Files
|
File Path
|
Type
|
Category
|
Malicious
|
|
|---|---|---|---|---|
|
Fwd_ Payment_Confirmation.msg
|
CDFV2 Microsoft Outlook Message
|
initial sample
|
 |
|
|
C:\Users\alfredo\AppData\Local\Temp\Outlook Logging\OUTLOOK_16_0_13929_20386-20221129T1749280939-2572.etl
|
data
|
dropped
|
||
|
C:\Users\alfredo\AppData\Local\Temp\Outlook Logging\OUTLOOK_16_0_13929_20386-20221129T1750110559-2124.etl
|
data
|
dropped
|
Domains
|
Name
|
IP
|
Malicious
|
|
|---|---|---|---|
|
d26p066pn2w0s0.cloudfront.net
|
13.224.189.75
|
||
|
part-0017.t-0009.t-msedge.net
|
13.107.213.45
|
||
|
accounts.google.com
|
142.250.186.109
|
||
|
f8d5c6ccb462dad.cdd-ap.nexusguard.cloud
|
27.126.206.60
|
||
|
cdnjs.cloudflare.com
|
104.17.25.14
|
||
|
part-0017.t-0009.fbs1-t-msedge.net
|
13.107.219.45
|
||
|
maxcdn.bootstrapcdn.com
|
104.18.11.207
|
||
|
www.google.com
|
142.250.186.100
|
||
|
clients.l.google.com
|
142.250.185.206
|
||
|
use.fontawesome.com
|
unknown
|
||
|
clients2.google.com
|
unknown
|
||
|
code.jquery.com
|
unknown
|
||
|
30-11-vjwerg9-80eu5rht-0ghjwr-0gfhwe-0r98gf.obs.ap-southeast-1.myhuaweicloud.com
|
unknown
|
||
|
logo.clearbit.com
|
unknown
|
There are 4 hidden domains, click here to show them.
IPs
|
IP
|
Domain
|
Country
|
Malicious
|
|
|---|---|---|---|---|
|
142.250.185.67
|
unknown
|
United States
|
||
|
142.250.185.206
|
clients.l.google.com
|
United States
|
||
|
142.250.185.68
|
unknown
|
United States
|
||
|
34.104.35.123
|
unknown
|
United States
|
||
|
172.217.16.202
|
unknown
|
United States
|
||
|
192.168.2.1
|
unknown
|
unknown
|
||
|
216.58.212.138
|
unknown
|
United States
|
||
|
27.126.206.60
|
f8d5c6ccb462dad.cdd-ap.nexusguard.cloud
|
Hong Kong
|
||
|
142.250.186.163
|
unknown
|
United States
|
||
|
13.224.189.75
|
d26p066pn2w0s0.cloudfront.net
|
United States
|
||
|
104.18.11.207
|
maxcdn.bootstrapcdn.com
|
United States
|
||
|
69.16.175.42
|
unknown
|
United States
|
||
|
13.107.213.45
|
part-0017.t-0009.t-msedge.net
|
United States
|
||
|
142.250.186.109
|
accounts.google.com
|
United States
|
||
|
239.255.255.250
|
unknown
|
Reserved
|
||
|
172.64.132.15
|
unknown
|
United States
|
||
|
127.0.0.1
|
unknown
|
unknown
|
||
|
104.17.25.14
|
cdnjs.cloudflare.com
|
United States
|
||
|
142.250.184.202
|
unknown
|
United States
|
There are 9 hidden IPs, click here to show them.