flash

http://microsoftonlineofficeteam.weebly.com

Status: finished
Submission Time: 20.11.2020 19:45:31
Malicious
Phishing
HTMLPhisher

Comments

Tags

Details

  • Analysis ID:
    321294
  • API (Web) ID:
    544391
  • Analysis Started:
    20.11.2020 19:45:32
  • Analysis Finished:
    20.11.2020 19:49:07
  • Technologies:
Full Report Management Report Engine Info Verdict Score Reports

System: Windows 10 64 bit v1803 with Office Professional Plus 2016, Chrome 85, IE 11, Adobe Reader DC 19, Java 8 Update 211

malicious
52/100

IPs

IP Country Detection
35.158.107.63
United States
151.101.1.46
United States
35.163.165.143
United States
Click to see the 1 hidden entries
199.34.228.54
United States

Domains

Name IP Detection
pages-wildcard.weebly.com
199.34.228.54
sp-2020021412301152490000000a-1069308460.us-west-2.elb.amazonaws.com
35.163.165.143
weebly.map.fastly.net
151.101.1.46
Click to see the 5 hidden entries
youronlinechoices.eu
35.158.107.63
ec.editmysite.com
0.0.0.0
www.youronlinechoices.eu
0.0.0.0
microsoftonlineofficeteam.weebly.com
0.0.0.0
cdn2.editmysite.com
0.0.0.0

URLs

Name Detection
https://microsoftonlineofficeteam.weebly.com/Root
https://www.youronlinechoices.eu/4Your
https://twitter.com/jacobrossi/status/480596438489890816
Click to see the 24 hidden entries
https://microsoftonlineofficeteam.weebly.com/favicon.ico
https://www.weebly.com/signup?utm_source=internal&utm_medium=footer
https://microsoftonlineofficeteam.weebly.com/uploads/1/3/4/9/134905392/click-image_orig.png
https://cdn2.editmysite.com/js/
https://microsoftonlineofficeteam.weebly.com/FOffice
https://www.youronlinechoices.eu/
http://hammerjs.github.io/
https://github.com/snowplow/snowplow-javascript-tracker/blob/2.6.2/src/js/tracker.js#L1509
https://microsoftonlineofficeteam.weebly.com/Fchoices.eu/weebly.com/Root
https://www.youronlinechoices.eu/weebly.com/
https://microsoftonlineofficeteam.weebly.com/
https://microsoftonlineofficeteam.weebly.com/"
https://www.youronlinechoices.eu/
https://microsoftonlineofficeteam.weebly.com/
https://www.google.%/ads/ga-audiences?
https://stats.g.doubleclick.net/j/collect?
https://www.youronlinechoices.eu/favicon.ico~
https://microsoftonlineofficeteam.weebly.com/uploads/1/3/4/9/134905392/tiny_orig.png
https://www.youronlinechoices.eu/weebly.com/d
https://www.youronlineeofficeteam.weebly.com/
https://microsoftonlineofficeteam.weebly.com/uploads/1/3/4/9/134905392/office-logo_orig.png
https://yoc.edaa.eu/tpc/step2.js.php
http://microsoftonlineofficeteam.weebly.com/
https://microsoftonlineofficeteam.weebly.com/FRoot

Dropped files

Name File Type Hashes Detection
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\DOMStore\EE99FI2K\microsoftonlineofficeteam.weebly[1].xml
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{1C4F9818-2BAC-11EB-90E4-ECF4BB862DED}.dat
Microsoft Word Document
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{1C4F981A-2BAC-11EB-90E4-ECF4BB862DED}.dat
Microsoft Word Document
#
Click to see the 48 hidden entries
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{22594615-2BAC-11EB-90E4-ECF4BB862DED}.dat
Microsoft Word Document
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\imagestore\ynfz0jx\imagestore.dat
data
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\_base[1].css
ASCII text, with CRLF line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\api[1].js
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\bg[1].jpg
[TIFF image data, little-endian, direntries=0], baseline, precision 8, 1200x820, frames 3
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\css[1].css
ASCII text
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\favicon[1].ico
MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\favicon[2].ico
MS Windows icon resource - 1 icon, 16x16, 8 bits/pixel
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\main_style[1].css
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\plugins[1].js
ASCII text
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\recaptcha__en[1].js
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\snowday262[1].js
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\allbg[1].png
PNG image data, 800 x 600, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\fancybox[1].css
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\footer-toast-published-image-1[1].png
PNG image data, 199 x 97, 8-bit colormap, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\footerSignup[1].js
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\gdprscript[1].js
HTML document, ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\main-customer-accounts-site[1].js
UTF-8 Unicode text, with very long lines, with LF, NEL line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\main[1].js
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\sites[1].css
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\social-icons[1].css
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\stl[1].js
HTML document, UTF-8 Unicode text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\INS6GHRP.htm
HTML document, UTF-8 Unicode text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\_style[1].css
ASCII text, with CRLF line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\click-image_orig[1].png
PNG image data, 2809 x 427, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\css[1].css
ASCII text
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\free-footer-v3[1].css
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\ga[1].js
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\hashslider[1].js
ASCII text, with CRLF line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\hp-1[1].jpg
[TIFF image data, little-endian, direntries=0], baseline, precision 8, 350x226, frames 3
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\jquery-1.7.1.min[1].js
HTML document, UTF-8 Unicode text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\js[1].js
ASCII text, with CRLF line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\office-logo_orig[1].png
PNG image data, 724 x 482, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\optout_testpage[1].js
ASCII text
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\tiny_orig[1].png
PNG image data, 149 x 38, 8-bit/color RGB, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\OZpEg_xvsDZQL_LKIF7q4jP3zWj8[1].woff
Web Open Font Format, TrueType, length 47412, version 1.1
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\OZpbg_xvsDZQL_LKIF7q4jP_eE3vfqne[1].woff
Web Open Font Format, TrueType, length 49732, version 1.1
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\YRETO7NA.htm
HTML document, ASCII text, with very long lines, with CRLF, LF line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\css[1].css
ASCII text
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\custom[1].js
ASCII text
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\jquery.min[1].js
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\va9X4lja2NVIDdIAAoMR5MfuElaRB0zMj_bTDXDoiw[1].woff
Web Open Font Format, TrueType, length 32856, version 1.1
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\va9Z4lja2NVIDdIAAoMR5MfuElaRB0RyklrfPXo[1].woff
Web Open Font Format, TrueType, length 31536, version 1.1
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\va9a4lja2NVIDdIAAoMR5MfuElaRB0zMh0P2Hg[1].woff
Web Open Font Format, TrueType, length 34136, version 1.1
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\va9c4lja2NVIDdIAAoMR5MfuElaRB0zHt0k[1].woff
Web Open Font Format, TrueType, length 31580, version 1.1
#
C:\Users\user\AppData\Local\Temp\~DF6183A4918010BD9D.TMP
data
#
C:\Users\user\AppData\Local\Temp\~DF95679539DE16C271.TMP
data
#
C:\Users\user\AppData\Local\Temp\~DFAA861CDFA17B3544.TMP
data
#