top title background image
flash

https://drive.google.com/open?id=11WWpJJO4-pZXMsDttLtpytp9N5eHjAJw

Status: finished
Submission Time: 2020-05-23 00:31:45 +02:00
Suspicious
Phishing

Comments

Tags

Details

  • Analysis ID:
    232571
  • API (Web) ID:
    361390
  • Analysis Started:
    2020-05-23 00:31:46 +02:00
  • Analysis Finished:
    2020-05-23 00:37:03 +02:00
  • Technologies:

Joe Sandbox

Engine Download Report Detection Info
suspicious
Score: 22
System: Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01

IPs

IP Country Detection
173.194.76.155
United States
67.222.108.232
United States
172.217.18.6
United States
Click to see the 5 hidden entries
172.217.23.97
United States
172.217.23.130
United States
172.217.23.99
United States
104.28.8.39
United States
172.217.16.162
United States

Domains

Name IP Detection
dart.l.doubleclick.net
172.217.18.6
pagead46.l.doubleclick.net
172.217.16.162
tny.sh
104.28.8.39
Click to see the 9 hidden entries
stats.l.doubleclick.net
173.194.76.155
www.google.co.uk
172.217.23.99
googlehosted.l.googleusercontent.com
172.217.23.97
tesairekapy.com.py
67.222.108.232
accounts.youtube.com
0.0.0.0
2542116.fls.doubleclick.net
0.0.0.0
lh6.googleusercontent.com
0.0.0.0
adservice.google.co.uk
0.0.0.0
stats.g.doubleclick.net
0.0.0.0

URLs

Name Detection
http://www.bohemiancoding.com/sketch/ns
https://chromium.googlesource.com/chromium/src/
http://www.apache.org/licenses/LICENSE-2.0
Click to see the 48 hidden entries
https://schema.org/WebPage
https://www.youtube.com/googlechrome
http://www.nytimes.com/
https://www.chromium.org/
https://accounts.googl
https://about.google/
https://about.google/products/
http://www.bohemiancoding.com/sketch
https://googleads.g.doubleclick.net
https://www.wikidata.org/wiki/Q777
https://static.doubleclick.net
https://accounts.googlom/file/d/11WWpJJO4-pZXMsDttLtpytp9N5eHjAJw/viewsp=drive_opene.com/ServiceLogi
https://developer.chrome.com/webstore/?hl=en
https://s.ytimg.com
https://www.google.%/ads/ga-audiences
http://www.youtube.com/
http://www.wikipedia.com/
https://2542116.fls.doubleclick.net/activityi;src=2542116;type=chrom322;cat=chrom01g;ord=78084137657
https://tesairekapy.com.py/sharepoint/webnet.php?code=2018900en-gb-material-callout&utm_medium=mater
http://www.live.com/
https://accounts.youtube.com/accounts/CheckConnection?pmpo
https://tesairekapy.com.py/sharepoint/webnet.php?code=2018900
https://drive-thirdparty.googleusercontent.com/16/type/application/pdf
https://www.chromium.org/chromium-os
http://schema.org/CreativeWork/DocumentObject
http://www.broofa.com
https://stats.g.doubleclick.net/r/collect?t=dc&aip=1&_r=3&
http://www.amazon.com/
https://g.co/recover
https://blog.google/products/chrome/
http://www.twitter.com/
https://lh6.googleusercontent.com/COwW1hXAdRP1xt-I-Vya0lD4ebOmCvZoubkFL-oi9f9LEYbOJQmsDchfcUsn4o_V2w
https://tesairekapy.co
https://www.youtube.com
https://www.youtube.com/iframe_api
http://schema.org
https://www.youtube.com/user/googlechrome
http://scrollmagic.io
http://modernizr.com/download/#-fontface-backgroundsize-borderimage-borderradius-boxshadow-flexbox-f
https://adservice.google.co.uk/ddm/fls/i/src=2542116;type=chrom322;cat=chrom01g;ord=7808413765790;gt
https://drive-thirdparty.googleusercontent.com/
https://twitter.com/googlechrome
https://github.com/krux/postscribe/blob/master/LICENSE.
https://www.google.co.uk/intl/en-GB/about/products
https://stats.g.doubleclick.net/j/collect
https://g.co/
https://2542116.fls.doubleclick.net
http://www.reddit.com/

