cb0c3f0226424e5111761,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:52139-194.165.16.90:443-6-1668460663572,466.32,610.5326035520134,1514,54,493.1666666666667,647.6681014971864,1514,54,5918,68.75000000000001,172.43202819611585,609,0,150.0,234.82929970512623,610,0,119.25,229.3635958274745,609,0,1.0,0.0,0.0,0.0,0.0,678.3361253561253,614.6092548983562,1514.0,54.0,466.32,14,16,172.16.24.174,194.165.16.90,52139,443,6,25,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b711770,benign,benign,ctu_normal20_win_2017_https.pcap,10.0.2.15:52325-172.217.23.142:443-6-7441538,425.01234567901236,603.5866030203778,1514,54,700.5789473684209,705.705230232312,1514,54,26622,2515.8250000000007,12397.387742171606,66176,0,5439.621621621621,17914.763963079527,66176,0,4791.547619047619,16926.449059562663,66415,0,2.0,0.0,0.0,0.0,0.0,663.4532961267174,624.3812848116788,1514.0,54.0,425.01234567901236,51,53,10.0.2.15,172.217.23.142,52325,443,6,81,safebrowsing.google.com,t12d1509h2_073e58a039a6_e70312a1ce2c,84480cf8cf0e732666092640e581e1a511780,benign,benign,ctu_normal21_kali_2017.pcap,192.168.1.191:49854-93.184.220.113:443-6-1493727015950,355.97014925373134,542.2705064132983,1514,66,113.44444444444444,168.06043886385368,1057,66,4084,2745.833333333334,12254.863338011297,58452,0,5173.257142857144,16572.81567426336,58575,0,6039.999999999999,17783.580334601953,58470,0,25.0,0.0,0.0,0.0,0.0,598.8919441026646,580.4978282182985,1514.0,66.0,355.97014925373134,55,58,192.168.1.191,93.184.220.113,49854,443,6,67,tags.crwdcntrl.net,t12d1109h2_43e74fd21232_fed6c16fddd0,11790,benign,benign,ctu_normal20_win_2017_https.pcap,10.0.2.15:49329-104.125.18.180:443-6-873250,1195.1257110352697,554.8228301110536,1474,54,57.32696897374703,29.557510450721136,347,54,24020,32.98321479374111,1728.1399134958478,102451,0,277.3588516746411,5009.856021656432,102451,0,4.304909560723525,27.98761649407259,543,0,2.0,0.0,0.0,0.0,0.0,673.1681896454609,636.6306967697097,1474.0,54.0,347.0,937,939,10.0.2.15,104.125.18.180,49329,443,6,3516,fpdownload.adobe.com,t10d120300_d94e65cdb899_33a13ba74d1c,6aa98948bfa9626adc8d77e0f16d39c611801,c2_beaconing,mta_gozi,Gozi_2023-07-12.pcap,10.7.12.121:50359-170.130.55.162:443-6-1689204461892,372.2272727272728,548.1568190476137,1514,54,153.2,200.96201962891726,636,54,1532,512.5238095238095,2274.704214157252,10438,0,1195.888888888889,3466.455842948402,10438,0,975.0000000000001,3139.49734830275,10439,0,29.0,0.0,0.0,0.0,0.0,545.130808080808,557.0655819951613,1514.0,54.0,372.2272727272728,14,16,10.7.12.121,170.130.55.162,50359,443,6,22,iamupdate.com,t12d190700_d83cc789557e_2dae41c691ec,4ce0442e9d20d092d9d74e9ce54b363a11810,c2_beaconing,mta_bumblebee,BumbleBee_2022-12-07.pcap,10.12.7.101:50055-139.177.146.137:443-6-1670430112285,186.64000000000001,302.9383710702008,1514,54,134.36363636363637,94.54445803670646,312,54,1478,1273.2916666666667,5909.720514830274,29009,0,3055.9000000000005,9121.747766860373,29010,0,2344.6923076923076,8014.082390648511,29009,0,39.5,0.0,0.0,0.0,0.0,450.07976911976914,574.6573554115225,1514.0,54.0,186.64000000000001,20,22,10.12.7.101,139.177.146.137,50055,443,6,25,,t12i210600_76e208dd3e22_2dae41c691ec,76c691f46143bf86e2d1bb73c618776711820,benign,benign,ctu_normal21_kali_2017.pcap,192.168.1.191:56356-23.253.41.115:443-6-1493726472635,247.49999999999997,395.9818177644019,1512,