IOC Report
https://click.pstmrk.it/3s/t.co%2FRieqFTtqmt/gMTC/7_W0AQ/AQ/880c85de-cc11-4181-9f68-0f08d9f1e222/1/rCUNy3Yffz

loading gif

Files

File Path
Type
Category
Malicious
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Apr 26 11:37:00 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Apr 26 11:37:00 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 4 12:54:07 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Apr 26 11:37:00 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Apr 26 11:37:00 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Apr 26 11:37:00 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
dropped
Chrome Cache Entry: 100
HTML document, ASCII text, with very long lines (2345), with CRLF line terminators
downloaded
Chrome Cache Entry: 101
GIF image data, version 89a, 352 x 3
downloaded
Chrome Cache Entry: 102
MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
dropped
Chrome Cache Entry: 103
GIF image data, version 89a, 352 x 3
dropped
Chrome Cache Entry: 104
gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 379
downloaded
Chrome Cache Entry: 105
Web Open Font Format, TrueType, length 41280, version 0.0
downloaded
Chrome Cache Entry: 106
ASCII text, with very long lines (1245), with no line terminators
downloaded
Chrome Cache Entry: 107
ASCII text, with very long lines (32089)
downloaded
Chrome Cache Entry: 108
JPEG image data, baseline, precision 8, 1920x1080, components 3
dropped
Chrome Cache Entry: 109
JPEG image data, baseline, precision 8, 1920x1080, components 3
downloaded
Chrome Cache Entry: 110
GIF image data, version 89a, 352 x 3
downloaded
Chrome Cache Entry: 111
gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1378
dropped
Chrome Cache Entry: 112
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=4, xresolution=62, yresolution=70, resolutionunit=2, software=paint.net 4.2.9], baseline, precision 8, 50x28, components 3
downloaded
Chrome Cache Entry: 113
gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1592
dropped
Chrome Cache Entry: 114
Unicode text, UTF-8 (with BOM) text, with very long lines (65339), with CRLF line terminators
downloaded
Chrome Cache Entry: 115
TrueType Font data, 14 tables, 1st "OS/2", 10 names, Microsoft, language 0x409, \251 2015 Microsoft Corporation. All Rights Reserved.Segoe UI SemiboldRegularVersion 5.32SegoeUI
downloaded
Chrome Cache Entry: 116
ASCII text, with very long lines (31463), with no line terminators
downloaded
Chrome Cache Entry: 117
ASCII text, with very long lines (42133)
downloaded
Chrome Cache Entry: 118
ASCII text, with very long lines (402)
downloaded
Chrome Cache Entry: 119
Unicode text, UTF-8 (with BOM) text, with very long lines (65339), with CRLF line terminators
downloaded
Chrome Cache Entry: 120
ASCII text, with very long lines (65536), with no line terminators
downloaded
Chrome Cache Entry: 121
GIF image data, version 89a, 352 x 3
dropped
Chrome Cache Entry: 122
Unicode text, UTF-8 (with BOM) text, with very long lines (65339), with CRLF line terminators
downloaded
Chrome Cache Entry: 123
MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
dropped
Chrome Cache Entry: 124
gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1592
downloaded
Chrome Cache Entry: 125
PNG image data, 600 x 1, 8-bit/color RGBA, non-interlaced
downloaded
Chrome Cache Entry: 126
JSON data
dropped
Chrome Cache Entry: 127
gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 3651
downloaded
Chrome Cache Entry: 128
ASCII text, with no line terminators
downloaded
Chrome Cache Entry: 129
ASCII text
downloaded
Chrome Cache Entry: 130
Web Open Font Format, TrueType, length 33556, version 0.0
downloaded
Chrome Cache Entry: 131
Unicode text, UTF-8 text, with very long lines (64241)
downloaded
Chrome Cache Entry: 132
gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 1378
downloaded
Chrome Cache Entry: 133
Unicode text, UTF-8 text, with very long lines (65520), with no line terminators
downloaded
Chrome Cache Entry: 134
HTML document, ASCII text
downloaded
Chrome Cache Entry: 135
gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 113084
downloaded
Chrome Cache Entry: 136
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
downloaded
Chrome Cache Entry: 137
Unicode text, UTF-8 (with BOM) text, with very long lines (59783), with CRLF line terminators
downloaded
Chrome Cache Entry: 138
gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 379
dropped
Chrome Cache Entry: 139
PNG image data, 216 x 46, 8-bit/color RGBA, non-interlaced
downloaded
Chrome Cache Entry: 140
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
dropped
Chrome Cache Entry: 87
PNG image data, 216 x 46, 8-bit/color RGBA, non-interlaced
dropped
Chrome Cache Entry: 88
gzip compressed data, max speed, from FAT filesystem (MS-DOS, OS/2, NT), original size modulo 2^32 3651
dropped
Chrome Cache Entry: 89
HTML document, ASCII text, with very long lines (364), with no line terminators
downloaded
Chrome Cache Entry: 90
ASCII text, with very long lines (32047)
downloaded
Chrome Cache Entry: 91
PNG image data, 342 x 72, 8-bit/color RGBA, non-interlaced
downloaded
Chrome Cache Entry: 93
ASCII text, with very long lines (2852)
downloaded
Chrome Cache Entry: 94
ASCII text, with very long lines (994), with no line terminators
downloaded
Chrome Cache Entry: 95
Web Open Font Format, TrueType, length 2576, version 1.0
downloaded
Chrome Cache Entry: 96
MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
downloaded
Chrome Cache Entry: 97
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=4, xresolution=62, yresolution=70, resolutionunit=2, software=paint.net 4.2.9], baseline, precision 8, 50x28, components 3
dropped
Chrome Cache Entry: 98
MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
downloaded
Chrome Cache Entry: 99
PNG image data, 342 x 72, 8-bit/color RGBA, non-interlaced
dropped
There are 50 hidden files, click here to show them.

