Analysis Report http://track.coronavirusworldupdatesmail.com%20%2080%20/CI0/0100017956db7bff-06e72b01-71cb-4c2e-9a02-d565aedafc71-000000/KA2BdDHKj5FbxvuEAidUdYnccu4HbqMYoXyJLj0QGjw=192

Overview

General Information

Sample URL:	http://track.coronavirusworldupdatesmail.com%20%2080%20/CI0/0100017956db7bff-06e72b01-71cb-4c2e-9a02-d565aedafc71-000000/KA2BdDHKj5FbxvuEAidUdYnccu4HbqMYoXyJLj0QGjw=192
Analysis ID:	410126
Infos:
Most interesting Screenshot:
Errors URL not reachable

Detection

Score:	0
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

No high impact signatures.

Classification

Signatures

There are no high impact signatures.

Source: C:\Program Files (x86)\Internet Explorer\iexplore.exe

File opened: C:\Program Files (x86)\Java\jre1.8.0_211\bin\msvcr100.dll

Jump to behavior

Source: {8485CC3A-B213-11EB-90E6-ECF4BB82F7E0}.dat.1.dr, ~DF98F65DA44743C878.TMP.1.dr

String found in binary or memory: http://track.coronavirusworldupdatesmail.com%20%2080%20/CI0/0100017956db7bff-06e72b01-71cb-4c2e-9a02

Source: classification engine

Classification label: unknown0.win@3/11@0/0

Source: C:\Program Files\internet explorer\iexplore.exe

File created: C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{8485CC38-B213-11EB-90E6-ECF4BB82F7E0}.dat

Jump to behavior

Source: C:\Program Files\internet explorer\iexplore.exe

File created: C:\Users\user~1\AppData\Local\Temp\~DF5FF2FCE000711FF6.TMP

Jump to behavior

Source: C:\Program Files\internet explorer\iexplore.exe

File read: C:\Users\desktop.ini

Jump to behavior

Source: unknown	Process created: C:\Program Files\internet explorer\iexplore.exe 'C:\Program Files\Internet Explorer\iexplore.exe' -Embedding
Source: C:\Program Files\internet explorer\iexplore.exe	Process created: C:\Program Files (x86)\Internet Explorer\iexplore.exe 'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:5272 CREDAT:17410 /prefetch:2
Source: C:\Program Files\internet explorer\iexplore.exe	Process created: C:\Program Files (x86)\Internet Explorer\iexplore.exe 'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:5272 CREDAT:17410 /prefetch:2	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files (x86)\Internet Explorer\iexplore.exe

File opened: C:\Program Files (x86)\Java\jre1.8.0_211\bin\msvcr100.dll

Jump to behavior

Screenshots

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Network Map

No contacted IP infos

ID:	410126
Product:	CloudBasic
Start time:	21:43:16
Start date:	10.05.2021
Cookbook:	browseurl.jbs
System description:	Windows 10 64 bit v1803 with Office Professional Plus 2016, Chrome 85, IE 11, Adobe Reader DC 19, Java 8 Update 211
Architecture:	WINDOWS

Name	Type	MD5	SHA1	SHA256
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{8485CC38-B213-11EB-90E6-ECF4BB82F7E0}.dat	Microsoft Word Document	4898C2D64E4D19A5114C4963996DB8AC	785737F7B850853628EE76F242B1470A6DD222B7	89CB965789804511E8C504F6077D341A7F99632501182E0BDACE05E7F06DDF7F
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{8485CC3A-B213-11EB-90E6-ECF4BB82F7E0}.dat	Microsoft Word Document	0624F13FF6F4252697294D17AF35ADD3	3A1B47802A4FA9007A9F37B215195A8583972593	44A4CED0DE5DD27EAAFCF3F71413871A22F0B0DFCDDB9B7DB3D96EF3A8F3428A
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{8485CC3B-B213-11EB-90E6-ECF4BB82F7E0}.dat	Microsoft Word Document	A0C2475CFDF3306F88562AC775124EE5	80E49C99C7B54B59500F2C1EAD77B75442877334	87FF08E86FE371FF73BD015E7938EE0AA9D35A4ED900D2864FF602605519E695
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0MX4YUS9\httpErrorPagesScripts[1]	UTF-8 Unicode (with BOM) text, with CRLF line terminators	9234071287E637F85D721463C488704C	CCA09B1E0FBA38BA29D3972ED8DCECEFDEF8C152	65CC039890C7CEB927CE40F6F199D74E49B8058C3F8A6E22E8F916AD90EA8649
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2K7JPOQS\NewErrorPageTemplate[1]	UTF-8 Unicode (with BOM) text, with CRLF line terminators	DFEABDE84792228093A5A270352395B6	E41258C9576721025926326F76063C2305586F76	77B138AB5D0A90FF04648C26ADDD5E414CC178165E3B54A4CB3739DA0F58E075
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2K7JPOQS\dnserror[1]	HTML document, UTF-8 Unicode (with BOM) text, with CRLF line terminators	2DC61EB461DA1436F5D22BCE51425660	E1B79BCAB0F073868079D807FAEC669596DC46C1	ACDEB4966289B6CE46ECC879531F85E9C6F94B718AAB521D38E2E00F7F7F7993
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6M6D1PMD\errorPageStrings[1]	UTF-8 Unicode (with BOM) text, with CRLF line terminators	D65EC06F21C379C87040B83CC1ABAC6B	208D0A0BB775661758394BE7E4AFB18357E46C8B	A1270E90CEA31B46432EC44731BF4400D22B38EB2855326BF934FE8F1B169A4F
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\VAHFWDJC\down[1]	PNG image data, 15 x 15, 8-bit colormap, non-interlaced	C4F558C4C8B56858F15C09037CD6625A	EE497CC061D6A7A59BB66DEFEA65F9A8145BA240	39E7DE847C9F731EAA72338AD9053217B957859DE27B50B6474EC42971530781
C:\Users\user\AppData\Local\Temp\~DF5FF2FCE000711FF6.TMP	data	20B82B3968B0941DDD9F4AE2B6FD061D	A5540F42ED731929F455CEF8CEF63D2329AD1390	3C0B0AD0053020FDDCEE01DF6A916C2D3C99E0D130D559106EC790DDC0D881BC
C:\Users\user\AppData\Local\Temp\~DF98F65DA44743C878.TMP	data	966AF79D3365B444E77FD840E1F28E81	31F6EAB77B4C6AE70BEE35C20BA43A74DA794A43	5186B8A72042A6A4AEBA2DAA40CE03A79A07C6AE03719A3005C8ED31F78967F4
C:\Users\user\AppData\Local\Temp\~DFBCBACF52620734D6.TMP	data	AB889A32AB9ACD33E816C2422337C69A	1190C6B34DED2D295827C2A88310D10A8B90B59B	4D6EC54B8D244E63B0F04FBE2B97402A3DF722560AD12F218665BA440F4CEFDA

Analysis Report http://track.coronavirusworldupdatesmail.com%20%2080%20/CI0/0100017956db7bff-06e72b01-71cb-4c2e-9a02-d565aedafc71-000000/KA2BdDHKj5FbxvuEAidUdYnccu4HbqMYoXyJLj0QGjw=192

Overview

General Information

Detection

Signatures

Classification

Signatures

Compliance:

Networking:

System Summary:

Screenshots

Behavior Graph

Network Map