66,226.24999999999997,283.58659549220084,772,66,1810,75.33333333333333,112.55771006571737,410,0,143.0,201.89931484116863,575,0,143.42857142857142,187.02928214841756,536,0,126.0,0.0,0.0,0.0,0.0,526.2777777777778,565.0267624493115,1512.0,66.0,247.49999999999997,10,11,192.168.1.191,23.253.41.115,56356,443,6,16,api.autopilothq.com,t12d1110h2_43e74fd21232_205f67e4d9f4,fbe78c619e7ea20046131294ad087f0511831,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:50569-194.165.16.90:443-6-1668458398654,466.32,610.5326035520134,1514,54,493.1666666666667,647.6681014971864,1514,54,5918,57.041666666666664,137.73966596340412,453,0,124.45454545454544,186.4689591521139,455,0,94.58333333333333,179.08680390618773,453,0,1.0,0.0,0.0,0.0,0.0,678.3361253561253,614.6092548983562,1514.0,54.0,466.32,14,16,172.16.24.174,194.165.16.90,50569,443,6,25,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b711840,benign,benign,ctu_normal14_win_full_2017.pcap,10.0.2.15:49654-185.31.128.207:443-6-908787,442.49999999999994,581.308643605473,1514,54,472.09999999999997,593.1150253815304,1514,54,4721,480.3913043478262,2219.225740066903,10660,0,1227.6666666666667,3537.484734949396,10660,0,847.6923076923077,2961.904972159398,10705,0,29.0,0.0,0.0,0.0,0.0,666.6619047619048,611.2009711752206,1514.0,54.0,442.49999999999994,16,18,10.0.2.15,185.31.128.207,49654,443,6,24,a.rfihub.com,t12d1711h2_67e6df579eba_de5ccbe16bdd,0a917d753018dad73d9899ace370f8d811850,benign,benign,ctu_normal14_win_full_2017.pcap,10.0.2.15:49934-45.55.217.192:443-6-1088601,717.5000000000002,669.1866304528294,1474,54,194.63157894736847,287.6049007707769,940,54,3698,396.02898550724626,2403.684408245309,19232,0,1518.111111111111,4617.586202754561,19232,0,544.14,2872.76896227529,19554,0,27.0,0.0,0.0,0.0,0.0,652.7139662882697,556.6116302660721,1474.0,54.0,717.5000000000002,42,44,10.0.2.15,45.55.217.192,49934,443,6,70,anon-sms.com,t12d1712h2_67e6df579eba_88be6878e1da,c6227321ea7621862dc7b7351771a62c11861,exfil,mta_lumma,Lumma_2025-08-13.pcap,10.8.13.101:55698-138.124.101.92:443-6-1755122448317,482.57575757575773,580.0087838937781,1514,54,125.53846153846153,138.00822160570448,497,54,1632,1908.8125,10592.890346793623,59957,0,5090.166666666667,17278.913980147405,59957,0,3206.210526315789,13756.968894906995,60014,0,33.0,0.0,0.0,0.0,0.0,556.6404687904688,558.8555156317044,1514.0,54.0,482.57575757575773,21,23,10.8.13.101,138.124.101.92,55698,443,6,33,secrequ.top,t13d201200_2b729b4bf6f3_e24568c0d440,15af977ce25de452b96affa2addb103611870,benign,benign,ctu_normal21_kali_2017.pcap,192.168.1.191:47938-54.77.91.81:443-6-1493727018620,100.7857142857143,67.65543763629235,291,54,103.87500000000001,78.30241284368482,291,54,831,703.9230769230769,1953.978269306769,7113,0,1307.2857142857142,2651.8955933624607,7245,3,1806.2,3039.3413266693165,7157,0,132.0,0.0,0.0,0.0,0.0,140.92526455026456,91.66596883156659,291.0,54.0,100.7857142857143,10,11,192.168.1.191,54.77.91.81,47938,443,6,14,r.skimresources.com,t12d1109h2_43e74fd21232_fed6c16fddd0,303951d4c50efb2e991652225a6f02b111881,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:51290-194.165.16.90:443-6-1668459487346,466.32,610.5326035520134,1514,54,493.1666666666667,647.6681014971864,1514,54,5918,70.33333333333333,172.76036850949419,612,0,153.36363636363637,234.35198856731415,613,0,121.41666666666667,228.61657393721