https://goldberglaws.com/

Status: finished

Submission Time: 2021-05-04 17:35:33 +02:00

Malicious

Phishing

HTMLPhisher

Comments

Details

Analysis ID:
404084
API (Web) ID:
710321
Analysis Started:

2021-05-04 17:38:58 +02:00
Analysis Finished:

2021-05-04 17:43:17 +02:00
Technologies:

Engines
IOCs

Joe Sandbox

Engine	Download Report	Detection	Info
	Full Report Management Report IOC Report	malicious Score: 84	System: Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01

Third Party Analysis Engines

malicious

IPs

IP	Country	Detection
216.58.212.129	United States
104.18.11.207	United States
239.255.255.250	Reserved
Click to see the 2 hidden entries
40.76.138.32	United States
104.16.19.94	United States

Domains

Name	IP	Detection
cdnjs.cloudflare.com	104.16.19.94
maxcdn.bootstrapcdn.com	104.18.11.207
googlehosted.l.googleusercontent.com	216.58.212.129
Click to see the 6 hidden entries
goldberglaws.com	40.76.138.32
blobs.officehome.msocdn.com	0.0.0.0
clients2.googleusercontent.com	0.0.0.0
ka-f.fontawesome.com	0.0.0.0
code.jquery.com	0.0.0.0
kit.fontawesome.com	0.0.0.0

URLs

Name	Detection
https://goldberglaws.com//
https://goldberglaws.com/
https://goldberglaws.com/Onedrive
Click to see the 15 hidden entries
https://goldberglaws.com/Onedrive/
https://goldberglaws.com/
https://goldberglaws.com/-J
https://goldberglaws.com/2
https://code.jquery.com/jquery-3.2.1.slim.min.js
https://blobs.officehome.msocdn.com/images/content/images/favicon-8f211ea639.ico
https://code.jquery.com/jquery-3.1.1.min.js
https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js
https://clients2.googleusercontent.com
https://kit.fontawesome.com/585b051251.js
https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js
https://a.nel.cloudflare.com/report?s=aYNOt6dCbXuhZWlT6ppdhfwZ53Hbt%2F%2FF5toC4n0qRpWhxIwyY%2F%2B6%2
https://feedback.googleusercontent.com
https://a.nel.cloudflare.com/report?s=Qrt2Y3oUEU%2FA9jZUuyWr3QXfeBHWUn70Lrdf%2Fc51aXQ1hUfivhVgvU5Ct7
https://dns.google

