flash

https://www.nexxt.com/common/track/trackgeneral.asp?tcid=106&ttid=2&cid=146408910&emid=18977&tv1=Unsubscribe&tl2=sd&tv2=20200224%2B14%3A08&bydal=true&sid=EFC4BF1A-2DD6-4735-A7FC-6285ED6C4AAC&intsti=N&red=//abod3.AZUREedGe.nEt/jhmuellerhmuelleronhmuellerjzu#hmueller@volt.com

Status: finished
Submission Time: 28.05.2020 17:07:45
Malicious
Phishing
Phisher

Comments

Tags

Details

  • Analysis ID:
    233908
  • API (Web) ID:
    363967
  • Analysis Started:
    28.05.2020 17:07:45
  • Analysis Finished:
    28.05.2020 17:11:45
  • Technologies:
Full Report Engine Info Verdict Score Reports

System: Windows 10 64 bit (version 1803) with Office 2016, Adobe Reader DC 19, Chrome 70, Firefox 63, Java 8.171, Flash 30.0.0.113

malicious
60/100

malicious

IPs

IP Country Detection
68.168.84.60
United States
104.16.122.175
United States

Domains

Name IP Detection
unpkg.com
104.16.122.175
www.nexxt.com
68.168.84.60
code.jquery.com
0.0.0.0

URLs

Name Detection
http://www.youtube.com/
https://abod3.s3-ap-southeast-1.amazonaws.com/update3.html#
https://unpkg.com/axios/dist/axios.min.js
Click to see the 8 hidden entries
https://bdblavvyers.com/chk/chekeml3.php?email=
http://www.wikipedia.com/
http://www.amazon.com/
http://www.nytimes.com/
https://code.jquery.com/jquery-3.1.1.slim.min.js
http://www.live.com/
http://www.reddit.com/
http://www.twitter.com/

Dropped files

Name File Type Hashes Detection
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\favicon[1].htm
HTML document, ASCII text
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\KSU5XQMC\jhmuellerhmuelleronhmuellerjzu[1].htm
HTML document, ASCII text
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{7B69CFFB-A140-11EA-AADD-C25F135D3C65}.dat
Microsoft Word Document
#
Click to see the 17 hidden entries
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{7B69CFFD-A140-11EA-AADD-C25F135D3C65}.dat
Microsoft Word Document
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{7B69CFFE-A140-11EA-AADD-C25F135D3C65}.dat
Microsoft Word Document
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-17529550060\msapplication.xml
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-18270793970\msapplication.xml
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-21706820\msapplication.xml
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-4759708130\msapplication.xml
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-6757900\msapplication.xml
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-8760897390\msapplication.xml
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin20259167780\msapplication.xml
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin20332743330\msapplication.xml
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin8215062560\msapplication.xml
XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\V5D02472\axios.min[1].js
ASCII text, with no line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\VINVDFP6\jquery-3.1.1.slim.min[1].js
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\VTIIBVU5\axios.min[1].js
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Temp\~DF3BDFF7589A80BA5B.TMP
data
#
C:\Users\user\AppData\Local\Temp\~DF563F9012C1F37892.TMP
data
#
C:\Users\user\AppData\Local\Temp\~DFBEE9407E28532A4F.TMP
data
#