top title background image
flash

https://joom.ag/jSeI

Status: finished
Submission Time: 2021-03-04 22:48:46 +01:00
Malicious
Phishing
HTMLPhisher

Comments

Tags

Details

  • Analysis ID:
    363595
  • API (Web) ID:
    629244
  • Analysis Started:
    2021-03-04 22:48:46 +01:00
  • Analysis Finished:
    2021-03-04 22:52:18 +01:00
  • Technologies:

Joe Sandbox

Engine Download Report Detection Info
malicious
Score: 80
System: Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01

Third Party Analysis Engines

malicious

IPs

IP Country Detection
108.177.15.154
United States
209.95.50.25
United States
151.101.194.217
United States
Click to see the 5 hidden entries
92.38.171.82
Austria
172.217.22.227
United States
104.16.18.94
United States
209.95.50.27
United States
107.182.226.40
United States

Domains

Name IP Detection
use.typekit.net
0.0.0.0
bam-cell.nr-data.net
0.0.0.0
view.joomag.com
0.0.0.0
Click to see the 18 hidden entries
code.jquery.com
0.0.0.0
p.typekit.net
0.0.0.0
stats.g.doubleclick.net
0.0.0.0
s9cdn.joomag.com
0.0.0.0
maxcdn.bootstrapcdn.com
0.0.0.0
js-agent.newrelic.com
0.0.0.0
kit.fontawesome.com
0.0.0.0
ka-f.fontawesome.com
0.0.0.0
lb.joomag.com
209.95.50.27
www.joomag.com
0.0.0.0
joom.ag
209.95.50.27
an3.joomag.com
209.95.50.25
s9.joomag.com
107.182.226.40
calfvessel.com
92.38.171.82
www.google.co.uk
172.217.22.227
cdnjs.cloudflare.com
104.16.18.94
stats.l.doubleclick.net
108.177.15.154
browser.sentry-cdn.com
151.101.194.217

URLs

Name Detection
https://calfvessel.com/file/adobe/91789001614882763?short&BG
https://calfvessel.com/file/adobe/
https://view.joomjoomag.com/sharefile/0291789001614882763?short&
Click to see the 66 hidden entries
https://login.microsoftonline.com/common/login
https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js
https://use.typekit.net/af/1eef01/0000000000000000000148ac/23/
https://kit.fontawesome.com
https://use.typekit.net/af/3d81f6/0000000000000000000148a2/23/
https://use.typekit.net/af/bc719c/00000000000000000001499c/23/
https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/css/bootstrap.min.css
https://code.jquery.com/jquery-3.3.1.js
https://cct.google/taggy/agent.js
https://www.joomag.com/Frontend/mobile/viewer/favicon.ico
https://use.typekit.net/af/42fca5/0000000000000000000148a4/23/
https://calfvessel.com
https://view.joomag.co
https://code.jquery.com/jquery-3.1.1.min.js
https://www.joomag.com/Frontend/mobile/viewer/styles/main.867208e99122488d74f9a620279f9cd9.css
https://s9cdn.joomag.com/res_mag/1/1702/1702695/2420210/thumbs/spread/0.jpg?1614889819
https://getbootstrap.com)
http://ianlunn.github.io/Hover/)
https://p.typekit.net/p.gif
https://www.google.%/ads/ga-audiences
https://browser.sentry-cdn.com/5.11.2/bundle.min.js
http://ianlunn.co.uk/
http://typekit.com/eulas/0000000000000000000148ac
https://github.com/twbs/bootstrap/blob/master/LICENSE)
https://github.com/IanLunn/Hover
http://typekit.com/eulas/00000000000000000001499c
https://s9cdn.joomag.com/res_mag/1/1702/1702695/2420210/thumbs/58582055.jpg?1614889819
https://www.joomag.com/Frontend/WebService/getThumbnailSocial.php?mID=2420210&spread=0&width=500&161
https://view.joomRoot
https://dme0ih8comzn4.cloudfront.net/imaging/v3/editor.js
https://www.joomag.com/static/js/magazine.js?_=5.1.6.0
https://www.joomag.com/Frontend/mobile/viewer/normalize.d0dfb984f88d0dbb9fde.js
https://www.joomag.com/Frontend/mobile/viewer/
https://view.Root
https://fontawesome.com
https://fontawesome.com/license/free
http://typekit.com/eulas/0000000000000000000148a2
https://view.joomag.com/sharefile/0291789001614882763?short&BG
http://typekit.com/eulas/0000000000000000000148a4
http://typekit.com/eulas/0000000000000000000148a6
https://view.joomag.com/sharefile/0291789001614882763?short&
https://github.com/twbs/bootstrap/graphs/contributors)
http://typekit.com/eulas/0000000000000000000148a0
https://www.youtube.com/embed/
https://www.joomag.com/Frontend/WebService/getThumbnailSocial.php?mID=2420210&spread=0&1614889819
https://code.jquery.com/jquery-3.2.1.slim.min.js
https://ka-f.fontawesome.com
https://view.joomm/sharefile/0291789001614882763?short&Root
https://view.joomag.com/sharefile/0291789001614882763?short&Root
https://use.typekit.net/af/3ba24d/0000000000000000000148a0/23/
https://www.joomag.com/Frontend/mobile/viewer/main.2813cfbe59a2f8c75923.js
https://www.joomag.com/static/css/html5-viewer-external.css?_=5.1.6.0
https://github.com/getsentry/sentry-javascript
https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js
https://kit.fontawesome.com/585b051251.js
http://opensource.org/licenses/MIT).
https://stats.g.doubleclick.net/j/collect
https://www.joomag.com/Frontend/mobile/viewer/manifest.8e10809dba1c553a5a2a.js
https://player.vimeo.com/video/
https://www.joomag.com/Frontend/pixel/joomag-pixel.3df7f73f177625835141.js
https://www.joomag.com/Frontend/mobile/viewer/vendor.7bc4df7aaac8424047c3.js
https://vimeo.com/api/oembed.json?url=
https://view.joom/file/adobe/91789001614882763?short&Root
https://www.joomag.com/res_mag/logos/2420210.PNG?1614882780
https://view.joomag.com/sharefile/0291789001614882763?short&
https://use.typekit.net/af/e0b8be/0000000000000000000148a6/23/

