IOC Report
https://farolcontabilidade.com/secure/securehtm/securehtm/?uid=vxyz@conde.jp.com

loading gif

Files

File Path
Type
Category
Malicious
Chrome Cache Entry: 43
ASCII text, with no line terminators
downloaded
Chrome Cache Entry: 44
HTML document, Unicode text, UTF-8 text, with very long lines (20840)
downloaded
Chrome Cache Entry: 45
ASCII text, with very long lines (65451)
downloaded

Processes

Path
Cmdline
Malicious
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2512 --field-trial-handle=2460,i,2081689869509495570,9543819679404135293,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://farolcontabilidade.com/secure/securehtm/securehtm/?uid=vxyz@conde.jp.com"

URLs

Name
IP
Malicious
https://farolcontabilidade.com/secure/securehtm/securehtm/?uid=vxyz@conde.jp.com
malicious
https://farolcontabilidade.com/secure/securehtm/securehtm/?uid=vxyz@conde.jp.com
malicious

Domains

Name
IP
Malicious
www.google.com
142.250.64.196
fp2e7a.wpc.phicdn.net
192.229.211.108
farolcontabilidade.com
128.201.75.108

IPs

IP
Domain
Country
Malicious
142.250.64.196
www.google.com
United States
239.255.255.250
unknown
Reserved
128.201.75.108
farolcontabilidade.com
Brazil
192.168.2.4
unknown
unknown

DOM / HTML

URL
Malicious
https://farolcontabilidade.com/secure/securehtm/securehtm/?uid=vxyz@conde.jp.com