018,612,0,1.0,0.0,0.0,0.0,0.0,678.3361253561253,614.6092548983562,1514.0,54.0,466.32,14,16,172.16.24.174,194.165.16.90,51290,443,6,25,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b711890,exfil,mta_koistealer,KoiStealer_2025-07-08.pcap,10.7.8.101:54902-20.106.86.13:443-6-1752006990931,369.00000000000006,542.309577104586,1514,54,405.33333333333337,583.6064802669036,1514,54,6080,20.06451612903226,32.72301482022601,91,0,44.42857142857144,52.89280056537328,144,0,34.3125,46.752851962919515,146,0,54.0,0.0,0.0,0.0,0.0,646.1416122004357,627.3250637393035,1514.0,54.0,369.00000000000006,19,21,10.7.8.101,20.106.86.13,54902,443,6,32,settings-win.data.microsoft.com,t12d1809h2_4b22cbed5bed_7af1ed941c26,2fe9b0e731d3d41b2b84e8e1d618683611901,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:51839-194.165.16.90:443-6-1668460184841,435.77777777777777,589.6705294767014,1514,54,459.3846153846154,631.944425096271,1514,54,5972,53.30769230769231,134.33682123104424,473,0,115.5,182.72557665427234,474,0,88.30769230769232,174.9944687770562,473,0,1.0,0.0,0.0,0.0,0.0,668.1132817799485,618.2566902665315,1514.0,54.0,435.77777777777777,16,18,172.16.24.174,194.165.16.90,51839,443,6,27,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b711911,c2_beaconing,mta_qakbot,Qakbot_2022-11-14_1.pcap,172.16.24.174:52099-194.165.16.90:443-6-1668460598179,450.4615384615385,603.6125400134912,1514,54,459.3846153846154,631.944425096271,1514,54,5972,64.32,162.0361893734442,614,0,134.0,217.33677260710562,614,0,111.0,215.22419600373593,614,0,2.0,0.0,0.0,0.0,0.0,672.8205128205128,616.4463618420267,1514.0,54.0,450.4615384615385,16,18,172.16.24.174,194.165.16.90,52099,443,6,26,,t12i190600_d83cc789557e_2dae41c691ec,f176ba63b4d68e576b5ba345bec2c7b711921,c2_beaconing,mta_icedid,IcedID_2023-09-28.pcap,10.10.20.147:50979-157.245.106.203:443-6-1695923228696,189.41176470588235,315.54398639958447,1356,54,118.00000000000001,92.3425300559978,278,54,944,4098.0625,15681.832811542363,62892,0,9367.0,23606.137259901996,62892,0,8150.0,22149.78119853235,62958,2,302.0,0.0,0.0,0.0,0.0,412.477850399419,510.5569739783454,1356.0,54.0,189.41176470588235,10,12,10.10.20.147,157.245.106.203,50979,443,6,17,feekstokandy.com,t12d190800_d83cc789557e_7af1ed941c26,ec74a5c51106f0419184d0dd08fb05bc11930,exfil,mta_xloader,XLoader_2025-09-05.pcap,10.9.5.71:57904-20.190.135.7:443-6-1757111643832,715.529411764706,641.8242577969559,1430,54,433.1333333333334,547.6702431555829,1430,60,6497,19.636363636363637,35.01501301390071,143,0,46.285714285714285,52.207321283555586,143,0,32.222222222222214,58.828320066359744,219,0,14.5,0.0,0.0,0.0,0.0,725.0151588120629,571.2392819257037,1430.0,54.0,715.529411764706,15,16,10.9.5.71,20.190.135.7,57904,443,6,34,login.live.com,t13d2013h2_2b729b4bf6f3_e24568c0d440,7d8fd34fdb13a7fff30d5a52846b6c4c11941,c2_beaconing,mta_gozi,Gozi_2023-07-12.pcap,10.7.12.121:50263-170.130.55.162:443-6-1689204002757,393.8095238095238,574.9684877493391,1514,54,164.2222222222222,209.92187700295662,636,54,1478,548.35,2323.149637770603,10410,0,1370.875,3655.223715549335,10410,0,993.3636363636363,3126.0510639695976,10411,0,19.5,0.0,0.0,0.0,0.0,550.0035273368607,555.5289729985876,1514.0,54.0,393.8095238095238,11,13,10.7.12.121,170.130.55.162,50263,443,6,21,iamupdate.com,t12d190700_d83cc789557e_2dae41c691ec,4ce0442e9d20d092d9d74e9ce54b363a11951