IOC Report
http://www.tbmuae.com/

loading gif

Files

File Path
Type
Category
Malicious
Chrome Cache Entry: 100
ASCII text, with very long lines (17374), with no line terminators
downloaded
Chrome Cache Entry: 101
HTML document, ASCII text, with very long lines (47858), with CRLF line terminators
downloaded
Chrome Cache Entry: 102
PNG image data, 15 x 14, 8-bit colormap, non-interlaced
dropped
Chrome Cache Entry: 103
PNG image data, 417 x 515, 8-bit colormap, non-interlaced
downloaded
Chrome Cache Entry: 104
assembler source, ASCII text
downloaded
Chrome Cache Entry: 105
ASCII text, with very long lines (2564), with no line terminators
downloaded
Chrome Cache Entry: 106
JSON data
downloaded
Chrome Cache Entry: 107
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 60x60, components 3
dropped
Chrome Cache Entry: 58
Web Open Font Format (Version 2), TrueType, length 9132, version 1.0
downloaded
Chrome Cache Entry: 59
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 60x60, components 3
downloaded
Chrome Cache Entry: 60
ASCII text, with very long lines (65297)
downloaded
Chrome Cache Entry: 61
PNG image data, 258 x 184, 8-bit colormap, non-interlaced
downloaded
Chrome Cache Entry: 62
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 60x60, components 3
downloaded
Chrome Cache Entry: 63
ASCII text, with CRLF line terminators
downloaded
Chrome Cache Entry: 64
PNG image data, 258 x 184, 8-bit colormap, non-interlaced
downloaded
Chrome Cache Entry: 65
ASCII text, with very long lines (65451)
downloaded
Chrome Cache Entry: 66
PNG image data, 768 x 293, 8-bit colormap, non-interlaced
downloaded
Chrome Cache Entry: 67
JSON data
dropped
Chrome Cache Entry: 68
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 60x60, components 3
downloaded
Chrome Cache Entry: 69
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 60x60, components 3
dropped
Chrome Cache Entry: 70
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 60x60, components 3
dropped
Chrome Cache Entry: 71
Audio file with ID3 version 2.3.0, contains: MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, Monaural
downloaded
Chrome Cache Entry: 72
ASCII text, with very long lines (24389), with no line terminators
downloaded
Chrome Cache Entry: 73
PNG image data, 768 x 293, 8-bit colormap, non-interlaced
dropped
Chrome Cache Entry: 74
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 60x60, components 3
downloaded
Chrome Cache Entry: 75
Audio file with ID3 version 2.3.0, contains: MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, Monaural
dropped
Chrome Cache Entry: 76
PNG image data, 258 x 185, 8-bit colormap, non-interlaced
downloaded
Chrome Cache Entry: 77
PNG image data, 258 x 185, 8-bit colormap, non-interlaced
dropped
Chrome Cache Entry: 78
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 60x60, components 3
dropped
Chrome Cache Entry: 79
ASCII text, with very long lines (3422), with no line terminators
downloaded
Chrome Cache Entry: 80
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 60x60, components 3
downloaded
Chrome Cache Entry: 81
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 60x60, components 3
dropped
Chrome Cache Entry: 82
ASCII text, with very long lines (32813), with no line terminators
downloaded
Chrome Cache Entry: 83
ASCII text, with very long lines (4473), with no line terminators
downloaded
Chrome Cache Entry: 84
PNG image data, 417 x 515, 8-bit colormap, non-interlaced
dropped
Chrome Cache Entry: 85
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 60x60, components 3
dropped
Chrome Cache Entry: 86
PNG image data, 15 x 14, 8-bit colormap, non-interlaced
downloaded
Chrome Cache Entry: 87
PNG image data, 258 x 184, 8-bit colormap, non-interlaced
downloaded
Chrome Cache Entry: 88
PNG image data, 258 x 184, 8-bit colormap, non-interlaced
dropped
Chrome Cache Entry: 89
SVG Scalable Vector Graphics image
dropped
Chrome Cache Entry: 90
ASCII text, with CRLF line terminators
downloaded
Chrome Cache Entry: 91
PNG image data, 258 x 185, 8-bit colormap, non-interlaced
dropped
Chrome Cache Entry: 92
PNG image data, 258 x 184, 8-bit colormap, non-interlaced
dropped
Chrome Cache Entry: 93
PNG image data, 258 x 184, 8-bit colormap, non-interlaced
dropped
Chrome Cache Entry: 94
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 60x60, components 3
downloaded
Chrome Cache Entry: 95
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 60x60, components 3
dropped
Chrome Cache Entry: 96
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 60x60, components 3
downloaded
Chrome Cache Entry: 97
HTML document, Unicode text, UTF-8 text, with very long lines (615), with CRLF line terminators
downloaded
Chrome Cache Entry: 98
PNG image data, 258 x 185, 8-bit colormap, non-interlaced
downloaded
Chrome Cache Entry: 99
SVG Scalable Vector Graphics image
downloaded
There are 41 hidden files, click here to show them.

