flash

https://pendingdelivery348scnpf.s3.eu-de.cloud-object-storage.appdomain.cloud/%2540%2523%2524%2525%255E%2526%2526()(%2526%2526%255E%255E%2525%2525%2524%2524%2524%2523%2523.html#ventura.coelho@novobanco.pt

Status: finished
Submission Time: 08.04.2021 10:45:27
Malicious
Phishing
HTMLPhisher

Comments

Tags

Details

  • Analysis ID:
    383844
  • API (Web) ID:
    669798
  • Analysis Started:
    08.04.2021 10:59:03
  • Analysis Finished:
    08.04.2021 11:02:56
  • Technologies:
Full Report Management Report IOC Report Engine Info Verdict Score Reports

System: Windows 10 64 bit v1803 with Office Professional Plus 2016, Chrome 85, IE 11, Adobe Reader DC 19, Java 8 Update 211

malicious
64/100

malicious

IPs

IP Country Detection
104.18.10.207
United States
13.32.25.101
United States
104.16.18.94
United States
Click to see the 1 hidden entries
158.177.118.97
United States

Domains

Name IP Detection
stackpath.bootstrapcdn.com
104.18.10.207
d26p066pn2w0s0.cloudfront.net
13.32.25.101
cdnjs.cloudflare.com
104.16.18.94
Click to see the 8 hidden entries
maxcdn.bootstrapcdn.com
104.18.10.207
s3.eu-de.cloud-object-storage.appdomain.cloud
158.177.118.97
ka-f.fontawesome.com
0.0.0.0
code.jquery.com
0.0.0.0
cdn.jsdelivr.net
0.0.0.0
pendingdelivery348scnpf.s3.eu-de.cloud-object-storage.appdomain.cloud
0.0.0.0
kit.fontawesome.com
0.0.0.0
logo.clearbit.com
0.0.0.0

URLs

Name Detection
https://pendingdelivery348scnpf.s3.eu-de.cloud-object-storage.appdomain.cloud/%2540%2523%2524%2525%255E%2526%2526()(%2526%2526%255E%255E%2525%2525%2524%2524%2524%2523%2523.html#
https://pendingdelivery348scnpf.s3.eu-de.cloud-object-storage.appdomain.cloud/%2540%2523%2524%2525%255E%2526%2526()(%2526%2526%255E%255E%2525%2525%2524%2524%2524%2523%2523.html#ventura.coelho@novobanco.pt
https://www.jsdelivr.com/using-sri-with-dynamic-files
Click to see the 22 hidden entries
https://code.jquery.com/jquery-3.1.1.min.js
https://pendingdelivery348scnpf.s3.eu-de.cloud-object-storage.appdomain.cloud/%2540%2523%2524%2525%2
http://s3.amazonaws.com/doc/2006-03-01/
https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/js/bootstrap.min.js
https://getbootstrap.com/)
https://fontawesome.comhttps://fontawesome.comFont
https://code.jquery.com/jquery-3.3.1.js
https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/css/bootstrap.min.css
https://fontawesome.com/license/free
https://fontawesome.com
https://kit.fontawesome.com
https://github.com/twbs/bootstrap/graphs/contributors)
https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js
https://getbootstrap.com)
http://getbootstrap.com)
https://cdn.jsdelivr.net/npm/jquery.session
https://github.com/twbs/bootstrap/blob/master/LICENSE)
http://opensource.org/licenses/MIT).
https://kit.fontawesome.com/585b051251.js
https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js
https://ka-f.fontawesome.com
https://code.jquery.com/jquery-3.2.1.slim.min.js

Dropped files

Name File Type Hashes Detection
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{CA75C6AA-9848-11EB-90EB-ECF4BBEA1588}.dat
Microsoft Word Document
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{CA75C6AC-9848-11EB-90EB-ECF4BBEA1588}.dat
Microsoft Word Document
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{CA75C6AD-9848-11EB-90EB-ECF4BBEA1588}.dat
Microsoft Word Document
#
Click to see the 19 hidden entries
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\%2540%2523%2524%2525%255E%2526%2526()(%2526%2526%255E%255E%2525%2525%2524%2524%2524%2523%2523[1].htm
HTML document, UTF-8 Unicode (with BOM) text, with very long lines, with CRLF line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\585b051251[1].js
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\free-fa-regular-400[1].eot
Embedded OpenType (EOT), Font Awesome 5 Free Regular family
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\2WF3MMUU\popper.min[1].js
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\css[1].css
ASCII text
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\free-v4-shims.min[1].css
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\free.min[1].css
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\jquery.min[1].js
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\9026IKNJ\novobanco[1].png
PNG image data, 128 x 25, 8-bit/color RGBA, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\0D32LFUH.xml
XML 1.0 document, ASCII text, with very long lines, with no line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\bootstrap.min[1].js
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\free-fa-solid-900[1].eot
Embedded OpenType (EOT), Font Awesome 5 Free Solid family
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\CS6IXJW6\jquery.session.min[1].js
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\bootstrap.min[1].js
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\jquery-3.1.1.min[1].js
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\OR0WKIO1\jquery-3.2.1.slim.min[1].js
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Temp\~DF17F6BCCB5E0E2F7E.TMP
data
#
C:\Users\user\AppData\Local\Temp\~DFABF45A6CBA8A246E.TMP
data
#
C:\Users\user\AppData\Local\Temp\~DFDAB3B5E6E07A4087.TMP
data
#