top title background image
flash

https://app.box.com/s/uup6bxhgol9oof0zmwgzewd86gpayqrk

Status: finished
Submission Time: 2020-10-29 18:54:04 +01:00
Malicious
Phishing
HTMLPhisher

Comments

Tags

Details

  • Analysis ID:
    307285
  • API (Web) ID:
    516347
  • Analysis Started:
    2020-10-29 18:54:04 +01:00
  • Analysis Finished:
    2020-10-29 18:59:36 +01:00
  • Technologies:

Joe Sandbox

Engine Download Report Detection Info
malicious
Score: 68
System: Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01

Third Party Analysis Engines

malicious

IPs

IP Country Detection
34.251.161.187
United States
104.16.19.94
United States
15.237.76.117
United States
Click to see the 29 hidden entries
3.94.218.138
United States
34.252.156.174
United States
3.248.78.233
United States
3.229.202.186
United States
54.74.233.68
United States
151.101.66.109
United States
185.235.236.200
Germany
143.204.201.65
United States
99.86.2.88
United States
216.58.209.34
United States
3.214.152.179
United States
185.63.144.5
United States
216.58.206.67
United States
143.204.201.129
United States
185.63.145.5
United States
15.237.136.106
United States
185.235.236.197
Germany
99.86.2.33
United States
143.204.201.78
United States
192.28.147.68
United States
172.217.21.70
United States
143.204.201.50
United States
104.18.38.237
United States
50.16.7.188
United States
34.252.102.139
United States
185.235.236.201
Germany
31.13.92.36
Ireland
162.247.242.19
United States
216.58.208.142
United States

Domains

Name IP Detection
conversation.api.drift.com
0.0.0.0
app.box.com
185.235.236.201
pop-efr5.mix.linkedin.com
185.63.145.5
Click to see the 58 hidden entries
wildermanvall.buzz
104.18.38.237
metrics.api.drift.com
0.0.0.0
cdn01.boxcdn.net
0.0.0.0
cm.everesttech.net
0.0.0.0
cdn03.boxcdn.net
0.0.0.0
insight.adsrvr.org
0.0.0.0
js.driftt.com
0.0.0.0
script.hotjar.com
0.0.0.0
customer.api.drift.com
0.0.0.0
code.jquery.com
0.0.0.0
static.hotjar.com
0.0.0.0
www.youtube.com
0.0.0.0
dpm.demdex.net
0.0.0.0
api.company-target.com
143.204.201.129
9418626.fls.doubleclick.net
0.0.0.0
www.facebook.com
0.0.0.0
box.demdex.net
0.0.0.0
assets.adobedtm.com
0.0.0.0
www.linkedin.com
0.0.0.0
js-agent.newrelic.com
0.0.0.0
px.ads.linkedin.com
0.0.0.0
munchkin.marketo.net
0.0.0.0
lasteventf-tm.everesttech.net
0.0.0.0
www.everestjs.net
0.0.0.0
vars.hotjar.com
0.0.0.0
googleads.g.doubleclick.net
0.0.0.0
sanalytics.box.com
0.0.0.0
dc.ads.linkedin.com
0.0.0.0
s.ytimg.com
216.58.208.142
api.box.com
185.235.236.197
afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com
50.16.7.188
in.hotjar.com
54.74.233.68
dcs-edge-irl1-876252164.eu-west-1.elb.amazonaws.com
3.248.78.233
boxinc.sc.omtrdc.net
15.237.136.106
boxinc.tt.omtrdc.net
52.48.45.48
dl7g9llrghqi1.cloudfront.net
143.204.201.78
box.com.ssl.sc.omtrdc.net
15.237.76.117
static-live-cf.hotjar.com
99.86.2.88
vars-live-cf.hotjar.com
143.204.201.65
cdnjs.cloudflare.com
104.16.19.94
polyfill.io
151.101.66.109
107-coj-713.mktoresp.com
192.28.147.68
q.quora.com
3.214.152.179
dart.l.doubleclick.net
172.217.21.70
star-mini.c10r.facebook.com
31.13.92.36
pagead46.l.doubleclick.net
216.58.209.34
js.driftqa.com
3.229.202.186
targeting.api.drift.com
52.200.148.45
bam.nr-data.net
162.247.242.19
embeds.driftcdn.com
143.204.201.50
insight-566961044.eu-west-1.elb.amazonaws.com
34.251.161.187
www.box.com
185.235.236.197
pop-tln1-alpha.mix.linkedin.com
185.63.144.5
a.box.com
185.235.236.197
script-live-cf.hotjar.com
99.86.2.33
public.boxcloud.com
185.235.236.200
www.google.co.uk
216.58.206.67
account.box.com
185.235.236.197