Dropped files

Name File Type Hashes Detection
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\VINVDFP6\ScrollMagic.min[1].js
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\VINVDFP6\illo_left[1].png
PNG image data, 300 x 300, 8-bit colormap, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\VINVDFP6\hero-back-large-desktop[1].jpg
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1740x760, frames 3
#
Click to see the 97 hidden entries
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\VINVDFP6\google-logo-one-color[1].jpg
JPEG image data, baseline, precision 8, 86x28, frames 3
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\VINVDFP6\favicon-16x16[1].png
PNG image data, 16 x 16, 8-bit colormap, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\VINVDFP6\devices[1].png
PNG image data, 320 x 330, 8-bit colormap, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\VINVDFP6\css[1].css
ASCII text
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\VINVDFP6\close-icon[1].png
PNG image data, 21 x 21, 4-bit colormap, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\VINVDFP6\cb=gapi[2].js
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\VINVDFP6\cb=gapi[1].js
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\VINVDFP6\animation.gsap.min[1].js
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\VINVDFP6\analytics[1].js
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\VINVDFP6\ServiceLogin[1].htm
HTML document, ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\VINVDFP6\m=NpD4ec,SF3gsd,pB6Zqd,rHjpXd,lCVo3d,o02Jie,MB66Qc,YTxL4,QLpTOd,uhxrz,oWOlDb,sy5c,m5Z1Eb,sy62,sy61,YmeC5c[1].js
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\VINVDFP6\KFOkCnqEu92Fr1MmgVxIIzQ[1].woff
Web Open Font Format, TrueType, length 19936, version 1.1
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\VINVDFP6\1577185062-postmessagerelay[1].js
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\V5D02472\webnet[1].htm
HTML document, UTF-8 Unicode text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\V5D02472\vipbox[1].css
ASCII text, with CRLF line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\V5D02472\vipbox2[1].css
ASCII text
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\V5D02472\main.v2.min[1].css
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\V5D02472\m=syhy,otPmVb,rlNAl[1].js
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\V5D02472\installer.min[1].js
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\V5D02472\illo_right[1].png
PNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\V5D02472\icon-file-download[1].jpg
[TIFF image data, big-endian, direntries=1], baseline, precision 8, 32x32, frames 3
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\V5D02472\gtm[1].js
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\VTIIBVU5\autotrack[1].js
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\VTIIBVU5\obg[1].png
PNG image data, 567 x 338, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\VTIIBVU5\m=syd,sye,identifier_view[1].js
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\VTIIBVU5\m=sy43,sy42,sy44,sy47,sy46,sy49,gypOCd[1].js
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\VTIIBVU5\js[1].js
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\VTIIBVU5\icon_3_pdf_x16[1].png
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\VTIIBVU5\icon_14_pdf_favicon[1].ico
MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\VTIIBVU5\icon-youtube[1].jpg
JPEG image data, baseline, precision 8, 24x24, frames 3
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\VTIIBVU5\icon-twitter[1].jpg
JPEG image data, baseline, precision 8, 24x24, frames 3
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\VTIIBVU5\favicon[1].ico
MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\VTIIBVU5\chrome_throbber_fast[1].gif
GIF image data, version 89a, 24 x 24
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\VTIIBVU5\chrome[1].htm
HTML document, UTF-8 Unicode text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\VTIIBVU5\browser_ntp[1].png
PNG image data, 2054 x 1360, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\V5D02472\googleapis.proxy[1].js
HTML document, ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\VTIIBVU5\api[1].js
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\VTIIBVU5\activityi;src=2542116;type=chrom322;cat=chrom01g;ord=7808413765790;gtm=2wg5e1;~oref=https___www.google[1].htm
HTML document, ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\VTIIBVU5\KFOmCnqEu92Fr1Me5g[1].woff
Web Open Font Format, TrueType, length 66044, version 1.1
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\VTIIBVU5\KFOlCnqEu92Fr1MmEU9vAA[1].woff
Web Open Font Format, TrueType, length 66456, version 1.1
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\VTIIBVU5\CheckConnection[1].htm
HTML document, ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\VTIIBVU5\4002666812-docos_binary_i18n__en_gb[1].js
HTML document, ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\VINVDFP6\rs=AO0039u9cWejkObuYdDpbqUWdJLX9tXr-w[1].css
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\VINVDFP6\rpc_shindig_random[1].js
HTML document, ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\VINVDFP6\proxy[1].htm
HTML document, ASCII text
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\VINVDFP6\m=v[1].js
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\VINVDFP6\m=pwd[1].js
ASCII text
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin20332743330\msapplication.xml
