https://sandpapery-unsacredness.s3.us-east-2.amazonaws.com/cradleman/index.html

Status: finished

Submission Time: 2021-04-09 18:48:28 +02:00

Malicious

Phishing

HTMLPhisher

Comments

Details

Analysis ID:
384755
API (Web) ID:
671619
Analysis Started:

2021-04-09 18:48:28 +02:00
Analysis Finished:

2021-04-09 18:56:06 +02:00
Technologies:

Engines
IOCs

Joe Sandbox

Engine	Download Report	Detection	Info
	Full Report Management Report IOC Report	malicious Score: 60	System: Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01

Third Party Analysis Engines

malicious

IPs

IP	Country	Detection
52.219.101.106	United States
151.101.1.192	United States
239.255.255.250	Reserved
Click to see the 5 hidden entries
192.229.221.185	United States
172.217.168.33	United States
152.199.21.175	United States
15.237.76.117	United States
13.32.25.92	United States

Domains

Name	IP	Detection
aadcdn.msauth.net	0.0.0.0
acctcdn.msftauth.net	0.0.0.0
sandpapery-unsacredness.s3.us-east-2.amazonaws.com	0.0.0.0
Click to see the 22 hidden entries
lptag.liveperson.net	0.0.0.0
fpt.live.com	0.0.0.0
login.microsoftonline.com	0.0.0.0
publisher.liveperson.net	0.0.0.0
clients2.googleusercontent.com	0.0.0.0
mem.gfx.ms	0.0.0.0
static-assets.fs.liveperson.com	0.0.0.0
ajax.aspnetcdn.com	0.0.0.0
acctcdn.msauth.net	0.0.0.0
assets.onestore.ms	0.0.0.0
microsoftwindows.112.2o7.net	15.237.76.117
accdn.lpsnmedia.net	0.0.0.0
signup.live.com	0.0.0.0
consentreceiverfd-prod.azurefd.net	0.0.0.0
lpcdn.lpsnmedia.net	0.0.0.0
logincdn.msauth.net	0.0.0.0
googlehosted.l.googleusercontent.com	172.217.168.33
s3-r-w.us-east-2.amazonaws.com	52.219.101.106
liveperson.map.fastly.net	151.101.1.192
cs1227.wpc.alphacdn.net	192.229.221.185
dh1y47vf5ttia.cloudfront.net	13.32.25.92
sni1gl.wpc.alphacdn.net	152.199.21.175

