top title background image
flash

?Cfisd_NewAudioMessage.htm

Status: finished
Submission Time: 2020-05-27 21:44:29 +02:00
Malicious
Phishing
Evader

Comments

Tags

Details

  • Analysis ID:
    233583
  • API (Web) ID:
    363321
  • Analysis Started:
    2020-05-27 21:44:29 +02:00
  • Analysis Finished:
    2020-05-27 21:49:30 +02:00
  • MD5:
    f374957ea500c44f5635cf4749a5088d
  • SHA1:
    729c162a8e2247bedd86f92e3385ad9fb4274672
  • SHA256:
    7ddc1bf015aa0e13691e9592328d4714c1a3f04d5f5aed2f906df47c4992b2cd
  • Technologies:

Joe Sandbox

Engine Download Report Detection Info
malicious
Score: 64
System: Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01

IPs

IP Country Detection
219.94.203.162
Japan
152.199.4.44
United States
95.216.15.24
Germany
Click to see the 2 hidden entries
136.243.80.207
Germany
104.16.133.229
United States

Domains

Name IP Detection
rental-room-yokohama.com
219.94.203.162
cs1100.wpc.omegacdn.net
152.199.4.44
freeiconspng.com
95.216.15.24
Click to see the 10 hidden entries
sanketindia.in
136.243.80.207
cdnjs.cloudflare.com
104.16.133.229
stackpath.bootstrapcdn.com
0.0.0.0
secure.aadcdn.microsoftonline-p.com
0.0.0.0
code.jquery.com
0.0.0.0
maxcdn.bootstrapcdn.com
0.0.0.0
aadcdn.msftauth.net
0.0.0.0
login.microsoftonline.com
0.0.0.0
www.freeiconspng.com
0.0.0.0
aadcdn.msauth.net
0.0.0.0

URLs

Name Detection
https://sanketindia.in/Desktop/#Ud83d#Udd6aCfisd_NewAudioMessage.htm
https://sanketindia.in/ztee1/117-Crl.html
https://maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap.min.css
Click to see the 49 hidden entries
https://aadcdn.msauth.net/ests/2.1/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico
https://code.jquery.com/jquery-3.1.1.min.js
https://aadcdn.msauth.net/ests/2.1/content/cdnbundles/aad.login.min_t9m5cijd5ykw_ikpwdam7w2.js
https://github.com/douglascrockford/JSON-js
https://aadcdn.msauth.net/ests/2.1/content/images/backgrounds/0-small_138bcee624fa04ef9b75e86211a9fe
http://fontawesome.io/license
http://gsgd.co.uk/sandbox/jquery/easing/
http://fontawesome.io/license/
https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.14.0/umd/popper.min.js
https://stackpath.bootstrapcdn.com/font-awesome/4.7.0/css/font-awesome.min.css
https://aadcdn.msauth.net/ests/2.1/content/images/microsoft_logo_7zyesnzhfxur7eprws2m2q2.png
https://aadcdn.msauth.net/ests/2.1/content/images/work_account_gwpgszjrdzmg9t-etotdlg2.png
http://www.youtube.com/
https://sanketindia.in
https://github.com/twbs/bootstrap/blob/master/LICENSE)
https://rental-room-yokohama.com/office.php?email=
http://www.wikipedia.com/
http://www.live.com/
https://aadcdn.msauth.net/ests/2.1/content/images/backgrounds/0-small_e4vo5it6bo-bdehiean-dq2.jpg&qu
https://secure.aadcdn.microsoftonline-p.com/ests/2.1.6468.8/content/images/favicon_a.ico~(
HTTPS://aadcdn.msftauth.net/ests/2.1/content/images/microsoft_logo_ee5c8d9fb6248c938fd0dc19370e90bd.
https://aadcdn.msauth.net
https://chillicarrot.com/ztee/Azure2020/realm/send.php?user=
https://sanketindia.in/ztee1/117-Crl.html#dy.kahanic
https://www.freeiconspng.com/uploads/success-icon-10.png
https://aadcdn.msauth.net/ests/2.1/content/cdnbundles/converged.v2.login.min_99ypt2ae9l1eaa2j9r7rkw2
https://secure.aadcdn.microsoftonline-p.com/ests/2.1.6468.8/content/images/favicon_a.ico
https://secure.aadcdn.microsoftonline-p.com/ests/2.1.7230.10/content/images/picker_account_aad.png
https://aadcdn.msauth.net/ests/2.1/content/images/backgrounds/0_pdvuot_2pyxh5ith335y8a2.jpg");
https://code.jquery.com/jquery-3.3.1.slim.min.js
http://www.amazon.com/
http://www.twitter.com/
https://portal.office.com/servicestatus
https://secure.aadcdn.microsoftonline-p.com/ests/2.1.7230.10/content/images/picker_account_add.svg
https://maxcdn.bootstrapcdn.com/bootstrap/3.3.7/js/bootstrap.min.js
https://sanketindia.in/ztee1/117-Crl.html#judy.kahanic
http://fontawesome.io
https://secure.aadcdn.microsoftonline-p.com/ests/2.1.7230.10/content/images/picker_more.png
http://getbootstrap.com)
https://aadcdn.msauth.net/ests/2.1/content/images/backgrounds/0_a5dbd4393ff6a725c7e62b61df7e72f0.jpg
https://login.microsoftonline.com/logout.srf?ct=1548343592&rver=64.4.6456.0&lc=1033&id=501392
http://opensource.org/licenses/MIT).
https://aadcdn.msauth.net/ests/2.1/content/cdnbundles/jquery.1.11.min_3z194vh3l5oibjd0ejgm-q2.js
https://aadcdn.msauth.net/ests/2.1/content/images/personal_account_d3k1lqya8k5_mmblgg85rq2.png
http://www.reddit.com/
https://secure.aadcdn.microsoftonline-p.com/ests/2.1.6468.8/content/images/favicon_a.ico~
http://www.nytimes.com/
https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css
http://fontawesome.iohttp://fontawesome.iohttp://fontawesome.io/license/http://fontawesome.io/licens

