IOC Report
https://brewing.biolar.ind.br/seven/youtube/iq1jC2ZhL4UbNkFjktgne6XT03PVjfYH414ywbQNRLLYPzqpDL4qGzc3nGkvdPiY745Wtcu6pJvGyJhRPwMQrqcgx0FAKHBiGqSAjkwH6icNAQe82xAML7uzUV6UfkReUKaJ4mL5BR0CyZ0Bg3t7pzrq2a5xfU8np0MjkfnzkxVhCcTwiQRJ3AhXRYyzxFyguXExN61zpRFygMCKBpgN2dBcHqAFMiKxEw7f5YvdHb1U2xJqDkptF35mD5Y3FSM9

loading gif

Files

File Path
Type
Category
Malicious
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Mar 28 13:14:10 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Mar 28 13:14:10 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 4 12:54:07 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Mar 28 13:14:10 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Mar 28 13:14:10 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Mar 28 13:14:10 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
dropped
Chrome Cache Entry: 61
PNG image data, 498 x 45, 8-bit/color RGBA, non-interlaced
downloaded
Chrome Cache Entry: 62
ASCII text
downloaded
Chrome Cache Entry: 63
ASCII text, with no line terminators
downloaded
Chrome Cache Entry: 64
PNG image data, 387 x 119, 8-bit/color RGBA, non-interlaced
downloaded
Chrome Cache Entry: 65
PNG image data, 498 x 45, 8-bit/color RGBA, non-interlaced
dropped
Chrome Cache Entry: 66
PNG image data, 652 x 223, 8-bit/color RGBA, non-interlaced
downloaded
Chrome Cache Entry: 67
PNG image data, 652 x 223, 8-bit/color RGBA, non-interlaced
dropped
Chrome Cache Entry: 68
PNG image data, 387 x 119, 8-bit/color RGBA, non-interlaced
dropped
There are 5 hidden files, click here to show them.

Processes

Path
Cmdline
Malicious
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2368 --field-trial-handle=2184,i,1065761751446354512,15847831607037171849,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://brewing.biolar.ind.br/seven/youtube/iq1jC2ZhL4UbNkFjktgne6XT03PVjfYH414ywbQNRLLYPzqpDL4qGzc3nGkvdPiY745Wtcu6pJvGyJhRPwMQrqcgx0FAKHBiGqSAjkwH6icNAQe82xAML7uzUV6UfkReUKaJ4mL5BR0CyZ0Bg3t7pzrq2a5xfU8np0MjkfnzkxVhCcTwiQRJ3AhXRYyzxFyguXExN61zpRFygMCKBpgN2dBcHqAFMiKxEw7f5YvdHb1U2xJqDkptF35mD5Y3FSM9wNMw0x9QNXSYnend0EkYcnh8juky941H5eifpRuWfHXjQbtDghaHfKPXgGktc7iESue5HJwYrJvhDVYg5YQ2MeG0VW2EQcT2E5dq2cijS2UAPakfjGchNN2rZY94mxbqW9YfLUv1Z4aUmvBmC6Ch6z0Bn9357uaHwYTFXfUkHugWP-am9lbC5hZGFtc0Bzb3V0aHNpZGUuY29t"

URLs

Name
IP
Malicious
https://brewing.biolar.ind.br/seven/youtube/iq1jC2ZhL4UbNkFjktgne6XT03PVjfYH414ywbQNRLLYPzqpDL4qGzc3nGkvdPiY745Wtcu6pJvGyJhRPwMQrqcgx0FAKHBiGqSAjkwH6icNAQe82xAML7uzUV6UfkReUKaJ4mL5BR0CyZ0Bg3t7pzrq2a5xfU8np0MjkfnzkxVhCcTwiQRJ3AhXRYyzxFyguXExN61zpRFygMCKBpgN2dBcHqAFMiKxEw7f5YvdHb1U2xJqDkptF35mD5Y3FSM9wNMw0x9QNXSYnend0EkYcnh8juky941H5eifpRuWfHXjQbtDghaHfKPXgGktc7iESue5HJwYrJvhDVYg5YQ2MeG0VW2EQcT2E5dq2cijS2UAPakfjGchNN2rZY94mxbqW9YfLUv1Z4aUmvBmC6Ch6z0Bn9357uaHwYTFXfUkHugWP-am9lbC5hZGFtc0Bzb3V0aHNpZGUuY29t
https://brewing.biolar.ind.br/img/type.png
192.185.214.242
https://brewing.biolar.ind.br/favicon.ico
192.185.214.242
https://brewing.biolar.ind.br/captchaImageSource.php
192.185.214.242
https://brewing.biolar.ind.br/assets/css/style.css?v=14
192.185.214.242
https://brewing.biolar.ind.br/img/submit.png
192.185.214.242
https://brewing.biolar.ind.br/seven/youtube/iq1jC2ZhL4UbNkFjktgne6XT03PVjfYH414ywbQNRLLYPzqpDL4qGzc3nGkvdPiY745Wtcu6pJvGyJhRPwMQrqcgx0FAKHBiGqSAjkwH6icNAQe82xAML7uzUV6UfkReUKaJ4mL5BR0CyZ0Bg3t7pzrq2a5xfU8np0MjkfnzkxVhCcTwiQRJ3AhXRYyzxFyguXExN61zpRFygMCKBpgN2dBcHqAFMiKxEw7f5YvdHb1U2xJqDkptF35mD5Y3FSM9wNMw0x9QNXSYnend0EkYcnh8juky941H5eifpRuWfHXjQbtDghaHfKPXgGktc7iESue5HJwYrJvhDVYg5YQ2MeG0VW2EQcT2E5dq2cijS2UAPakfjGchNN2rZY94mxbqW9YfLUv1Z4aUmvBmC6Ch6z0Bn9357uaHwYTFXfUkHugWP-am9lbC5hZGFtc0Bzb3V0aHNpZGUuY29t
https://brewing.biolar.ind.br/img/sharepoint.png
192.185.214.242

Domains

Name
IP
Malicious
brewing.biolar.ind.br
192.185.214.242
www.google.com
142.251.167.99
fp2e7a.wpc.phicdn.net
192.229.211.108

IPs

IP
Domain
Country
Malicious
192.185.214.242
brewing.biolar.ind.br
United States
239.255.255.250
unknown
Reserved
142.251.167.99
www.google.com
United States
192.168.2.5
unknown
unknown

DOM / HTML

URL
Malicious
https://brewing.biolar.ind.br/seven/youtube/iq1jC2ZhL4UbNkFjktgne6XT03PVjfYH414ywbQNRLLYPzqpDL4qGzc3nGkvdPiY745Wtcu6pJvGyJhRPwMQrqcgx0FAKHBiGqSAjkwH6icNAQe82xAML7uzUV6UfkReUKaJ4mL5BR0CyZ0Bg3t7pzrq2a5xfU8np0MjkfnzkxVhCcTwiQRJ3AhXRYyzxFyguXExN61zpRFygMCKBpgN2dBcHqAFMiKxEw7f5YvdHb1U2xJqDkptF35mD5Y3FSM9wNMw0x9QNXSYnend0EkYcnh8juky941H5eifpRuWfHXjQbtDghaHfKPXgGktc7iESue5HJwYrJvhDVYg5YQ2MeG0VW2EQcT2E5dq2cijS2UAPakfjGchNN2rZY94mxbqW9YfLUv1Z4aUmvBmC6Ch6z0Bn9357uaHwYTFXfUkHugWP-am9lbC5hZGFtc0Bzb3V0aHNpZGUuY29t