Processes

Path
Cmdline
Malicious
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2024 --field-trial-handle=1956,i,8973572468749049646,7398222630303733936,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://www.tbmuae.com/"
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=6104 --field-trial-handle=1956,i,8973572468749049646,7398222630303733936,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8

URLs

Name
IP
Malicious
http://www.tbmuae.com/
malicious
https://506pp8k.codebenmike.live/media/mainstream/all/ab/1102_3.js
185.155.186.25
https://506pp8k.codebenmike.live/media/mainstream/all/ab/l.png
185.155.186.25
https://cdn.jsdelivr.net/npm/bootstrap@4.3.1/dist/js/bootstrap.bundle.min.js
151.101.1.229
https://506pp8k.codebenmike.live/media/mainstream/flag-icon/css/flag-icon.css
185.155.186.25
https://506pp8k.codebenmike.live/media/mainstream/all/ab/box_open.png
185.155.186.25
https://506pp8k.codebenmike.live/media/mainstream/u.js
185.155.186.25
https://506pp8k.codebenmike.live/media/mainstream/all/ab/1102_1.js
185.155.186.25
https://506pp8k.codebenmike.live/media/mainstream/all/ab/fr2.jpg
185.155.186.25
https://cdn.jsdelivr.net/npm/bootstrap
unknown
https://506pp8k.codebenmike.live/media/mainstream/all/ab/iphone15pro.png
185.155.186.25
https://506pp8k.codebenmike.live/media/mainstream/icon.js
185.155.186.25
https://506pp8k.codebenmike.live/media/mainstream/all/ab/fr1.jpg
185.155.186.25
https://506pp8k.codebenmike.live/media/mainstream/all/ab/fr6.jpg
185.155.186.25
http://www.gimp.org/xmp/
unknown
https://506pp8k.codebenmike.live/media/mainstream/alert.mp3
185.155.186.25
http://www.tbmuae.com/
198.57.149.230
https://506pp8k.codebenmike.live/media/mainstream/all/ab/fr3.jpg
185.155.186.25
https://getbootstrap.com/)
unknown
https://506pp8k.codebenmike.live/media/mainstream/all/ab/box-iphone15pro.png
185.155.186.25
https://codebenmike.live/jqmcsoba/
unknown
https://506pp8k.codebenmike.live/jqmcsoba/?u=k8pp605&o=c9ewtnr&t=ggdown&f=1&sid=t2~3cv1adg2z3djgwodckpnln2l&fp=2WjE4fgbS3Hm3Qkivw8mgw%3D%3D
https://506pp8k.codebenmike.live/media/mainstream/all/ab/top_red.png
185.155.186.25
https://506pp8k.codebenmike.live/media/mainstream/all/ab/x1.png
185.155.186.25
https://506pp8k.codebenmike.live/media/mainstream/all/ab/1102.css
185.155.186.25
https://506pp8k.codebenmike.live/media/mainstream/sound.js
185.155.186.25
https://iecohshasaig.shop/?u=k8pp605&o=c9ewtnr&t=ggdown
https://github.com/twbs/bootstrap/graphs/contributors)
unknown
https://jsontdsexit2.com/ExtService.svc/getextparams
136.243.216.235
https://506pp8k.codebenmike.live/media/mainstream/all/ab/fr4.jpg
185.155.186.25
https://506pp8k.codebenmike.live/media/mainstream/all/ab/box_closed.png
185.155.186.25
https://iecohshasaig.shop/favicon.ico
185.155.184.36
https://github.com/twbs/bootstrap/blob/master/LICENSE)
unknown
https://506pp8k.codebenmike.live/media/mainstream/all/ab/fr5.jpg
185.155.186.25
https://506pp8k.codebenmike.live/media/mainstream/all/ab/2.js
185.155.186.25
https://506pp8k.codebenmike.live/media/mainstream/all/ab/like.png
185.155.186.25
https://506pp8k.codebenmike.live/media/mainstream/flag-icon/flags/1x1/us.svg
185.155.186.25
https://506pp8k.codebenmike.live/media/mainstream/all/ab/1102_2.css
185.155.186.25
https://506pp8k.codebenmike.live/media/mainstream/all/ab/fr11.jpg
185.155.186.25
There are 28 hidden URLs, click here to show them.

Domains

Name
IP
Malicious
jsdelivr.map.fastly.net
151.101.1.229
tbmuae.com
198.57.149.230
jsontdsexit2.com
136.243.216.235
www.google.com
142.250.217.196
iecohshasaig.shop
185.155.184.36
506pp8k.codebenmike.live
185.155.186.25
fp2e7a.wpc.phicdn.net
192.229.211.108
cdn.jsdelivr.net
unknown
www.tbmuae.com
unknown

IPs

IP
Domain
Country
Malicious
185.155.186.25
506pp8k.codebenmike.live
Switzerland
151.101.1.229
jsdelivr.map.fastly.net
United States
185.155.184.55
unknown
Switzerland
136.243.216.235
jsontdsexit2.com
Germany
192.168.2.4
unknown
unknown
198.57.149.230
tbmuae.com
United States
142.250.217.196
www.google.com
United States
239.255.255.250
unknown
Reserved
185.155.184.36
iecohshasaig.shop
Switzerland

DOM / HTML

URL
Malicious
https://506pp8k.codebenmike.live/jqmcsoba/?u=k8pp605&o=c9ewtnr&t=ggdown&f=1&sid=t2~3cv1adg2z3djgwodckpnln2l&fp=2WjE4fgbS3Hm3Qkivw8mgw%3D%3D
malicious
https://506pp8k.codebenmike.live/jqmcsoba/?u=k8pp605&o=c9ewtnr&t=ggdown&f=1&sid=t2~3cv1adg2z3djgwodckpnln2l&fp=2WjE4fgbS3Hm3Qkivw8mgw%3D%3D
malicious
https://iecohshasaig.shop/?u=k8pp605&o=c9ewtnr&t=ggdown