,exfil,exfil_https,2024-10-03-SmartLoader-to-Lumma-Stealer.pcap,10.10.3.101:49886-104.21.90.47:443-6-1727930380170,319.4782608695652,486.9206459116514,1514,54,241.49999999999997,391.71084857186287,1313,54,2415,35.090909090909086,127.82052487799672,603,0,85.77777777777777,195.36618040091903,604,0,61.083333333333336,171.59649198222573,603,0,2.0,0.0,0.0,0.0,0.0,604.8266443701226,608.1987285491875,1514.0,54.0,319.4782608695652,15,17,10.10.3.101,104.21.90.47,49886,443,6,23,highawaretemptersudwu.xyz,t12d190800_d83cc789557e_7af1ed941c26,6d6b821affda5de6562d217770a7ead011960,benign,benign,ctu_normal14_win_full_2017.pcap,10.0.2.15:51515-216.58.201.78:443-6-3126690,119.39999999999999,142.28231493357544,574,54,147.5,187.9445206893323,574,54,1180,661.2142857142858,2346.634617377091,8810,0,1322.4285714285716,3303.575681850544,8810,0,1539.1666666666665,3706.038770259516,9104,12,21.0,0.0,0.0,0.0,0.0,208.6873015873016,201.43206666385984,574.0,54.0,119.39999999999999,7,9,10.0.2.15,216.58.201.78,51515,443,6,15,apis.google.com,t12d1712h2_67e6df579eba_88be6878e1da,c74a0764cf5d01aa28d5c7769cd86fc111971,exfil,mta_lumma,Lumma_2025-08-15.pcap,10.8.15.176:49997-185.95.159.55:443-6-1755275942241,779.5,650.1626002621659,1430,54,143.5909090909091,179.29801185812704,737,60,3159,148.15254237288136,967.428885625928,7431,0,416.23809523809524,1612.9340626560625,7431,0,234.7297297297297,1238.1088771152527,7541,0,8.0,0.0,0.0,0.0,0.0,648.416533758639,558.1479524344817,1430.0,54.0,737.0,31,32,10.8.15.176,185.95.159.55,49997,443,6,60,vishneviyjazz.ru,t13d201200_2b729b4bf6f3_e24568c0d440,15af977ce25de452b96affa2addb103611980,c2_beaconing,mta_cobaltstrike,CobaltStrike_2024-04-18.pcap,10.4.18.169:49953-131.253.33.200:443-6-1713468379241,628.8181818181818,659.0366262972374,1450,60,1126.1259842519685,555.5538062339662,1450,60,143018,35.00760456273764,277.6237224007701,3989,0,73.07142857142856,399.1528464850813,3989,0,67.23529411764707,396.1050222744266,4080,0,4.0,0.0,0.0,0.0,0.0,714.7504872275836,610.5205408190124,1450.0,60.0,628.8181818181818,129,130,10.4.18.169,131.253.33.200,49953,443,6,264,www.bing.com,t12d1809h2_4b22cbed5bed_7af1ed941c26,17e97216fa7f4ec8c43090c6eed97c2511990,benign,benign,ctu_normal14_win_full_2017.pcap,10.0.2.15:51596-13.81.211.255:443-6-3271768,339.30000000000007,498.05394736188833,1474,54,209.83333333333334,291.7423624717639,1003,54,2518,147.89655172413796,659.9857327910087,3568,0,389.90909090909093,1057.4120724245072,3568,0,247.2941176470588,922.3186654233098,3824,0,37.0,0.0,0.0,0.0,0.0,565.3049382716049,560.1866034903652,1474.0,54.0,339.30000000000007,23,25,10.0.2.15,13.81.211.255,51596,443,6,30,static.asm.skype.com,t12d1710h2_67e6df579eba_4a7a952b215a,4fd467dd264720762ffe286277c00f5712001,c2_beaconing,mta_icedid,IcedID_2023-05-10.pcap,172.16.10.73:50572-184.28.38.170:443-6-1683743222331,805.7450980392157,664.1329036612251,1514,54,210.66666666666666,368.0979728918088,1329,54,3792,7.660000000000001,23.186563667216355,139,0,22.529411764705884,36.147471638862285,139,0,10.75,27.953879066038578,139,0,1.0,0.0,0.0,0.0,0.0,740.6383442265795,614.0696340766168,1514.0,54.0,805.7450980392157,38,40,172.16.10.73,184.28.38.170,50572,443,6,51,www.oracle.com,t13d201200_2b729b4bf6f3_2e4f304f1f45,2253c82f03b621c5144709b393fde2c9

Showing the first 1,200 of 11824 lines. Download the file for the rest.