Dropped files

Name	File Type	Hashes
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\LOG	ASCII text	#
C:\Users\user\AppData\Local\Temp\2aa01b41-85fd-4b42-b852-bae52ab28660.tmp	very short file (no magic)	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\bea3ef04-1513-4261-8e94-a5cae7121e41.tmp	ASCII text, with very long lines, with no line terminators	#
Click to see the 97 hidden entries
C:\Users\user\AppData\Local\Google\Chrome\User Data\Last Version	ASCII text, with no line terminators	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Last Browser	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\shared_proto_db\metadata\LOG	ASCII text	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\fa0a058b-8415-4622-814b-b8396fcd01bc.tmp	UTF-8 Unicode text, with very long lines, with no line terminators	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\e9e8287e-aa15-4bc2-9df8-b7e6a9043739.tmp	UTF-8 Unicode text, with very long lines, with no line terminators	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\data_reduction_proxy_leveldb\MANIFEST-000004	MPEG-4 LOAS	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\data_reduction_proxy_leveldb\LOG	ASCII text	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\data_reduction_proxy_leveldb\000004.dbtmp	ASCII text	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Visited Links	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\pkedcjkdefgpdelpbcmbmeomcjbeemfm\LOG	ASCII text	#
C:\Users\user\AppData\Local\Temp\9b4bd744-5b0b-4a06-b947-2bce36f5f741.tmp	very short file (no magic)	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\000003.log	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Session Storage\LOG	ASCII text	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Session Storage\000003.log	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Platform Notifications\LOG	ASCII text	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Local Storage\leveldb\LOG	ASCII text	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\GPUCache\data_1	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\97b4f9d4-bab1-4664-9472-59383c235807.tmp	ASCII text, with very long lines, with no line terminators	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Session Storage\LOG	ASCII text	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Session Storage\000003.log	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Platform Notifications\LOG	ASCII text	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Local Storage\leveldb\LOG	ASCII text	#
C:\Users\user\AppData\Local\Temp\scoped_dir4136_829614333\CRX_INSTALL\_locales\es\messages.json	UTF-8 Unicode text, with CRLF line terminators	#
C:\Users\user\AppData\Local\Temp\scoped_dir4136_829614333\CRX_INSTALL\_locales\ko\messages.json	UTF-8 Unicode text, with CRLF line terminators	#
C:\Users\user\AppData\Local\Temp\scoped_dir4136_829614333\CRX_INSTALL\_locales\ja\messages.json	UTF-8 Unicode text, with CRLF line terminators	#
C:\Users\user\AppData\Local\Temp\scoped_dir4136_829614333\CRX_INSTALL\_locales\it\messages.json	UTF-8 Unicode text, with CRLF line terminators	#
C:\Users\user\AppData\Local\Temp\scoped_dir4136_829614333\CRX_INSTALL\_locales\id\messages.json	ASCII text, with CRLF line terminators	#
C:\Users\user\AppData\Local\Temp\scoped_dir4136_829614333\CRX_INSTALL\_locales\hu\messages.json	UTF-8 Unicode text, with CRLF line terminators	#
C:\Users\user\AppData\Local\Temp\scoped_dir4136_829614333\CRX_INSTALL\_locales\hr\messages.json	UTF-8 Unicode text, with CRLF line terminators	#
C:\Users\user\AppData\Local\Temp\scoped_dir4136_829614333\CRX_INSTALL\_locales\hi\messages.json	UTF-8 Unicode text, with CRLF line terminators	#
C:\Users\user\AppData\Local\Temp\scoped_dir4136_829614333\CRX_INSTALL\_locales\fr\messages.json	UTF-8 Unicode text, with CRLF line terminators	#
C:\Users\user\AppData\Local\Temp\scoped_dir4136_829614333\CRX_INSTALL\_locales\fil\messages.json	ASCII text, with CRLF line terminators	#
C:\Users\user\AppData\Local\Temp\scoped_dir4136_829614333\CRX_INSTALL\_locales\fi\messages.json	UTF-8 Unicode text, with CRLF line terminators	#
C:\Users\user\AppData\Local\Temp\scoped_dir4136_829614333\CRX_INSTALL\_locales\et\messages.json	UTF-8 Unicode text, with CRLF line terminators	#
C:\Users\user\AppData\Local\Temp\scoped_dir4136_829614333\CRX_INSTALL\_locales\es_419\messages.json	UTF-8 Unicode text, with CRLF line terminators	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\GPUCache\data_1	data	#
C:\Users\user\AppData\Local\Temp\scoped_dir4136_829614333\CRX_INSTALL\_locales\en_GB\messages.json	ASCII text, with CRLF line terminators	#
C:\Users\user\AppData\Local\Temp\scoped_dir4136_829614333\CRX_INSTALL\_locales\en\messages.json	ASCII text, with CRLF line terminators	#
C:\Users\user\AppData\Local\Temp\scoped_dir4136_829614333\CRX_INSTALL\_locales\el\messages.json	UTF-8 Unicode text, with CRLF line terminators	#
C:\Users\user\AppData\Local\Temp\scoped_dir4136_829614333\CRX_INSTALL\_locales\de\messages.json	UTF-8 Unicode text, with CRLF line terminators	#
C:\Users\user\AppData\Local\Temp\scoped_dir4136_829614333\CRX_INSTALL\_locales\da\messages.json	UTF-8 Unicode text, with CRLF line terminators	#
C:\Users\user\AppData\Local\Temp\scoped_dir4136_829614333\CRX_INSTALL\_locales\cs\messages.json	UTF-8 Unicode text, with CRLF line terminators	#
C:\Users\user\AppData\Local\Temp\scoped_dir4136_829614333\CRX_INSTALL\_locales\ca\messages.json	UTF-8 Unicode text, with CRLF line terminators	#
C:\Users\user\AppData\Local\Temp\scoped_dir4136_829614333\CRX_INSTALL\_locales\bg\messages.json	UTF-8 Unicode text, with CRLF line terminators	#
