IOC Report
https://u26104411.ct.sendgrid.net/ls/click?upn=u001.zW8oVhdj5pKCVpqckqa2lGkK2psXvluLUVS3O7nQUfxJiBwQtfzLq9XxnilEqoWnomMi_Lsz-2Bbc7cmv92bINl-2FoHEMcfyPA4Jad5DXeE7XCCzzz0AIowPBD2C0zU58ggZ77OY-2FFNdEyh9ntVeoGAr4mK2Tt7ZyQqr3il65WuD5szN49Znv0hdwi4KmkUfieunkhtP7woIkc8uCUSzXBIhwPEowVhZvndJnXU2cp754fkeyS1GT

loading gif

Files

File Path
Type
Category
Malicious
Chrome Cache Entry: 48
HTML document, ASCII text
downloaded
Chrome Cache Entry: 49
PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced
downloaded
Chrome Cache Entry: 50
ASCII text, with very long lines (1432)
downloaded
Chrome Cache Entry: 51
PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced
dropped
Chrome Cache Entry: 52
ASCII text, with very long lines (37473)
dropped
Chrome Cache Entry: 53
ASCII text, with very long lines (37473)
downloaded

Processes

Path
Cmdline
Malicious
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2272 --field-trial-handle=2188,i,16931336812364116963,5743274826614821577,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://u26104411.ct.sendgrid.net/ls/click?upn=u001.zW8oVhdj5pKCVpqckqa2lGkK2psXvluLUVS3O7nQUfxJiBwQtfzLq9XxnilEqoWnomMi_Lsz-2Bbc7cmv92bINl-2FoHEMcfyPA4Jad5DXeE7XCCzzz0AIowPBD2C0zU58ggZ77OY-2FFNdEyh9ntVeoGAr4mK2Tt7ZyQqr3il65WuD5szN49Znv0hdwi4KmkUfieunkhtP7woIkc8uCUSzXBIhwPEowVhZvndJnXU2cp754fkeyS1GT6LbKlT6odtOxp1kZxDAwASljVsZOk3eP5lw-2BJ-2FYJQ-3D-3D"

URLs

Name
IP
Malicious
https://u26104411.ct.sendgrid.net/ls/click?upn=u001.zW8oVhdj5pKCVpqckqa2lGkK2psXvluLUVS3O7nQUfxJiBwQtfzLq9XxnilEqoWnomMi_Lsz-2Bbc7cmv92bINl-2FoHEMcfyPA4Jad5DXeE7XCCzzz0AIowPBD2C0zU58ggZ77OY-2FFNdEyh9ntVeoGAr4mK2Tt7ZyQqr3il65WuD5szN49Znv0hdwi4KmkUfieunkhtP7woIkc8uCUSzXBIhwPEowVhZvndJnXU2cp754fkeyS1GT6LbKlT6odtOxp1kZxDAwASljVsZOk3eP5lw-2BJ-2FYJQ-3D-3D
https://response12-sendgrid.com/
https://response12-sendgrid.com/assets/index-DObXhIMY.css
104.21.64.1
https://www.shorturl.at/q5mr6
172.67.69.88
https://response12-sendgrid.com/assets/index-DjCM6f8d.js
104.21.64.1
https://response12-sendgrid.com/image.png
104.21.64.1
https://shorturl.at/q5mr6
104.26.8.129

Domains

Name
IP
Malicious
www.shorturl.at
172.67.69.88
shorturl.at
104.26.8.129
www.google.com
216.58.206.68
response12-sendgrid.com
104.21.64.1
u26104411.ct.sendgrid.net
167.89.118.28

IPs

IP
Domain
Country
Malicious
167.89.118.28
u26104411.ct.sendgrid.net
United States
104.21.64.1
response12-sendgrid.com
United States
192.168.2.4
unknown
unknown
216.58.206.68
www.google.com
United States
172.67.69.88
www.shorturl.at
United States
104.21.112.1
unknown
United States
239.255.255.250
unknown
Reserved
104.26.8.129
shorturl.at
United States

DOM / HTML

URL
Malicious
https://response12-sendgrid.com/