Dropped files

Name File Type Hashes Detection
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\P24S97MI\work_account_gwpgszjrdzmg9t-etotdlg2[1].png
PNG image data, 51 x 51, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\O0N4T4W6\fontawesome-webfont[1].eot
Embedded OpenType (EOT), FontAwesome family
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\O0N4T4W6\fontawesome-webfont[2].eot
Embedded OpenType (EOT), FontAwesome family
#
Click to see the 37 hidden entries
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\O0N4T4W6\jquery-3.1.1.min[1].js
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\O0N4T4W6\logout[1].htm
HTML document, UTF-8 Unicode text, with very long lines, with CRLF, LF line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\O0N4T4W6\popper.min[1].js
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\P24S97MI\font-awesome.min[1].css
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\P24S97MI\font-awesome[1].css
troff or preprocessor input, ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\P24S97MI\jquery.1.11.min_3z194vh3l5oibjd0ejgm-q2[1].js
UTF-8 Unicode text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\P24S97MI\success-icon-10[1].png
PNG image data, 400 x 400, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\O0N4T4W6\favicon_a[1].ico
MS Windows icon resource - 6 icons, 128x128, 16 colors, 72x72, 16 colors
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PKAQFTEH\117-Crl[1].htm
HTML document, UTF-8 Unicode (with BOM) text, with very long lines, with CRLF line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PKAQFTEH\aad.login.min_t9m5cijd5ykw_ikpwdam7w2[1].js
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PKAQFTEH\microsoft_logo_ee5c8d9fb6248c938fd0dc19370e90bd[1].svg
SVG Scalable Vector Graphics image
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PKAQFTEH\personal_account_d3k1lqya8k5_mmblgg85rq2[1].png
PNG image data, 51 x 51, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PKAQFTEH\picker_account_aad[1].png
PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PKAQFTEH\picker_account_add[1].svg
SVG Scalable Vector Graphics image
#
C:\Users\user\AppData\Local\Temp\~DF6A1351675FF77FA1.TMP
data
#
C:\Users\user\AppData\Local\Temp\~DF7F398C182A16D123.TMP
data
#
C:\Users\user\AppData\Local\Temp\~DFA3E8466961BFE048.TMP
data
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin20332743330\msapplication.xml
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{8DAC4C94-A052-11EA-AAE6-9CC1A2A860C6}.dat
Microsoft Word Document
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{954D8473-A052-11EA-AAE6-9CC1A2A860C6}.dat
Microsoft Word Document
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-17529550060\msapplication.xml
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-18270793970\msapplication.xml
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-21706820\msapplication.xml
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-4759708130\msapplication.xml
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-6757900\msapplication.xml
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-8760897390\msapplication.xml
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin20259167780\msapplication.xml
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{8DAC4C92-A052-11EA-AAE6-9CC1A2A860C6}.dat
Microsoft Word Document
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin8215062560\msapplication.xml
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\imagestore\v8bxa9r\imagestore.dat
data
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\5N37O3UG\0-small_138bcee624fa04ef9b75e86211a9fe0d[1].jpg
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 50x28, frames 3
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\5N37O3UG\0_a5dbd4393ff6a725c7e62b61df7e72f0[1].jpg
JPEG image data, baseline, precision 8, 1920x1080, frames 3
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\5N37O3UG\bootstrap.min[1].js
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\5N37O3UG\microsoft_logo_7zyesnzhfxur7eprws2m2q2[1].png
PNG image data, 108 x 24, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\5N37O3UG\picker_more[1].png
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\O0N4T4W6\bootstrap.min[1].css
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\O0N4T4W6\converged.v2.login.min_99ypt2ae9l1eaa2j9r7rkw2[1].css
ASCII text, with very long lines
#