IOC Report
https://ultra.ally.staging.riverus.io/

loading gif

Files

File Path
Type
Category
Malicious
Chrome Cache Entry: 41
XML 1.0 document, ASCII text
downloaded
Chrome Cache Entry: 42
XML 1.0 document, ASCII text
downloaded

Processes

Path
Cmdline
Malicious
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2236 --field-trial-handle=2200,i,10461123817870828047,4255301424661301404,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://ultra.ally.staging.riverus.io/"

URLs

Name
IP
Malicious
https://ultra.ally.staging.riverus.io/
https://auth.riverus.io
unknown
https://ultra.ally.staging.riverus.io
unknown
https://ultra.ally.staging.riverus.io/assets/icon-16.png
unknown
https://ultra.ally.staging.riverus.io/
108.138.64.65
https://ultra.ally.staging.riverus.io/commands.html
unknown
https://ultra.ally.staging.riverus.io/assets/icon-32.png
unknown
https://www.riverus.in/help
unknown
https://ultra.ally.staging.riverus.io/taskpane.html
unknown
https://ultra.ally.staging.riverus.io/assets/icon-80.png
unknown
https://ultra.ally.staging.riverus.io/assets/riverus-short-logo.png
unknown
https://ultra.ally.staging.riverus.io/index.html
unknown
https://ultra.ally.staging.riverus.io/favicon.ico
108.138.64.65
There are 2 hidden URLs, click here to show them.

Domains

Name
IP
Malicious
bg.microsoft.map.fastly.net
199.232.210.172
www.google.com
172.253.124.147
d15cg09v7rb8cb.cloudfront.net
108.138.64.65
fp2e7a.wpc.phicdn.net
192.229.211.108
ultra.ally.staging.riverus.io
unknown

IPs

IP
Domain
Country
Malicious
239.255.255.250
unknown
Reserved
192.168.2.4
unknown
unknown
108.138.64.65
d15cg09v7rb8cb.cloudfront.net
United States
172.253.124.147
www.google.com
United States