URLs

Name	Detection
https://acctcdn.msauth.net/jquerypackage_1.10_5V7LAuc3bNAQx2QQfr1RPw2.js?v=1
https://fpt.live.com
https://ajax.aspnetcdn.com/
Click to see the 72 hidden entries
https://acctcdn.msauth.net/
https://acctcdn.msauth.net/oneds_Xr2D7Nex80v7A-8bxF8jgQ2.js?v=1aD
https://ajax.aspnetcdn.com/ajax/jQuery/jquery-1.7.2.min.jsaD
https://sandpapery-unsacredness.s3.us-east-2.amazonaws.com/cradleman/index.htmlSQLite
https://liveperson.net/$Q
https://sandpapery-unsacredness.s3.us-east-2.amazonaws.com/cradleman/login.html?swgrpacvwo=tCY3gtxz3
https://sandpapery-unsacredness.s3.us-east-2.amazonaws.com/cradleman/index.html
https://acctcdn.msauth.net/datarequestpackage_h-_7C7UzwdefXJT9njDBTQ2.jsa
https://ajax.aspnetcdn.com/ajax/jQuery/jquery-1.11.2.min.js
https://acctcdn.msauth.net/lightweightsignuppackage_HD5u0AbLsH5K38avjB7xTA2.js?v=1
https://acctcdn.msauth.net/knockout_3.3.0_X1BYS2jZMbi7hfUj8VuqFA2.js?v=1aD
https://publisher.liveperson.net/iframe-le-tag/iframe.html?lpsite=60270350&lpsection=store-sales-de-ch&buttons=lpChatService,lpChatSales
https://liveperson.net/
https://aadcdn.msauth.net/ests/2.1/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico
https://lpcdn.lpsnmedia.net
https://signup.live.com/
https://fpt.live.com/?session_id=b58882512b7c40d78c42f4d88f1affac&CustomerId=33e01921-4d64-4f8c-a055
https://live.com/m
https://lptag.liveperson.net/tag/tag.js?site=60270350
https://live.com/p
https://lptag.liveperson.net/lptag/api/account/60270350/configuration/applications/taglets/.jsonp?v=
https://feedback.googleusercontent.com
https://aadcdn.msauth.net
https://static-assets.fs.liveperson.com/microsoft/lp_ada_enhancements-prod.js
https://acctcdn.msauth.net/knockout_3.3.0_X1BYS2jZMbi7hfUj8VuqFA2.js?v=1a
https://live.com/ko
https://sandpapery-unsacredness.s3.us-east-2.amazonaws.com/
https://clients2.googleusercontent.com
https://acctcdn.msauth.net/datarequestpackage_h-_7C7UzwdefXJT9njDBTQ2.jsaD
https://acctcdn.msauth.net/images/favicon.ico?v=2
https://acctcdn.msauth.net/lwsignupstringscountrybirthdate_en-us_Hu9XQvsxbdtI5Cn8ywiXCA2.js?v=1
https://logincdn.msauth.net/16.000/content/js/MeControl_8fmFau_zfDGioPAajB3ICg2.js
https://live.com/r0
https://mem.gfx.ms/scripts/me/MeControl/10.21035.1/de-DE/meCore.min.js
https://acctcdn.msauth.net/lwsignupstringscountrybirthdate_en-gb_piBRJsXgxy0DAocfwbyzaQ2.js?v=1
https://acctcdn.msauth.net/lightweightsignuppackage_HD5u0AbLsH5K38avjB7xTA2.js?v=1aD
https://liveperson.net/P?
https://consentreceiverfd-prod.azurefd.net/v1
https://fpt.live.com/?session_id=0656ef1f3f31449c938682f87c100e08&CustomerId=33e01921-4d64-4f8c-a055
https://acctcdn.msauth.net/jquerypackage_1.10_5V7LAuc3bNAQx2QQfr1RPw2.js?v=1aD
https://sandpapery-unsacredness.s3.us-east-2.amazonaws.com/cradleman/index.htmlSign
https://publisher.liveperson.net/
https://lpcdn.lpsnmedia.net//
https://lpcdn.lpsnmedia.net(_https://lpcdn.lpsnmedia.net
https://acctcdn.msauth.net
https://ajax.aspnetcdn.com/ajax/jQuery/jquery-1.11.2.min.jsaD
https://signup.live.com
https://publisher.liveperson.net-_https://publisher.liveperson.net
https://portal.microsoftonline.com.orgid.com
https://sandpapery-unsacredness.s3.us-east-2.amazonaws.com/cradleman/index.html253d2057%2526response
https://accdn.lpsnmedia.net/api/account/60270350/configuration/setting/accountproperties/?cb=lpCb221
https://login.microsoftonline.com/
https://acctcdn.msauth.net/oneds_Xr2D7Nex80v7A-8bxF8jgQ2.js?v=1
https://sandpapery-unsacredness.s3.us-east-2.amazonaws.com/cradleman/index.htmljdMyW82C01JbUosSQzP-8
https://signup.live.com/signup#
https://acctcdn.msauth.net/jquerypackage_1.10_5V7LAuc3bNAQx2QQfr1RPw2.js?v=1a
https://acctcdn.msauth.net/datarequestpackage_h-_7C7UzwdefXJT9njDBTQ2.js
https://dns.google
https://mem.gfx.ms/meversion?partner=MSHomePage&market=de-ch&uhf=1
https://sandpapery-unsacredness.s3.us-east-2.amazonaws.com/cradleman/index.html2
https://publisher.liveperson.net
https://lpcdn.lpsnmedia.net/le_secure_storage/3.12.0.0-release_5037/storage.secure.min.html?loc=http
https://publisher.liveperson.net/iframe-le-tag/iframe.html?lpsite=60270350&lpsection=store-sales-de-
https://assets.onestore.ms/
https://live.com/
https://acctcdn.msauth.net/knockout_3.3.0_X1BYS2jZMbi7hfUj8VuqFA2.js?v=1
https://lpcdn.lpsnmedia.net/
https://accdn.lpsnmedia.net/api/account/60270350/configuration/le-campaigns/zones?fields=id&fields=z
https://login.microsoftonline.com
https://ajax.aspnetcdn.com/ajax/jQuery/jquery-1.7.2.min.js
https://sandpapery-unsacredness.s3.us-east-2.amazonaws.com
https://mem.gfx.ms/scripts/me/MeControl/10.21035.1/de-DE/meBoot.min.js