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\cb=gapi[1].js
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\KFOmCnqEu92Fr1Mu4mxM[1].woff
Web Open Font Format, TrueType, length 19824, version 1.1
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\KFOlCnqEu92Fr1MmWUlfBBc-[1].woff
Web Open Font Format, TrueType, length 19888, version 1.1
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\KFOlCnqEu92Fr1MmSU5fBBc-[1].woff
Web Open Font Format, TrueType, length 19916, version 1.1
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\KFOkCnqEu92Fr1Mu51xIIzQ[1].woff
Web Open Font Format, TrueType, length 21528, version 1.1
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\Invoice Order.pdf[1].png
PNG image data, 800 x 1132, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\4UabrENHsxJlGDuGo1OIlLU94bt3[1].woff
Web Open Font Format, TrueType, length 82716, version 1.1
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\4UabrENHsxJlGDuGo1OIlLU94YtzCwA[1].woff
Web Open Font Format, TrueType, length 26412, version 1.1
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\4UaGrENHsxJlGDuGo1OIlL3Owpg[1].woff
Web Open Font Format, TrueType, length 26180, version 1.1
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\4UaGrENHsxJlGDuGo1OIlI3K[1].woff
Web Open Font Format, TrueType, length 82300, version 1.1
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\imagestore\6aw4uvh\imagestore.dat
data
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin8215062560\msapplication.xml
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\css[1].css
ASCII text
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin20259167780\msapplication.xml
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-8760897390\msapplication.xml
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-6757900\msapplication.xml
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-4759708130\msapplication.xml
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-21706820\msapplication.xml
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-18270793970\msapplication.xml
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-17529550060\msapplication.xml
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{88A0DA36-9CC7-11EA-AADD-C25F135D3C65}.dat
Microsoft Word Document
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{820FC5A0-9CC7-11EA-AADD-C25F135D3C65}.dat
Microsoft Word Document
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{820FC59E-9CC7-11EA-AADD-C25F135D3C65}.dat
Microsoft Word Document
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\DOMStore\D1YBPPLZ\accounts.google[1].xml
ASCII text, with no line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\vip_loader[1].gif
GIF image data, version 89a, 220 x 19
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\V5D02472\google-chrome-logo[1].jpg
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 160x24, frames 3
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\V5D02472\download-bg-desktop[1].svg
SVG Scalable Vector Graphics image
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\V5D02472\chrome-logo[1].svg
SVG Scalable Vector Graphics image
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\V5D02472\cb=gapi[1].js
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\V5D02472\browser[1].htm
HTML document, ASCII text, with CRLF, LF line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\V5D02472\KFOlCnqEu92Fr1MmEU9fBBc-[1].woff
Web Open Font Format, TrueType, length 20012, version 1.1
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\V5D02472\Chrome_Owned_96x96[1].png
PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\V5D02472\4UabrENHsxJlGDuGo1OIlLV154tzCwA[1].woff
Web Open Font Format, TrueType, length 26216, version 1.1
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\V5D02472\4UabrENHsxJlGDuGo1OIlLU94YtzCwA[1].woff
Web Open Font Format, TrueType, length 26464, version 1.1
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\V5D02472\4UaGrENHsxJlGDuGo1OIlL3Owpg[1].woff
Web Open Font Format, TrueType, length 26228, version 1.1
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\V5D02472\11WWpJJO4-pZXMsDttLtpytp9N5eHjAJw[1].json
ASCII text
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\web-store[1].svg
SVG Scalable Vector Graphics image
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\DOMStore\9K719AIK\www.google[1].xml
ASCII text, with no line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\view[1].htm
HTML document, ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\src=2542116;type=chrom322;cat=chrom01g;ord=7808413765790;gtm=2wg5e1;~oref=https___www.google[2].htm
HTML document, ASCII text, with no line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\src=2542116;type=chrom322;cat=chrom01g;ord=7808413765790;gtm=2wg5e1;~oref=https___www.google[1].htm
HTML document, ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\recaptcha__en[1].js
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\postmessageRelay[1].htm
HTML document, ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\o[1].png
PNG image data, 128 x 36, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\modernizr[1].js
UTF-8 Unicode text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\metadata[1].json
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\main.v2.min[1].js
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\icon-help[1].jpg
JPEG image data, baseline, precision 8, 20x21, frames 3
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\icon-fb[1].jpg
JPEG image data, baseline, precision 8, 24x24, frames 3
#