URLs

Name Detection
https://wildermanvall.buzz/Elimetals/FBG/
https://account.box.com/login?redirect_url=https%3A%2F%2Fapp.box.com%2Fs%2Fuup6bxhgol9oof0zmwgzewd86gpayqrk
https://account.box.com/api/oauth2/authorize?response_type=code&client_id=zk9jjoicv7uhmiso37as3ychbzqtkrog&redirect_uri=https%3A%2F%2Fa.box.com%2Fauthorize&state=G4OnS6iwZDsXQ9w%2FhuUephNvMkDIMImQofnWd%2FJ6YcA%3D&box_app_banner_url=boxopendirect%3A%2F%2Ffolder%3Fid%3D0
Click to see the 3 hidden entries
https://www.box.com/en-gb/pricing
https://app.box.com/s/uup6bxhgol9oof0zmwgzewd86gpayqrk
https://account.box.com/login

Dropped files

Name File Type Hashes Detection
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\27.e776e5b0.chunk[1].css
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\launch-5f423943e551.min[1].js
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\js_jBjTY7Hpudx9waT5TqnqzmQDMM0KNPJ1riZjyYOS4O0[1].js
ASCII text, with very long lines
#
Click to see the 97 hidden entries
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\intersection-observer[1].js
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\icon_error-dmdeVS[1].png
PNG image data, 16 x 16, 8-bit colormap, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\favicon-32x32[1].png
PNG image data, 32 x 32, 8-bit colormap, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\bootstrap.min[1].js
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\at_callback[1].js
ASCII text
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\S6u9w4BMUTPHh6UVSwiPHw[1].woff
Web Open Font Format, TrueType, length 28052, version 1.1
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\S6u8w4BMUTPHjxsAXC-s[1].woff
Web Open Font Format, TrueType, length 29836, version 1.1
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\Eli%20Metals[1].pdf
PDF document, version 1.7
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\6.019e7b7b.chunk[1].js
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\29.311631dd.chunk[1].js
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\main~493df0b3.814e8452.chunk[1].js
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\27.b95a1410.chunk[1].js
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\25.c41e0ef3.chunk[1].js
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\24.daea6a69.chunk[1].js
C source, ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\19.779940a7.chunk[1].js
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\19.21d50bf1.chunk[1].css
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\12.6435bab6.chunk[1].js
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\11.5a5cfc1b.chunk[1].js
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\10.3ab49619.chunk[1].css
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\10.0e6e9e02.chunk[1].js
HTML document, ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\0.45eb4005.chunk[1].js
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\visitorapi.min[1].js
UTF-8 Unicode text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\preview-components~shared-file.539b145110[1].css
ASCII text, with no line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\946w7pnwpuzi[1].json
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\7.e4ed6766.chunk[1].js
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\34.6d45a5c6.chunk[1].js
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\20.b56999b1.chunk[1].css
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\20.b190b8ae.chunk[1].js
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\15.565dcd3c.chunk[1].js
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\15.07aa08a5.chunk[1].css
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\visitorapi_callback[1].js
ASCII text
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\uploads-manager-enduser.f23c87b9f0[1].css
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\uploads-manager-enduser.8711ff58f0[1].js
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\tr[1].gif
GIF image data, version 89a, 1 x 1
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\shared-file.cbd616bc31[1].css
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\visitWebPage[2].txt
ASCII text, with no line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\preview-components.15d31e9292[1].css
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\polyfill.min[1].js
data
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\pixel[1].gif
GIF image data, version 89a, 1 x 1
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\personal[1].htm
HTML document, ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\pdf_viewer.min[1].css
assembler source, ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\pdf.min[1].js
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\office[1].png
PNG image data, 512 x 512, 8-bit colormap, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\munchkin[1].js
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\memnYaGs126MiZpBA-UFUKWyV9hrIqU[1].woff
Web Open Font Format, TrueType, length 17668, version 1.1
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\mem6YaGs126MiZpBA-UFUK0Zdcs[1].woff