C:\Users\user\AppData\Local\Temp\d378f643-127b-4dee-ac81-0674b20b08f0.tmp	Google Chrome extension, version 3	#
C:\Users\user\AppData\Local\Temp\c2b5b53e-d865-4be6-8387-7f90b579614c.tmp	Google Chrome extension, version 3	#
C:\Users\user\AppData\Local\Temp\browser-sslkeys.log	ASCII text	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\AutofillStrikeDatabase\LOG	ASCII text	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Current Session	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Cookies-journal	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Cookies	SQLite 3.x database, last written using SQLite version 3032001	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\temp-index	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\d500866a31b827d9_0	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\b2520ccc0a0a3903_0	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\adbf4030bbd380bd_0	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\a5405809f683b2b0_0	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\7bc2a1ab566f2cf6_0	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\4fec2c7937dd26f8_0	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\47388fd446fbc78a_0	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\BudgetDatabase\LOG	ASCII text	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Current Tabs	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\9dd22213-a0ee-4249-b435-d6b3632e2d73.tmp	UTF-8 Unicode text, with very long lines, with no line terminators	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\7ff1257a-4640-417f-9b9b-fc2d4042f0e0.tmp	very short file (no magic)	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\4f757f7c-4656-43a0-9a31-979c7d6c4430.tmp	ASCII text, with very long lines, with no line terminators	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\4da3fdb6-b569-4210-a000-d856e2a3030b.tmp	ASCII text, with very long lines, with no line terminators	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\29a25dad-a957-4f03-a9fb-156f95fb8da4.tmp	ASCII text, with very long lines, with no line terminators	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\0c9dbef5-8f6b-47c8-878e-512fb9a7b7f9.tmp	ASCII text, with very long lines, with no line terminators	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Crashpad\settings.dat	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\79002b7b-0872-4a71-8d4c-6d26cfcd773d.tmp	ASCII text, with very long lines, with no line terminators	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\70f4e063-4855-4491-8150-455cca753904.tmp	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\0a2061d3-756a-4398-8901-a5899948f04e.tmp	ASCII text, with very long lines, with no line terminators	#
C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\GCM Store\Encryption\LOG	ASCII text	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\38bff282-14fe-4d23-a7e5-280bc3a6d216.tmp	ASCII text, with very long lines, with no line terminators	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Site Characteristics Database\LOG	ASCII text	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Session Storage\LOG	ASCII text	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Session Storage\000003.log	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Reporting and NEL-journal	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Reporting and NEL	SQLite 3.x database, last written using SQLite version 3032001	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Platform Notifications\LOG	ASCII text	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Storage\leveldb\LOG	ASCII text	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Storage\leveldb\000003.log	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History-journal	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History Provider Cache	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History	SQLite 3.x database, last written using SQLite version 3032001	#
C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\77EC63BDA74BD0D0E0426DC8F8008506	Microsoft Cabinet archive data, 58596 bytes, 1 file	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\EventDB\LOG	ASCII text	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\AvailabilityDB\LOG	ASCII text	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\AvailabilityDB\000003.log	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Favicons-journal	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Favicons	SQLite 3.x database, last written using SQLite version 3032001	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm\8520.615.0.5_1\_metadata\computed_hashes.json	ASCII text, with very long lines, with no line terminators	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_metadata\computed_hashes.json	ASCII text, with very long lines, with no line terminators	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension State\LOG	ASCII text	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension State\000003.log	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension Rules\LOG	ASCII text	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension Rules\000003.log	data	#

https://goldberglaws.com/

Comments

Tags

Available tags:

Details

Joe Sandbox

Third Party Analysis Engines

IPs

Domains

URLs

Dropped files

https://goldberglaws.com/ Options

Comments

Tags

Available tags:

Details

Joe Sandbox

Third Party Analysis Engines

IPs

Domains

URLs

Dropped files

Search started

https://goldberglaws.com/