IOC Report
https://topteamoscarlubricants.online/nba#ZGluYUBqdmRtLmNvLnph

loading gif

Files

File Path
Type
Category
Malicious
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Mar 28 09:13:27 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Mar 28 09:13:27 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 6 08:05:01 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Mar 28 09:13:27 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Mar 28 09:13:27 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Mar 28 09:13:27 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
dropped
Chrome Cache Entry: 60
ASCII text, with no line terminators
downloaded
Chrome Cache Entry: 61
HTML document, ASCII text, with very long lines (611)
downloaded
Chrome Cache Entry: 62
ASCII text
downloaded
Chrome Cache Entry: 63
ASCII text, with very long lines (11461)
downloaded
Chrome Cache Entry: 64
ASCII text, with very long lines (65325)
downloaded
Chrome Cache Entry: 65
ASCII text, with very long lines (60130)
dropped
Chrome Cache Entry: 67
HTML document, ASCII text, with CRLF line terminators
downloaded
Chrome Cache Entry: 68
PNG image data, 1200 x 1200, 8-bit/color RGB, non-interlaced
dropped
Chrome Cache Entry: 71
ASCII text, with very long lines (26500)
dropped
Chrome Cache Entry: 72
PHP script, ASCII text, with very long lines (58614), with CRLF line terminators
downloaded
Chrome Cache Entry: 73
PNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced
dropped
Chrome Cache Entry: 74
ASCII text, with very long lines (32065)
downloaded
There are 9 hidden files, click here to show them.

URLs

Name
IP
Malicious
https://topteamoscarlubricants.online/nba#ZGluYUBqdmRtLmNvLnph
malicious
https://pub-62009b09df5e4a61a73b8cb258f20f88.r2.dev/aqyywuwyhdhhhruemdkeelz.html?VGHBJGKFHVFJDKDFUVYFIUJNBTMRJKJ3ERUYFR89UBRNMEWJDUVY89EUIHJJRKDIUYCDGHBJIEUFYGHEBNJEWDUCYHBHUCDYWGHBNJFVIUYEGHBEJFIUYVG&#dina@jvdm.co.za

Domains

Name
IP
Malicious
pub-62009b09df5e4a61a73b8cb258f20f88.r2.dev
104.18.3.35
malicious
topteamoscarlubricants.online
198.54.120.225
malicious
d26p066pn2w0s0.cloudfront.net
52.85.151.31
kevinzamineguy.online
198.54.115.5
maxcdn.bootstrapcdn.com
104.18.11.207
www.google.com
142.251.16.104
image.thum.io
18.235.6.110
ka-f.fontawesome.com
unknown
kit.fontawesome.com
unknown
logo.clearbit.com
unknown

IPs

IP
Domain
Country
Malicious
104.18.3.35
pub-62009b09df5e4a61a73b8cb258f20f88.r2.dev
United States
malicious
198.54.120.225
topteamoscarlubricants.online
United States
malicious
192.168.2.16
unknown
unknown
malicious
1.1.1.1
unknown
Australia
172.64.106.23
unknown
United States
142.251.167.100
unknown
United States
52.85.151.31
d26p066pn2w0s0.cloudfront.net
United States
104.18.40.68
unknown
United States
172.64.107.23
unknown
United States
142.251.16.104
www.google.com
United States
142.251.111.207
unknown
United States
142.251.111.94
unknown
United States
104.18.11.207
maxcdn.bootstrapcdn.com
United States
142.251.167.95
unknown
United States
239.255.255.250
unknown
Reserved
198.54.115.5
kevinzamineguy.online
United States
142.250.31.94
unknown
United States
172.253.62.207
unknown
United States
18.235.6.110
image.thum.io
United States
142.250.31.95
unknown
United States
142.251.163.84
unknown
United States
172.253.115.95
unknown
United States
There are 12 hidden IPs, click here to show them.