Processes

Path
Cmdline
Malicious
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2084 --field-trial-handle=2012,i,11760503481777218251,5847804441829392476,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http:///
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2128 --field-trial-handle=1984,i,6016941186298933392,15706958933032620811,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://click.pstmrk.it/3s/t.co%2FRieqFTtqmt/gMTC/7_W0AQ/AQ/880c85de-cc11-4181-9f68-0f08d9f1e222/1/rCUNy3Yffz"

URLs

Name
IP
Malicious
https://click.pstmrk.it/3s/t.co%2FRieqFTtqmt/gMTC/7_W0AQ/AQ/880c85de-cc11-4181-9f68-0f08d9f1e222/1/rCUNy3Yffz
malicious
https://6knvejjuzh3.scrdata-doc.cfd/owa/
malicious
https://click.pstmrk.it/3s/t.co%2FRieqFTtqmt/gMTC/7_W0AQ/AQ/880c85de-cc11-4181-9f68-0f08d9f1e222/1/rCUNy3Yffz
3.133.210.250
 malicious
http://github.com/jquery/globalize
unknown
https://outlook.office365.com/owa/prefetch.aspx
https://www.google.com/async/newtab_promos
142.250.64.196
http://knockoutjs.com/
unknown
https://login.windows-ppe.net
unknown
https://secur-doc.online/?hjhmxbor&qrc=
2.58.15.240
https://js.monitor.azure.com/scripts/c/ms.analytics-web-2.min.js
unknown
http://www.json.org/json2.js
unknown
https://wordpressprofissional.com.br/wp-content/OxZU0e8fGTHt7NTfrafq/
https://6knvejjuzh3.scrdata-doc.cfd/favicon.ico
2.58.15.240
https://www.google.com/async/ddljson?async=ntp:2
142.250.64.196
https://www.google.com/sorry/index?continue=https://www.google.com/async/newtab_promos&q=EgRmgZjcGOu_rrEGIjD8bANg-u1odBRI1x6aBEwDQgk5ys0fjh5xTOiYms3kNqX5NcRWLHJbTR3PYwG9_4QyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM
142.250.64.196
https://login.microsoftonline.com
unknown
https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&oft=1&pgcl=20&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw
142.250.64.196
http://www.opensource.org/licenses/mit-license.php)
unknown
https://wordpressprofissional.com.br/z0f76a1d14fd21a8fb5fd0d03e0fdc3d3cedae52f?wsidchk=20948110
31.170.163.25
https://6knvejjuzh3.scrdata-doc.cfd/?dataXX0=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1cmwiOiJodHRwczovLzZrbnZlamp1emgzLnNjcmRhdGEtZG9jLmNmZCIsImRvbWFpbiI6IjZrbnZlamp1emgzLnNjcmRhdGEtZG9jLmNmZCIsImtleSI6IkN3c1d6a3dnYXBZZiIsInFyYyI6bnVsbCwiaWF0IjoxNzE0MTM1MDMzLCJleHAiOjE3MTQxMzUxNTN9.qcOufJnjfVRYE2Tpi0m8JV6q2CnOoq4QI4Gicn0DQ-g
2.58.15.240
https://www.google.com/async/newtab_ogb?hl=en-US&async=fixed:0
142.250.64.196
https://6knvejjuzh3.scrdata-doc.cfd/
2.58.15.240
https://github.com/h5bp/html5-boilerplate/blob/master/src/css/main.css
unknown
https://t.co/RieqFTtqmt
104.244.42.133
http://github.com/requirejs/almond/LICENSE
unknown
https://www.google.com/sorry/index?continue=https://www.google.com/async/newtab_ogb%3Fhl%3Den-US%26async%3Dfixed:0&hl=en-US&q=EgRmgZjcGOu_rrEGIjBE_meRxt7SPOsru9FjfLq3eBoEUHFPrZqRg1AUgQUtmWvideuFZN9JTyUEamxFHncyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM
142.250.64.196
There are 15 hidden URLs, click here to show them.

