top title background image
flash

http://prize-winner-ko3d.live/?u=1nup806&o=0wywy2l&t=k2Dr

Status: finished
Submission Time: 2021-03-05 10:09:24 +01:00
Malicious
Phishing
HTMLPhisher

Comments

Tags

Details

  • Analysis ID:
    363751
  • API (Web) ID:
    629567
  • Analysis Started:
    2021-03-05 10:09:25 +01:00
  • Analysis Finished:
    2021-03-05 10:13:25 +01:00
  • Technologies:

Joe Sandbox

Engine Download Report Detection Info
malicious
Score: 64
System: Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01

Third Party Analysis Engines

malicious
Score: 7/84

IPs

IP Country Detection
5.8.47.58
Russian Federation
5.189.217.110
Russian Federation
185.50.248.46
Ukraine

Domains

Name IP Detection
prize-winner-ko3d.live
5.8.47.58
tdsjsext3.life
185.50.248.46
wondertrouble498goal.live
5.189.217.110

URLs

Name Detection
http://prize-winner-ko3d.live/?u=1nup806&o=0wywy2l&t=k2Dr
http://prize-winner-ko3d.live/media/mainstream/frame.html
http://prize-winner-ko3d.live/?u=1nup806&o=0wywy2l&t=k2DrRoot
Click to see the 9 hidden entries
http://prize-winner-ko3d.live/favicon.ico
https://wondertrouble498goal.live/lyxrxqcy/
https://github.com/twbs/bootstrap/blob/master/LICENSE)
https://wondertrouble43d.live/?u=1nup806&o=0wywy2l&t=k2Dr98goal.live/lyxrxqcy/?u=1nup806&o=0wywy2l&t
https://wondertro98goal.live/lyxrxqcy/u=1nup806&o=0wywy2l&t=k2Dr&f=1&sid=t4~xrile5icp0uydarybx1kpaml
https://wondertrouble498goal.live/lyxrxqcy/u=1nup806&o=0wywy2l&t=k2Dr&f=1&sid=t4~xrile5icp0uydarybx1
https://wondertrouble498goal.live/lyxrxqcy/?u=1nup806&o=0wywy2l&t=k2Dr&f=1&sid=t4~xrile5icp0uydarybx
https://wondertrouble498goal.live/lyxrxqcy/
http://getbootstrap.com)

Dropped files

Name File Type Hashes Detection
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\lyxrxqcy[1].htm
HTML document, UTF-8 Unicode (with BOM) text
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\ie[1].png
PNG image data, 245 x 241, 8-bit colormap, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\de-en[1].js
ASCII text, with very long lines, with no line terminators
#
Click to see the 39 hidden entries
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\img3[1].jpg
JPEG image data, baseline, precision 8, 50x50, frames 3
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\img4[1].jpg
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 50x50, frames 3
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\img5[1].jpg
JPEG image data, baseline, precision 8, 50x50, frames 3
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\img6[1].jpg
JPEG image data, baseline, precision 8, 50x50, frames 3
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\jquery.min[1].js
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\returnDate.de[1].js
UTF-8 Unicode text
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\LKJTJ3TX.htm
HTML document, ASCII text, with very long lines, with CRLF line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\bootstrap-mini[1].css
ASCII text, with very long lines, with CRLF line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\facebook-icons2[1].png
PNG image data, 23 x 766, 8-bit colormap, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\confetti[1].js
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\img10[1].jpg
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 48x48, frames 3
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\img1[1].jpg
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 50x50, frames 3
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\iphone11pro[1].png
PNG image data, 300 x 402, 8-bit colormap, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\logo2[1].js
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\WJ8I2OL4\logo_f01[1].png
PNG image data, 130 x 126, 8-bit colormap, non-interlaced
#
C:\Users\user\AppData\Local\Temp\~DF2F2006B451AD575F.TMP
data
#
C:\Users\user\AppData\Local\Temp\~DF42082C2DDAC0DDAF.TMP
data
#
C:\Users\user\AppData\Local\Temp\~DFB51B924042DA2D2E.TMP
data
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\bbms[1].js
ASCII text, with no line terminators
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{0567FCAD-7DDE-11EB-90E4-ECF4BB862DED}.dat
Microsoft Word Document
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{0BCFAB55-7DDE-11EB-90E4-ECF4BB862DED}.dat
Microsoft Word Document
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\comment[1].js
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\exit_ms[1].js
ASCII text, with very long lines, with CRLF line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\frame[1].htm
HTML document, ASCII text, with no line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\getextparams[1].json
UTF-8 Unicode text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\img11[1].jpg
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 50x50, frames 3
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\img7[1].jpg
JPEG image data, baseline, precision 8, 50x50, frames 3
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\logo1[1].js
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\0W10PBUV\utils-ms[1].js
ASCII text, with very long lines, with CRLF line terminators
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{0567FCAB-7DDE-11EB-90E4-ECF4BB862DED}.dat
Microsoft Word Document
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\font-awesome-mini[1].css
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\fontawesome-webfont[1].woff
Web Open Font Format, TrueType, length 44432, version 1.0
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\img2[1].jpg
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 50x50, frames 3
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\img8[1].jpg
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 50x50, frames 3
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\img9[1].jpg
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 50x50, frames 3
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\js.cookie6_pure[1].js
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\main-like[1].css
ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\MEEXW4H4\main2[1].js
ASCII text, with CRLF line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PSUEOSZZ\bootstrap.min[1].js
ASCII text, with very long lines
#