flash

http://www.moonli8t.com/fonts/page/

Status: finished
Submission Time: 12.05.2020 20:58:08
Malicious
Phishing
Phisher

Comments

Tags

Details

  • Analysis ID:
    229613
  • API (Web) ID:
    355601
  • Analysis Started:
    12.05.2020 20:58:09
  • Analysis Finished:
    12.05.2020 21:03:45
  • Technologies:
Full Report Management Report Engine Info Verdict Score Reports

System: Windows 10 64 bit v1803 with Office Professional Plus 2016, Chrome 85, IE 11, Adobe Reader DC 19, Java 8 Update 211

malicious
48/100

IPs

IP Country Detection
104.27.150.13
United States
185.8.175.136
Iran (ISLAMIC Republic Of)
52.28.1.237
United States

Domains

Name IP Detection
mfoxa.bemobtracks.com
52.28.1.237
taxpearl.com
104.27.150.13
moonli8t.com
185.8.175.136
Click to see the 2 hidden entries
www.moonli8t.com
0.0.0.0
maxcdn.bootstrapcdn.com
0.0.0.0

URLs

Name Detection
http://www.nytimes.com/
http://www.moonli8t.com/fonts/page/Root
http://www.youtube.com/
Click to see the 14 hidden entries
http://getbootstrap.com)
https://github.com/twbs/bootstrap/blob/master/LICENSE)
https://mfoxa.bemobtracks.com/go/1398e872-dfd6-4481-972e-0d67d52e8f58
http://www.wikipedia.com/
http://www.amazon.com/
http://www.moonli8t.com/favicon.ico
http://www.live.com/
http://www.moonli8t.com/favicon.ico&
https://getbootstrap.com/)
http://www.moonli8t.com/fonts/page/
http://www.reddit.com/
http://www.twitter.com/
http://browsehappy.com/
https://maxcdn.bootstrapcdn.com/bootstrap/3.4.0/js/bootstrap.min.js

Dropped files

Name File Type Hashes Detection
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\page[1].htm
ASCII text, with no line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\blue-square[1].png
PNG image data, 208 x 196, 2-bit colormap, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\call[1].png
PNG image data, 125 x 128, 8-bit colormap, non-interlaced
#
Click to see the 44 hidden entries
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\css[1].css
ASCII text
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\css[2].css
ASCII text
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\err[1].dat
data
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\jquery.min[1].js
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\made_in_usa[1].png
PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\V5D02472\bg[1].jpg
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1440x900, frames 3
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\V5D02472\connect[1].png
PNG image data, 125 x 128, 8-bit colormap, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\V5D02472\err[1].mp3
Audio file with ID3 version 2.3.0, contains:MPEG ADTS, layer III, v2, 64 kbps, 22.05 kHz, Monaural
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\V5D02472\error[1].htm
HTML document, ASCII text
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\V5D02472\main.min[1].css
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\V5D02472\mem5YaGs126MiZpBA-UN_r8OUuhv[1].woff
Web Open Font Format, TrueType, length 18668, version 1.1
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\V5D02472\mem8YaGs126MiZpBA-UFVZ0d[1].woff
Web Open Font Format, TrueType, length 18100, version 1.1
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\V5D02472\resolve[1].png
PNG image data, 125 x 128, 8-bit colormap, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\VINVDFP6\1Ptrg8zYS_SKggPNwIouWqZPBg[1].woff
Web Open Font Format, TrueType, length 25300, version 1.1
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\VINVDFP6\Simple-Line-Icons[1].eot
Embedded OpenType (EOT), simple-line-icons family
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\VINVDFP6\advance_call_center[1].png
PNG image data, 192 x 192, 8-bit colormap, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\VINVDFP6\beep[1].mp3
Audio file with ID3 version 2.3.0, contains:MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, Monaural
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\VINVDFP6\bootstrap.min[1].js
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\VINVDFP6\favicon[1].ico
MS Windows icon resource - 1 icon, 36x47, 32 bits/pixel
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\VINVDFP6\mem5YaGs126MiZpBA-UN7rgOUuhv[1].woff
Web Open Font Format, TrueType, length 18900, version 1.1
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\VINVDFP6\mem5YaGs126MiZpBA-UN8rsOUuhv[1].woff
Web Open Font Format, TrueType, length 19072, version 1.1
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\VINVDFP6\simple-line-icons[1].css
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\VTIIBVU5\1Ptrg8zYS_SKggPNwJYtWqZPBg[1].woff
Web Open Font Format, TrueType, length 25492, version 1.1
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\VTIIBVU5\Windows[1].png
PNG image data, 320 x 240, 8-bit/color RGBA, interlaced
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\VTIIBVU5\bootstrap.min[1].css
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\VTIIBVU5\main[1].js
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\VTIIBVU5\mem6YaGs126MiZpBA-UFUK0Zdcs[1].woff
Web Open Font Format, TrueType, length 17440, version 1.1
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\VTIIBVU5\style.min[1].css
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\VTIIBVU5\systemerror-ie-edge[1].htm
HTML document, UTF-8 Unicode text, with very long lines
#
C:\Users\user\AppData\Local\Temp\~DF5A49184880622A27.TMP
data
#
C:\Users\user\AppData\Local\Temp\~DFE45C98A108FA3149.TMP
data
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{0427D96E-94CE-11EA-AADD-C25F135D3C65}.dat
Microsoft Word Document
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{0427D970-94CE-11EA-AADD-C25F135D3C65}.dat
Microsoft Word Document
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-17529550060\msapplication.xml
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-18270793970\msapplication.xml
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-21706820\msapplication.xml
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-4759708130\msapplication.xml
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-6757900\msapplication.xml
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-8760897390\msapplication.xml
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin20259167780\msapplication.xml
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin20332743330\msapplication.xml
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin8215062560\msapplication.xml
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\imagestore\6aw4uvh\imagestore.dat
data
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\1Ptug8zYS_SKggPNyC0ISQ[1].woff
Web Open Font Format, TrueType, length 25244, version 1.1
#