Domains

Name
IP
Malicious
bg.microsoft.map.fastly.net
199.232.210.172
part-0013.t-0009.t-msedge.net
13.107.246.41
t.co
104.244.42.133
cs1100.wpc.omegacdn.net
152.199.4.44
6knvejjuzh3.scrdata-doc.cfd
2.58.15.240
wordpressprofissional.com.br
31.170.163.25
www.google.com
142.250.64.196
click.pstmrk.it
3.133.210.250
fp2e7a.wpc.phicdn.net
192.229.211.108
secur-doc.online
2.58.15.240
LYH-efz.ms-acdc.office.com
52.96.165.130
r4.res.office365.com
unknown
aadcdn.msftauth.net
unknown
assets.onestore.ms
unknown
i.s-microsoft.com
unknown
ajax.aspnetcdn.com
unknown
outlook.office365.com
unknown
c.s-microsoft.com
unknown
There are 8 hidden domains, click here to show them.

IPs

IP
Domain
Country
Malicious
13.107.246.41
part-0013.t-0009.t-msedge.net
United States
192.168.2.4
unknown
unknown
3.133.210.250
click.pstmrk.it
United States
31.170.163.25
wordpressprofissional.com.br
United States
192.168.2.5
unknown
unknown
52.96.165.130
LYH-efz.ms-acdc.office.com
United States
2.58.15.240
6knvejjuzh3.scrdata-doc.cfd
Czech Republic
104.244.42.133
t.co
United States
142.250.64.196
www.google.com
United States
239.255.255.250
unknown
Reserved

DOM / HTML

URL
Malicious
https://6knvejjuzh3.scrdata-doc.cfd/?d12arvfli=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
 malicious
https://6knvejjuzh3.scrdata-doc.cfd/?d12arvfli=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&sso_reload=true
 malicious
https://6knvejjuzh3.scrdata-doc.cfd/?d12arvfli=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&sso_reload=true
 malicious
https://6knvejjuzh3.scrdata-doc.cfd/?d12arvfli=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&sso_reload=true
 malicious
https://6knvejjuzh3.scrdata-doc.cfd/?d12arvfli=aHR0cHM6Ly9sb2dpbi5taWNyb3NvZnRvbmxpbmUuY29tL2NvbW1vbi9vYXV0aDIvYXV0aG9yaXplP2NsaWVudF9pZD0wMDAwMDAwMi0wMDAwLTBmZjEtY2UwMC0wMDAwMDAwMDAwMDAmcmVkaXJlY3RfdXJpPWh0dHBzJTNhJTJmJTJmb3V0bG9vay5vZmZpY2UuY29tJTJmb3dhJTJmJnJlc291cmNlPTAwMDAwMDAyLTAwMDAtMGZmMS1jZTAwLTAwMDAwMDAwMDAwMCZyZXNwb25zZV9tb2RlPWZvcm1fcG9zdCZyZXNwb25zZV90eXBlPWNvZGUraWRfdG9rZW4mc2NvcGU9b3BlbmlkJm1zYWZlZD0xJm1zYXJlZGlyPTEmY2xpZW50LXJlcXVlc3QtaWQ9MzJhMWRkOWMtM2QyZi1jYzZhLTRlN2MtNTlhMzVkYmMxZTk1JnByb3RlY3RlZHRva2VuPXRydWUmY2xhaW1zPSU3YiUyMmlkX3Rva2VuJTIyJTNhJTdiJTIyeG1zX2NjJTIyJTNhJTdiJTIydmFsdWVzJTIyJTNhJTViJTIyQ1AxJTIyJTVkJTdkJTdkJTdkJm5vbmNlPTYzODQ5NzMxODM4OTQ2OTA3Mi5jMzg2ODI0OS00M2NhLTRjOWQtODIzYi04ZDQ3YmQxNDk2NDkmc3RhdGU9RGN1NUVZQXdEQVZSR1laeWhJMzFSMGM1UG5KQzJrZkIyMndMRVozcFNLVmx5RlFjWWZLNGVFQ2pXYi1YdUhwSE1HUU54b3JOM21XeWI5amNEMElSSmQtcnZ0LW9Qdw==&sso_reload=true
 malicious
https://wordpressprofissional.com.br/wp-content/OxZU0e8fGTHt7NTfrafq/
https://outlook.office365.com/owa/prefetch.aspx
https://outlook.office365.com/owa/prefetch.aspx
https://outlook.office365.com/owa/prefetch.aspx
https://outlook.office365.com/owa/prefetch.aspx
https://6knvejjuzh3.scrdata-doc.cfd/owa/
https://6knvejjuzh3.scrdata-doc.cfd/owa/
There are 2 hidden doms, click here to show them.