Web Open Font Format, TrueType, length 17440, version 1.1
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\main~970f9218.e5f0f498.chunk[1].js
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\17.edaf015c.chunk[1].js
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\css[1].css
ASCII text
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\authorize[1].htm
HTML document, ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\app.c1de7606ef[1].js
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\activityi;cat=box1_0;src=9418626;type=misce0[1].htm
HTML document, ASCII text, with no line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\Lato-woff[1].css
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\6.019e7b7b.chunk[1].js
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\31.2600842d.chunk[1].js
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\29.311631dd.chunk[1].js
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\23.738d9a9e.chunk[1].css
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\23.2804f1ff.chunk[1].js
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\21.4843ee2f.chunk[1].js
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\2.50a783f4.chunk[1].js
exported SGML document, ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\css_uYigEX2tKi-Kji7W2Es10azyq24mSHZ2RB9nCv02jqQ[1].css
troff or preprocessor input, ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\13.791e3434.chunk[1].js
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\1.4490b44b.chunk[1].css
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\1.3a7ff83a.chunk[1].js
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\History\History.IE5\mms\RUGGKGH3\notification.d46d7db1[1].dat
data
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\imagestore\ynfz0jx\imagestore.dat
data
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{EC831CBF-1A52-11EB-90E4-ECF4BB862DED}.dat
Microsoft Word Document
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{E60B2B9C-1A52-11EB-90E4-ECF4BB862DED}.dat
Microsoft Word Document
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{E60B2B9A-1A52-11EB-90E4-ECF4BB862DED}.dat
Microsoft Word Document
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\DOMStore\Y55KGTZJ\vars.hotjar[1].xml
ASCII text, with no line terminators
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\DOMStore\ILFO2NK3\www.box[1].xml
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\DOMStore\7PFAG8MT\app.box[1].xml
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\main~493df0b3.814e8452.chunk[1].js
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\visitWebPage[1].txt
ASCII text, with no line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\vendors~app.272bfe9505[1].js
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\tether.min[1].js
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\shared-file.bd0ef55b09[1].js
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\section_templ_webviews_login_login-qLN069[1].css
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\section_templ_webviews_login_login-I6JDlC[1].js
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\pricing[1].htm
HTML document, UTF-8 Unicode text, with very long lines, with CRLF, LF line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\pdf.worker.min[1].js
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\munchkin[1].js
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\memnYaGs126MiZpBA-UFUKWiUNhrIqU[1].woff
Web Open Font Format, TrueType, length 17452, version 1.1
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\mem5YaGs126MiZpBA-UNirkOUuhv[1].woff
Web Open Font Format, TrueType, length 18696, version 1.1
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\mem5YaGs126MiZpBA-UN7rgOUuhv[1].woff
Web Open Font Format, TrueType, length 18900, version 1.1
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\DOMStore\634TOY70\account.box[1].xml
ASCII text, with no line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\mail[1].png
PNG image data, 100 x 87, 8-bit colormap, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\lang-en-US.e30f8df855[1].js
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\lang-en-AU~lang-en-CA~lang-en-GB~lang-en-US~lang-en-x-pseudo.57dba5f597[1].js
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\ip[1].js
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\individual[1].htm
HTML document, UTF-8 Unicode text, with very long lines, with CR, LF line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\iframe_api[1].js
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\icons-circle-sprite[1].svg
SVG Scalable Vector Graphics image
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\hotjar-852435[1].js
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\favicon-32x32-VwW37b[1].png
PNG image data, 32 x 32, 8-bit colormap, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\exif.min[1].js
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\dest5[1].htm
HTML document, ASCII text, with very long lines
#