flash

https://nliwierfrf.gb.net/xcvbn/?sicmalsnj3f3=83djnskjac4fr#gladhjef@wcps.k12.md.us

Status: finished
Submission Time: 22.02.2021 14:36:42
Malicious
Phishing
HTMLPhisher

Comments

Tags

Details

  • Analysis ID:
    356081
  • API (Web) ID:
    614148
  • Analysis Started:
    22.02.2021 14:36:43
  • Analysis Finished:
    22.02.2021 14:40:33
  • Technologies:
Full Report Management Report IOC Report Engine Info Verdict Score Reports
New

System: Windows 10 64 bit v1803 with Office Professional Plus 2016, Chrome 85, IE 11, Adobe Reader DC 19, Java 8 Update 211

malicious
72/100

malicious
6/79

malicious

malicious

IPs

IP Country Detection
104.129.25.9
United States
35.214.201.112
United States
104.16.18.94
United States

Domains

Name IP Detection
nliwierfrf.gb.net
104.129.25.9
www.politikesgeuseis.gr
35.214.201.112
cdnjs.cloudflare.com
104.16.18.94
Click to see the 5 hidden entries
stackpath.bootstrapcdn.com
0.0.0.0
ka-f.fontawesome.com
0.0.0.0
code.jquery.com
0.0.0.0
kit.fontawesome.com
0.0.0.0
maxcdn.bootstrapcdn.com
0.0.0.0

URLs

Name Detection
https://nliwierfrf.gb.net/xcvbn/QXNpYQ==22-02-202101-37-31pm3803fe4e995ba53820d5309dd609ff4d2cc7b4d82702293091209e3ad38ed14aMzRRc1FBNzZlcWdkRjlZVUVzPQ==UGFraXN0YW4=VUVzPQ==34QsQA76eqgdF9Y/?Key=QXNpYQ==22-02-202101-37-31pm3803fe4e995ba53820d5309dd609ff4d2cc7b4d82702293091209e3ad38ed14aMzRRc1FBNzZlcWdkRjlZVUVzPQ==UGFraXN0YW4=VUVzPQ==34QsQA76eqgdF9Y&rand=13InboxLightaspxn_QXNpYQ==22-02-202101-37-31pm3803fe4e995ba53820d5309dd609ff4d2cc7b4d82702293091209e3ad38ed14aMzRRc1FBNzZlcWdkRjlZVUVzPQ==UGFraXN0YW4=VUVzPQ==34QsQA76eqgdF9Y_MzRRc1FBNzZlcWdkRjlZ-&d7410d2ca94e005b22cf0a37c379149e2f2aab88fd8c965f38f02b4abdc333f4#gladhjef@wcps.k12.md.us
https://nliwierfrf.gb.net/xcvbn/?sicmalsnj3f3=83djnskjac4fr#gladhjef
https://nliwierfrf.gb.net/xcvbn/?sicmalsnj3f3=83djnskjac4fr
Click to see the 26 hidden entries
https://www.politikesgeuseis.gr/cricl/oauth/site/service/demp.php?email=info@dell.com#
https://nliwierfrf.gb.net/xcvbn/QXNpYQ==22-02-202101-37-31pm3803fe4e995ba53820d5309dd609ff4d2cc7b4d8
https://nliwierfrf.gb.net/xcvbn/QXNpYQ==22-02-202101-37-31pm3803fe4e995ba53820d5309dd609ff4d2c
https://code.jquery.com/jquery-3.3.1.js
https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/css/bootstrap.min.css
https://fontawesome.com/license/free
http://fontawesome.io/license
https://fontawesome.com
https://kit.fontawesome.com
https://www.politikesgeuseis.gr/cricl/oauth/site/service/demp.php?email=info
https://github.com/twbs/bootstrap/graphs/contributors)
https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js
https://getbootstrap.com)
http://getbootstrap.com)
https://github.com/twbs/bootstrap/blob/master/LICENSE)
http://opensource.org/licenses/MIT).
https://kit.fontawesome.com/585b051251.js
https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js
http://fontawesome.io
https://ka-f.fontawesome.com
https://code.jquery.com/jquery-3.2.1.slim.min.js
https://code.jquery.com/jquery-3.1.1.min.js
https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/js/bootstrap.min.js
https://getbootstrap.com/)
https://fontawesome.comhttps://fontawesome.comFont
https://biffyeager.ru/bschbvdskchbeds3feb/next.php