Dropped files

Name	File Type	Hashes
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\ff3254c380ce1732_0	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm\8520.615.0.5_1\_metadata\computed_hashes.json	ASCII text, with very long lines, with no line terminators	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_1\_metadata\computed_hashes.json	ASCII text, with very long lines, with no line terminators	#
Click to see the 97 hidden entries
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_metadata\computed_hashes.json	ASCII text, with very long lines, with no line terminators	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension State\LOG	ASCII text	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension State\000003.log	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension Rules\LOG	ASCII text	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension Rules\000003.log	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Current Tabs	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Current Session	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Cookies-journal	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Cookies	SQLite 3.x database, last written using SQLite version 3032001	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\temp-index	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Favicons	SQLite 3.x database, last written using SQLite version 3032001	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\f583bfa92cce0c9b_0	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\f46ad1d2652b0b43_0	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\f31034cd60667b7f_0	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\e4b9b26cef092fbf_0	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\e13566fd1f837090_0	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\dbd8c12c40a4d9e0_0	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\d87d9f144fbdb8cc_0	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\cfb5709fe74e1e20_0	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\ccadee8b0401689c_0	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\c77da56bd9ecc69a_0	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\b41d13ea9415b75f_0	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_lpcdn.lpsnmedia.net_0.indexeddb.leveldb\MANIFEST-000001	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Site Characteristics Database\LOG	ASCII text	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Session Storage\LOG	ASCII text	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Session Storage\000003.log	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Reporting and NEL-journal	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Reporting and NEL	SQLite 3.x database, last written using SQLite version 3032001	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\QuotaManager-journal	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\QuotaManager	SQLite 3.x database, last written using SQLite version 3032001	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Platform Notifications\LOG	ASCII text	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network Action Predictor-journal	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network Action Predictor	SQLite 3.x database, last written using SQLite version 3032001	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Storage\leveldb\LOG	ASCII text	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Storage\leveldb\000003.log	DOS executable (COM, 0x8C-variant)	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\a20f3426f1f7ca2e_0	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_lpcdn.lpsnmedia.net_0.indexeddb.leveldb\LOG	ASCII text	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_lpcdn.lpsnmedia.net_0.indexeddb.leveldb\000003.log	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\IndexedDB\https_lpcdn.lpsnmedia.net_0.indexeddb.leveldb\000001.dbtmp	ASCII text	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History-journal	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History Provider Cache	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History	SQLite 3.x database, last written using SQLite version 3032001	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\GCM Store\Encryption\LOG	ASCII text	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\EventDB\LOG	ASCII text	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\AvailabilityDB\LOG	ASCII text	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\AvailabilityDB\000003.log	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Favicons-journal	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\481ccd09-a39c-47ac-8136-3ecc4fa87294.tmp	ASCII text, with very long lines, with no line terminators	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\094e2d6bf2abec98_0	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\0481116f3cd8293f_0	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\00e9eabc0bc6d2eb_0	