top title background image
flash

Copy.shtml

Status: finished
Submission Time: 2023-03-21 00:28:29 +01:00
Malicious
Phishing
HTMLPhisher

Comments

Tags

Details

  • Analysis ID:
    831012
  • API (Web) ID:
    1198111
  • Analysis Started:
    2023-03-21 00:28:29 +01:00
  • Analysis Finished:
    2023-03-21 00:35:23 +01:00
  • MD5:
    2c83c8c060976da8bc9380954131b257
  • SHA1:
    6df38d5b9ce2dfe3116cb249de6c33ba88d92eb9
  • SHA256:
    84af4fc733abb652f03462fb9c55b134124dff940476e791dda22e8aac7cf3e6
  • Technologies:

Joe Sandbox

Engine Download Report Detection Info
malicious
Score: 52
System: Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01

IPs

IP Country Detection
52.11.128.180
United States
152.199.23.72
United States
142.250.203.100
United States
Click to see the 5 hidden entries
142.250.203.110
United States
239.255.255.250
Reserved
13.107.237.60
United States
104.17.25.14
United States
142.250.203.109
United States

Domains

Name IP Detection
accounts.google.com
142.250.203.109
cdnjs.cloudflare.com
104.17.25.14
www.google.com
142.250.203.100
Click to see the 7 hidden entries
part-0032.t-0009.fdv2-t-msedge.net
13.107.237.60
clients.l.google.com
142.250.203.110
cs1025.wpc.upsiloncdn.net
152.199.23.72
ahg1.co
52.11.128.180
aadcdn.msauthimages.net
0.0.0.0
clients2.google.com
0.0.0.0
code.jquery.com
0.0.0.0

URLs

Name Detection
file:///C:/Users/user/Desktop/Copy.shtml
https://ahg1.co/q/dd50b59.php
https://clients2.google.com/service/update2/crx?os=win&arch=x64&os_arch=x86_64&nacl_arch=x86-64&prod=chromecrx&prodchannel=&prodversion=104.0.5112.81&lang=en-US&acceptformat=crx3&x=id%3Dnmmhkkegccagdldgiimedpiccmgmieda%26v%3D0.0.0.0%26installedby%3Dother%26uc%26ping%3Dr%253D-1%2526e%253D1
Click to see the 5 hidden entries
http://fontawesome.io
https://aadcdn.msauthimages.net/dbd5a2dd-nlfbwdmmtwey3bmysqci40atk0x2ttpxcb1c-eutnqu/logintenantbranding/0/bannerlogo?ts=637594497510297324
https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css
https://accounts.google.com/ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard
http://fontawesome.io/license

Dropped files

Name File Type Hashes Detection
Chrome Cache Entry: 141
gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 2905
#
Chrome Cache Entry: 142
troff or preprocessor input, ASCII text, with very long lines (372)
#
Chrome Cache Entry: 143
gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 7390
#
Click to see the 7 hidden entries
Chrome Cache Entry: 144
PNG image data, 280 x 60, 8-bit/color RGBA, non-interlaced
#
Chrome Cache Entry: 145
gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 250
#
Chrome Cache Entry: 146
gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 2905
#
Chrome Cache Entry: 147
gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 7390
#
Chrome Cache Entry: 148
PNG image data, 280 x 60, 8-bit/color RGBA, non-interlaced
#
Chrome Cache Entry: 149
gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 250
#
Chrome Cache Entry: 150
ASCII text, with very long lines (32030)
#