Dropped files

Name File Type Hashes Detection
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\adobe[1].htm
HTML document, UTF-8 Unicode (with BOM) text, with CRLF line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\d[1]
Web Open Font Format, TrueType, length 58272, version 0.0
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\analytics[1].js
ASCII text, with very long lines
#
Click to see the 56 hidden entries
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\css[1].css
ASCII text
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\en[1].js
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\free-v4-shims.min[1].css
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\free.min[1].css
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\html5-viewer-external[1].css
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\joomag-pixel.3df7f73f177625835141[1].js
UTF-8 Unicode text, with very long lines, with LF, NEL line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\magazine[1].js
HTML document, ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\main.2813cfbe59a2f8c75923[1].js
UTF-8 Unicode text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\main.867208e99122488d74f9a620279f9cd9[1].css
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\popper.min[1].js
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\vendor.7bc4df7aaac8424047c3[1].js
HTML document, UTF-8 Unicode text, with very long lines, with no line terminators, with escape sequences
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\0_3-0[1].svg
SVG Scalable Vector Graphics image
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\adobe[1].jpg
JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 400x400, frames 3
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\outlook1[1].png
PNG image data, 26 x 26, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\d[2]
Web Open Font Format, TrueType, length 55916, version 0.0
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\e2270d116b[1].gif
GIF image data, version 89a, 1 x 1
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\hover[1].css
ASCII text
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\jquery-3.1.1.min[1].js
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\jquery-3.2.1.slim.min[1].js
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\loader[1].gif
GIF image data, version 89a, 78 x 78
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\manifest.8e10809dba1c553a5a2a[1].js
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\normalize.d0dfb984f88d0dbb9fde[1].js
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\ping[1].htm
ASCII text, with no line terminators
#
C:\Users\user\AppData\Local\Temp\~DF9697AB0B8A418A42.TMP
data
#
C:\Users\user\AppData\Local\Temp\~DFA3DE0DB72D585233.TMP
data
#
C:\Users\user\AppData\Local\Temp\~DFF8E1FCFAEB5B2E87.TMP
data
#
C:\Users\user\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\settings.sxx
data
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\other1[1].png
PNG image data, 190 x 187, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{7E770D03-7D33-11EB-90EB-ECF4BBEA1588}.dat
Microsoft Word Document
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{7E770D05-7D33-11EB-90EB-ECF4BBEA1588}.dat
Microsoft Word Document
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{84EB8697-7D33-11EB-90EB-ECF4BBEA1588}.dat
Microsoft Word Document
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\imagestore\gee00pr\imagestore.dat
data
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\0291789001614882763[1].htm
HTML document, ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\15.70ea2a8c03ea7ff25ab5[1].js
HTML document, UTF-8 Unicode text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\bootstrap.min[1].css
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\bootstrap.min[1].js
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\bundle.min[1].js
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\e2270d116b[1].js
ASCII text, with no line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\favicon[1].ico
PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\jquery.min[1].js
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\nr-1198.min[1].js
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\olb8zpk[1].js
UTF-8 Unicode text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\8[1].jpg
[TIFF image data, big-endian, direntries=12, height=709, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=1200], baseline, precision 8, 1200x646, frames 3
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\p[1].gif
GIF image data, version 89a, 1 x 1
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\2420210[1].png
PNG image data, 180 x 45, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\585b051251[1].js
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\d[1]
Web Open Font Format, TrueType, length 59940, version 0.0
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\d[2]
Web Open Font Format, TrueType, length 60240, version 0.0
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\d[3]
Web Open Font Format, TrueType, length 61612, version 0.0
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\d[4]
Web Open Font Format, TrueType, length 61728, version 0.0
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\gmail[1].png
PNG image data, 1280 x 1280, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\gtm[1].js
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\main-sprite[1].png
PNG image data, 246 x 2285, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\main[1].svg
SVG Scalable Vector Graphics image
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\office3651[1].png
PNG image data, 187 x 188, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\DOMStore\E5F0NRSV\view.joomag[1].xml
ASCII text, with very long lines, with no line terminators
#