top title background image
flash

receipt319.html

Status: finished
Submission Time: 2021-05-13 01:21:36 +02:00
Malicious
Phishing
Evader
HTMLPhisher

Comments

Tags

Details

  • Analysis ID:
    412851
  • API (Web) ID:
    780458
  • Analysis Started:
    2021-05-13 01:21:48 +02:00
  • Analysis Finished:
    2021-05-13 01:28:47 +02:00
  • MD5:
    2c2e3af2ecfca319e8848c1043b7bc35
  • SHA1:
    3ebe21a94454b1d2704377ef0aab769be50c31d2
  • SHA256:
    b80c548232c20ab1f8311f28661b5dba637df57e19cbb7f29a87c59fa294b635
  • Technologies:

Joe Sandbox

Engine Download Report Detection Info
malicious
Score: 64
System: Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01

IPs

IP Country Detection
188.125.72.139
United Kingdom
87.248.118.23
United Kingdom
212.82.100.140
United Kingdom

Domains

Name IP Detection
geo-atsv2.media.g03.yahoodns.net
188.125.72.139
udc-ats.media.g03.yahoodns.net
188.125.72.139
ds-ats.member.g02.yahoodns.net
212.82.100.140
Click to see the 6 hidden entries
edge.gycpi.b.yahoodns.net
87.248.118.23
s.yimg.com
0.0.0.0
udc.yahoo.com
0.0.0.0
eu.edit.yahoo.com
0.0.0.0
login.yahoo.com
0.0.0.0
geo.yahoo.com
0.0.0.0

URLs

Name Detection
file:///C:/Users/user/Desktop/receipt319.html
https://www.yahoo.com
https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Regular.woff2)
Click to see the 46 hidden entries
https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Black.woff)
https://s.yimg.com/wm/mbr/images/yahoo-favicon-img-v0.0.2.ico~
https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Light.woff2)
https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Italic.woff2)
https://www.verizonmedia.com/policies/us/en/verizonmedia/privacy/index.html
https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Semibold.woff2)
https://login.yahoo.com/account/create?specId=yidReg&altreg=0#yuhead-search
https://www.yahoo.com/
https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Light.eot);src:url(https://s.yimg.com/cv/ae/sp
https://s.yimg.com/wm/mbr/52e318e4b7eb24ab3105befa60106819f8864e34/bundle.js
https://mobileexchange.yahoo.com/dismiss
https://login.yahoo.com/?specId=yidreg&intl=us&done=https%3A%2F%2Fwww.yahoo.c
https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-ExtraLight.woff2)
https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-ExtraLight.woff)
https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Medium.woff)
https://s.yimg.com/wm/mbr/js/rapid-3.53.17.js
https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-ExtraBold.eot);src:url(https://s.yimg.com/cv/a
https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Bold.woff2)
https://s.yimg.com/rz/p/yahoo_frontpage_en-US_s_f_w_bestfit_frontpage_2x.png
https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Medium.woff2)
https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Regular.eot);src:url(https://s.yimg.com/cv/ae/
https://s.yimg.com/wm/mbr/images/yahoo-apple-touch-v0.0.2.png
https://s.yimg.com/rz/p/yahoo_frontpage_en-US_s_f_p_bestfit_frontpage_2x.png
https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Italic.woff)
https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Light.woff)
https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Regular.woff)
https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-ExtraLight.eot);src:url(https://s.yimg.com/cv/
https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Italic.eot);src:url(https://s.yimg.com/cv/ae/s
https://login.yahoo.com/account/create?specId=yidReg&altreg=0#yuhead-search
https://s.yimg.com/wm/mbr/52e318e4b7eb24ab3105befa60106819f8864e34/yahoo-main.css
https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Bold.woff)
https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Black.woff2)
https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Medium.eot);src:url(https://s.yimg.com/cv/ae/s
https://login.yahoo.com/account/create?specId=yidreg&intl=us&altreg=0&con
https://s.yimg.com/wm/mbr/images/yahoo-favicon-img-v0.0.2.ico
https://github.com/yui/pure/blob/master/LICENSE.md
https://login.yahoo.com/account/create?specId=yidReg&altreg=0
https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Semibold.eot);src:url(https://s.yimg.com/cv/ae
https://login.yahoo.com/
https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Semibold.woff)
https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Bold.eot);src:url(https://s.yimg.com/cv/ae/spo
https://login.yahoo.co
https://www.verizonmedia.com/policies/us/en/verizonmedia/terms/otos/index.html
https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-Black.eot);src:url(https://s.yimg.com/cv/ae/sp
https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-ExtraBold.woff2)
https://s.yimg.com/cv/ae/sports/fonts/2017/Yahoo_Sans-ExtraBold.woff)

Dropped files

Name File Type Hashes Detection
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\jquery.min[1].js
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Temp\~DFDC14B9469AEC2819.TMP
data
#
C:\Users\user\AppData\Local\Temp\~DFB79DB137339A7974.TMP
data
#
Click to see the 15 hidden entries
C:\Users\user\AppData\Local\Temp\~DFAC985E6BE807E211.TMP
data
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\yahoo_frontpage_en-US_s_f_w_bestfit_frontpage_2x[1].png
PNG image data, 240 x 72, 8-bit colormap, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\yahoo-main[1].css
ASCII text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\create[1].htm
HTML document, UTF-8 Unicode text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\yahoo-favicon-img-v0.0.2[1].ico
MS Windows icon resource - 1 icon, 16x16, 8 bits/pixel
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\bundle[1].js
UTF-8 Unicode text, with very long lines
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\DOMStore\DURNCK2N\login.yahoo[1].xml
ASCII text, with no line terminators
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\fuji-spinner-dark-1.0.0[1].svg
SVG Scalable Vector Graphics image
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\fuji-spinner-1.0.1[1].svg
SVG Scalable Vector Graphics image
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\yahoo_frontpage_en-US_s_f_p_bestfit_frontpage_2x[1].png
PNG image data, 240 x 72, 8-bit colormap, non-interlaced
#
C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\rapid-3.53.17[1].js
data
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\imagestore\dikxvqf\imagestore.dat
data
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{5FF79C0A-B3C4-11EB-90E5-ECF4BB570DC9}.dat
Microsoft Word Document
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{5FF79C09-B3C4-11EB-90E5-ECF4BB570DC9}.dat
Microsoft Word Document
#
C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{5FF79C07-B3C4-11EB-90E5-ECF4BB570DC9}.dat
Microsoft Word Document
#