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\BudgetDatabase\LOG	ASCII text	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\AutofillStrikeDatabase\LOG	ASCII text	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\79022551-430d-460d-97c9-0f669ce018c5.tmp	ASCII text, with very long lines, with no line terminators	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\6e2aac61-3a70-4c70-8d35-a053fc4e09cf.tmp	ASCII text, with very long lines, with no line terminators	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\6b1cec1a-de8e-4fd0-bfff-49b83d1ffd96.tmp	ASCII text, with very long lines, with no line terminators	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\6901f892-f4be-46b6-bb89-9ea17e14508f.tmp	UTF-8 Unicode text, with very long lines, with no line terminators	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\67a0f943-0454-45f2-87d6-d0c144505f3a.tmp	UTF-8 Unicode text, with very long lines, with no line terminators	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\5d1e220a-e8cb-4e7b-ae4a-92a242b3936a.tmp	UTF-8 Unicode text, with very long lines, with no line terminators	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\54023f61-32c1-45a6-9353-17117b236f80.tmp	ASCII text, with very long lines, with no line terminators	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\1f5bc7e33396c524_0	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Crashpad\settings.dat	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\9f1cf166-1e1d-4f33-97f0-c719fb9a2599.tmp	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\7b12c750-f5d7-414a-a560-c243698c2f7f.tmp	ASCII text, with very long lines, with no line terminators	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\651dec66-fb79-4e15-be02-6dd391d53700.tmp	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\51028807-4ec8-4b30-ba48-dade0116492a.tmp	ASCII text, with very long lines, with no line terminators	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\4de28014-ce33-459f-a49b-e026f0f1eaa6.tmp	ASCII text, with very long lines, with no line terminators	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\4926e72d-f26e-4acc-b759-e1f223f1e1b2.tmp	ASCII text, with very long lines, with no line terminators	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\2d077e22-0314-4bbf-bfae-94d186f3c374.tmp	ASCII text, with very long lines, with no line terminators	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\0d03f8bc-70af-402b-86c3-189591354029.tmp	ASCII text, with very long lines, with no line terminators	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\0c5f5359-db85-4fe4-8be5-a2341b18c7a9.tmp	data	#
C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\54f9d5181c9e5945_0	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\9a5575bef7c495dc_0	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\8fdad95f34dd1d59_0	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\8f3c2e2c260a7099_0	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\83b9c3db1088f864_0	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\7e4cea594f77c74d_0	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\781980b07f1bb38f_0	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\72090e93af2b3d0c_0	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\6e2aa2cbfc56c1a0_0	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\6b848a87f40dd230_0	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\6686b0c92e7fc912_0	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\5fac85bbf020f3c0_0	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\59f8bbf14d4853fd_0	data	#
C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\77EC63BDA74BD0D0E0426DC8F8008506	Microsoft Cabinet archive data, 58596 bytes, 1 file	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\547db41b413d52f1_0	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\53f3e8d7e98883b8_0	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\4f3329f3f8204488_0	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\43fb384703621b6c_0	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\4278acc4333443e6_0	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\3b99dc3d3bc104fb_0	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\3302a32a41c40742_0	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\328b75cf02d95d5e_0	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\2ddbbf2cacbc4261_0	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\2b178dc788abedc5_0	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\22fb0e1969c285c1_0	data	#

https://sandpapery-unsacredness.s3.us-east-2.amazonaws.com/cradleman/index.html

Comments

Tags

Available tags:

Details

Joe Sandbox

Third Party Analysis Engines

IPs

Domains

URLs

Dropped files

https://sandpapery-unsacredness.s3.us-east-2.amazonaws.com/cradleman/index.html Options

Comments

Tags

Available tags:

Details

Joe Sandbox

Third Party Analysis Engines

IPs

Domains

URLs

Dropped files

Search started

https://sandpapery-unsacredness.s3.us-east-2.amazonaws.com/cradleman/index.html