flash

http://bejuy.com/?bejuy

Status: finished
Submission Time: 16.05.2020 22:24:23
Malicious
Phishing
Phisher

Comments

Tags

Details

  • Analysis ID:
    230834
  • API (Web) ID:
    357986
  • Analysis Started:
    16.05.2020 22:24:23
  • Analysis Finished:
    16.05.2020 22:29:15
  • Technologies:
Full Report Engine Info Verdict Score Reports

System: Windows 10 64 bit (version 1803) with Office 2016, Adobe Reader DC 19, Chrome 70, Firefox 63, Java 8.171, Flash 30.0.0.113

malicious
64/100

malicious
5/71

malicious

IPs

IP Country Detection
173.192.101.24
United States
34.243.169.105
United States
173.239.8.164
United States
Click to see the 1 hidden entries
94.130.132.43
Germany

Domains

Name IP Detection
j1.jump6geo.com
34.243.169.105
infopicked.com
173.192.101.24
xmastertrk.com
94.130.132.43
Click to see the 3 hidden entries
bejuy.com
173.239.8.164
p226681.infopicked.com
173.192.101.24
pzlqr.lovechats.org
0.0.0.0

URLs

Name Detection
http://ww9.bejuy.com/
https://pzlqr.lovechats.org/site/redirectpage?ca=link&sid=188579&hid=125259&hv=skocg5ec04c18e152a562
http://www.reddit.com/
Click to see the 20 hidden entries
http://www.twitter.com/
http://bejuy.com/?bejuyRoot
http://bejuy.com/
https://pzlqr.lovechats.org/c/c44213fa2bf7a303?s1=1002&s2=1086203&s3=&s5=backuser&click_id=124901637
https://pzlqr.lovechats.org/c/c44213fa2bf7a303?s1=1002&s2=1086203&click_id=124901637ftg5e34&j1=1&j3=
http://bejuy.com/bejuy:
http://bejuy.com/bejuy
http://www.nytimes.com/
http://bejuy.com/?bejuy
https://pzlqr.lovechat
https://infopicked.com/aS/feedclick?s=PmRMc57CnhYZet1arZq9W0qG5X-zMz6kHbw7jypZ-P3jWfbcQVxXOILUfaDR__
http://www.youtube.com/
https://pzlqr.lovechatys.org/c/c44213fa2bf7a303?s1=1002&s2=1086203&click_id=124901637ftg5e34&j1=1&j3
https://github.com/krux/postscribe/blob/master/LICENSE.
http://www.wikipedia.com/
http://bejuy.com/bejuyyRoot
http://www.amazon.com/
https://pzlqr.lovechats.org/images/favicon.ico
http://www.live.com/
http://p226681.infopicked.com/adServe/domainClick?ai=sDgLTWBy6qiKJfoyyAyxz5lTec1R-G0hfbiK18fJJ8N8PCREsrxRP2o8pKmc8FyM25_rtcFU56saYvAdoGosa76GulJZdBUf4dUnXWOc4W9U5jDDOEjXTm8TXQYarsc_D4cDfGPOorKHic3Byin_EYU9LqzvQyaatri_vDCiKgYCvLHM1MhvxQM-Jr3Q9J-0-T0AvjbOx9FD-IoRiWjmF-WJdLgktdb-Bry3DbhZYzDWEvsxfr1WQk-THV8f6WcI-vie8-wq9A05jDCok9YMrGP7DLX1xSsUlJxRbMtshDY3nKRnCr1_SRSaWJJddIjta_lqISjeZ5nCF7WIMxlUWr7AdIrib2gOJf4yBNRlqxdPnEhIaw2zsRJHJzdDv6O5-zfUS8nVU04fFcxJ0StShp2s0_34CATUuHZzeSQTgkyFv_aZQC5A4r4FDOdw858tImbOeXz24ZVRY0XLI-w26tWjri88Beg6ZonWe_Vtl9GtFLC8pMLsUA5RUDuR6cw8k5rIqlNi8oiNOntyGiJLUJkP5LNliGtG&ui=PmRMc57CnhboFEyXhZ8tO2vi5v6ZZrF7dLiTNq3P25qokS0sVeF3FqdDzduyOn70mxugia8gbQtshfZZwD5uxjTSbLQEFK6iLvDPG3aKFMRHjQhY9W1eMf4MnGiTkT87&si=1&oref=4dc86188f9b41fed212768d74d5ef8bf&rb=8pDSrleFLcU&rr=1

Dropped files

Name File Type Hashes Detection
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\O0N4T4W6\GEJ86LEX.htm
HTML document, ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{4BC872D7-97B3-11EA-AAE6-9CC1A2A860C6}.dat
Microsoft Word Document
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{4BC872D9-97B3-11EA-AAE6-9CC1A2A860C6}.dat
Microsoft Word Document
#
Click to see the 28 hidden entries
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{521F6904-97B3-11EA-AAE6-9CC1A2A860C6}.dat
Microsoft Word Document
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-17529550060\msapplication.xml
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-18270793970\msapplication.xml
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-21706820\msapplication.xml
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-4759708130\msapplication.xml
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-6757900\msapplication.xml
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-8760897390\msapplication.xml
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin20259167780\msapplication.xml
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin20332743330\msapplication.xml
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin8215062560\msapplication.xml
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\imagestore\v8bxa9r\imagestore.dat
data
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\5N37O3UG\d4a6d4bd[1].htm
HTML document, ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\5N37O3UG\m3[1].jpg
[TIFF image data, big-endian, direntries=12, height=667, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=500], progressive, precision 8, 500x667, frames 3
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\5N37O3UG\translate[1].js
UTF-8 Unicode text, with CRLF line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\O0N4T4W6\css[1].css
ASCII text
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\O0N4T4W6\gtm[1].js
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\P24S97MI\c44213fa2bf7a303[1].htm
HTML document, UTF-8 Unicode text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\P24S97MI\m1[1].jpg
[TIFF image data, big-endian, direntries=12, height=667, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=500], progressive, precision 8, 500x667, frames 3
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\P24S97MI\m2[1].jpg
[TIFF image data, big-endian, direntries=12, height=667, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=500], progressive, precision 8, 500x667, frames 3
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\P24S97MI\m4[1].jpg
[TIFF image data, big-endian, direntries=12, height=667, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=500], progressive, precision 8, 500x667, frames 3
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\P24S97MI\m5[1].jpg
[TIFF image data, big-endian, direntries=12, height=667, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=500], progressive, precision 8, 500x667, frames 3
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\P24S97MI\m6[1].jpg
[TIFF image data, big-endian, direntries=12, height=667, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=500], progressive, precision 8, 500x667, frames 3
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PKAQFTEH\css[1].css
ASCII text
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PKAQFTEH\favicon[1].ico
PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PKAQFTEH\jquery-2.2.4.min[1].js
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Temp\~DF9F3818FB0AF5EA34.TMP
data
#
C:\Users\user\AppData\Local\Temp\~DFEAC4705D7CE34ACD.TMP
data
#
C:\Users\user\AppData\Local\Temp\~DFF3F346E2EA1BC5F5.TMP
data
#