Dropped files

Name File Type Hashes Detection
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0MX4YUS9\QXNpYQ==22-02-202101-37-31pm3803fe4e995ba53820d5309dd609ff4d2cc7b4d82702293091209e3ad38ed14aMzRRc1FBNzZlcWdkRjlZVUVzPQ==UGFraXN0YW4=VUVzPQ==34QsQA76eqgdF9Y[1].htm
HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{8A4D8B87-755E-11EB-90E6-ECF4BB82F7E0}.dat
Microsoft Word Document
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{8A4D8B89-755E-11EB-90E6-ECF4BB82F7E0}.dat
Microsoft Word Document
#
Click to see the 28 hidden entries
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{912F7419-755E-11EB-90E6-ECF4BB82F7E0}.dat
Microsoft Word Document
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\imagestore\po60zt0\imagestore.dat
data
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0MX4YUS9\bootstrap.min[1].js
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0MX4YUS9\bootstrap.min[2].js
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0MX4YUS9\css[1].css
ASCII text
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0MX4YUS9\font-awesome.min[1].css
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2K7JPOQS\bootstrap.min[1].css
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2K7JPOQS\css[1].css
ASCII text
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2K7JPOQS\free-fa-regular-400[1].eot
Embedded OpenType (EOT), Font Awesome 5 Free Regular family
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2K7JPOQS\free-fa-solid-900[1].eot
Embedded OpenType (EOT), Font Awesome 5 Free Solid family
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2K7JPOQS\jquery.min[1].js
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6M6D1PMD\QXNpYQ==22-02-202101-37-31pm3803fe4e995ba53820d5309dd609ff4d2cc7b4d82702293091209e3ad38ed14aMzRRc1FBNzZlcWdkRjlZVUVzPQ==UGFraXN0YW4=VUVzPQ==34QsQA76eqgdF9Y[1].htm
HTML document, ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6M6D1PMD\favicons[1].png
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6M6D1PMD\free-v4-shims.min[1].css
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6M6D1PMD\free.min[1].css
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6M6D1PMD\mem5YaGs126MiZpBA-UN7rgOUuhv[1].woff
Web Open Font Format, TrueType, length 18900, version 1.1
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6M6D1PMD\popper.min[1].js
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\6M6D1PMD\xcvbn[1].htm
HTML document, ASCII text
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\VAHFWDJC\585b051251[1].js
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\VAHFWDJC\KFOlCnqEu92Fr1MmWUlfBBc-[1].woff
Web Open Font Format, TrueType, length 20356, version 1.1
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\VAHFWDJC\KFOmCnqEu92Fr1Mu4mxM[1].woff
Web Open Font Format, TrueType, length 20268, version 1.1
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\VAHFWDJC\favicons[1].png
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\VAHFWDJC\jquery-3.1.1.min[1].js
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\VAHFWDJC\jquery-3.2.1.slim.min[1].js
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\VAHFWDJC\mem8YaGs126MiZpBA-UFVZ0d[1].woff
Web Open Font Format, TrueType, length 18100, version 1.1
#
C:\Users\user\AppData\Local\Temp\~DF005E3F5BF1EF3E95.TMP
data
#
C:\Users\user\AppData\Local\Temp\~DF2961C22C6FC71983.TMP
data
#
C:\Users\user\AppData\Local\Temp\~DFD481E1B3B9292EBF.TMP
data
#