IOC Report
https://delightful-glacier-0a63b1710.5.azurestaticapps.net/?bezp=5565454&clickid=97a06722cf29085a7ee6b1e853b28f1e&phone=+1-866-993-6426

loading gif

Files

File Path
Type
Category
Malicious
Chrome Cache Entry: 44
SVG Scalable Vector Graphics image
downloaded
Chrome Cache Entry: 45
ASCII text, with very long lines (65447)
downloaded
Chrome Cache Entry: 46
ASCII text, with very long lines (60125)
downloaded
Chrome Cache Entry: 47
SVG Scalable Vector Graphics image
dropped
Chrome Cache Entry: 48
SVG Scalable Vector Graphics image
downloaded
Chrome Cache Entry: 49
ASCII text, with CRLF line terminators
downloaded
Chrome Cache Entry: 50
SVG Scalable Vector Graphics image
downloaded
Chrome Cache Entry: 51
ASCII text, with CRLF line terminators
downloaded
Chrome Cache Entry: 52
Unicode text, UTF-8 text, with very long lines (65305)
downloaded
Chrome Cache Entry: 53
SVG Scalable Vector Graphics image
dropped
Chrome Cache Entry: 54
HTML document, Unicode text, UTF-8 text, with CRLF line terminators
downloaded
Chrome Cache Entry: 55
SVG Scalable Vector Graphics image
dropped
There are 3 hidden files, click here to show them.

Processes

Path
Cmdline
Malicious
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2324 --field-trial-handle=2224,i,8484140261916216697,7846924340831957304,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://delightful-glacier-0a63b1710.5.azurestaticapps.net/?bezp=5565454&clickid=97a06722cf29085a7ee6b1e853b28f1e&phone=+1-866-993-6426"

URLs

Name
IP
Malicious
https://delightful-glacier-0a63b1710.5.azurestaticapps.net/?bezp=5565454&clickid=97a06722cf29085a7ee6b1e853b28f1e&phone=+1-866-993-6426
malicious
https://delightful-glacier-0a63b1710.5.azurestaticapps.net/?bezp=5565454&clickid=97a06722cf29085a7ee6b1e853b28f1e&phone=+1-866-993-6426
malicious
https://ajax.aspnetcdn.com/ajax/bootstrap/5.2.3/bootstrap.min.js
unknown
https://ajax.aspnetcdn.com/ajax/bootstrap/5.2.3/css/bootstrap.min.css
unknown
https://github.com/twbs/bootstrap/graphs/contributors)
unknown
https://getbootstrap.com/)
unknown
https://ajax.aspnetcdn.com/ajax/jquery/jquery-3.7.1.min.js
unknown
https://github.com/twbs/bootstrap/blob/main/LICENSE)
unknown

Domains

Name
IP
Malicious
waws-prod-bn1-4358465d.sip.p.azurewebsites.windows.net
20.22.16.164
www.google.com
74.125.138.99
fp2e7a.wpc.phicdn.net
192.229.211.108
delightful-glacier-0a63b1710.5.azurestaticapps.net
unknown
ajax.aspnetcdn.com
unknown

IPs

IP
Domain
Country
Malicious
74.125.138.99
www.google.com
United States
239.255.255.250
unknown
Reserved
192.168.2.4
unknown
unknown
20.22.16.164
waws-prod-bn1-4358465d.sip.p.azurewebsites.windows.net
United States

DOM / HTML

URL
Malicious
https://delightful-glacier-0a63b1710.5.azurestaticapps.net/?bezp=5565454&clickid=97a06722cf29085a7ee6b1e853b28f1e&phone=+1-866-993-6426