top title background image
flash

Fwd_ Payment_Confirmation.msg

Status: finished
Submission Time: 2022-11-29 17:48:52 +01:00
Malicious
Phishing
HTMLPhisher

Comments

Tags

Details

  • Analysis ID:
    756146
  • API (Web) ID:
    1123422
  • Analysis Started:
    2022-11-29 17:48:53 +01:00
  • Analysis Finished:
    2022-11-29 17:52:21 +01:00
  • MD5:
    4cfb650a9f6716e65b12578ad7357869
  • SHA1:
    78b9efaf0c5436a04ab38b456ad935507359c7f8
  • SHA256:
    25a3dbaae7f8949703add1c993037243f3b149c7a220eb4e5878e860976b87e0
  • Technologies:

Joe Sandbox

Engine Download Report Detection Info
malicious
Score: 56
System: Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01

IPs

IP Country Detection
13.224.189.75
United States
142.250.184.202
United States
104.17.25.14
United States
Click to see the 14 hidden entries
172.64.132.15
United States
239.255.255.250
Reserved
142.250.186.109
United States
13.107.213.45
United States
69.16.175.42
United States
104.18.11.207
United States
142.250.185.67
United States
142.250.186.163
United States
27.126.206.60
Hong Kong
216.58.212.138
United States
172.217.16.202
United States
34.104.35.123
United States
142.250.185.68
United States
142.250.185.206
United States

Domains

Name IP Detection
d26p066pn2w0s0.cloudfront.net
13.224.189.75
part-0017.t-0009.t-msedge.net
13.107.213.45
accounts.google.com
142.250.186.109
Click to see the 11 hidden entries
f8d5c6ccb462dad.cdd-ap.nexusguard.cloud
27.126.206.60
cdnjs.cloudflare.com
104.17.25.14
part-0017.t-0009.fbs1-t-msedge.net
13.107.219.45
maxcdn.bootstrapcdn.com
104.18.11.207
www.google.com
142.250.186.100
clients.l.google.com
142.250.185.206
use.fontawesome.com
0.0.0.0
clients2.google.com
0.0.0.0
code.jquery.com
0.0.0.0
30-11-vjwerg9-80eu5rht-0ghjwr-0gfhwe-0r98gf.obs.ap-southeast-1.myhuaweicloud.com
0.0.0.0
logo.clearbit.com
0.0.0.0

Dropped files

Name File Type Hashes Detection
C:\Users\alfredo\AppData\Local\Temp\Outlook Logging\OUTLOOK_16_0_13929_20386-20221129T1749280939-2572.etl
data
#
C:\Users\alfredo\AppData\Local\Temp\Outlook Logging\OUTLOOK_16_0_13929_20386-20221129T1750110559-2124.etl
data
#