https://share.sender.net/campaigns/2G8r/files

Status: finished

Submission Time: 2021-09-27 12:13:15 +02:00

Malicious

Phishing

HTMLPhisher

Comments

Details

Analysis ID:
491264
API (Web) ID:
858837
Analysis Started:

2021-09-27 12:14:51 +02:00
Analysis Finished:

2021-09-27 12:22:19 +02:00
Technologies:

Engines
IOCs

Joe Sandbox

Engine	Download Report	Detection	Info
	Full Report Management Report IOC Report	malicious Score: 92	System: Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01

Third Party Analysis Engines

malicious

IPs

IP	Country	Detection
172.67.68.172	United States
18.210.105.246	United States
216.58.215.227	United States
Click to see the 8 hidden entries
52.200.40.111	United States
172.217.168.1	United States
172.217.168.13	United States
104.26.13.112	United States
199.36.158.100	United States
104.18.11.207	United States
239.255.255.250	Reserved
104.16.19.94	United States

Domains

Name	IP	Detection
cdn.sender.net	104.26.13.112
gstaticadssl.l.google.com	216.58.215.227
accounts.google.com	172.217.168.13
Click to see the 13 hidden entries
cdnjs.cloudflare.com	104.16.19.94
maxcdn.bootstrapcdn.com	104.18.11.207
zippy-button-hyssop.glitch.me	18.210.105.246
clients.l.google.com	172.217.168.78
uiinlcuo37oed.web.app	199.36.158.100
share.sender.net	172.67.68.172
googlehosted.l.googleusercontent.com	172.217.168.1
outrageous-wide-railway.glitch.me	52.200.40.111
ka-f.fontawesome.com	0.0.0.0
kit.fontawesome.com	0.0.0.0
clients2.googleusercontent.com	0.0.0.0
clients2.google.com	0.0.0.0
code.jquery.com	0.0.0.0

URLs

Name	Detection
https://accounts.google.com/ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard
https://share.sender.net/campaigns/2G8r/%7B%24unsubscribe_link%7Dfiles..
https://kit.fontawesome.com/
Click to see the 72 hidden entries
https://a.nel.cloudflare.com/report/v3?s=Pol%2FhxGJFxNQfyp%2FaJTtJY0fs%2BAhRn36Mgp7t89m5h2oGdKQ0gn80
https://hangouts.google.com/
https://share.sender.net/campaigns/2G8r/files
https://share.sender.net/
https://code.jquery.com/
https://www.google.com;
https://payments.google.com/payments/v4/js/integrator.js
https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/css/bootstrap.min.css
https://code.jquery.com/jquery-3.1.1.min.js
https://share.sender.net/campaigns/2G8r/%7B%24unsubscribe_link%7Dfiles../
https://maxcdn.bootstrapcdn.com/
https://share.sender.net/campaigns/2G8r/filesfiles..
https://support.google.com/chromecast/troubleshooter/2995236
https://ogs.google.com
https://share.sender.net/campaigns/2G8r/files2
https://outrageous-wide-railway.glitch.me/W
https://share.sender.net/campaigns/2G8r/%7B%24unsubscribe_link%7D
https://clients2.google.com/service/update2/crx
https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.jsaD
https://feedback.googleusercontent.com
https://www.google.com/
https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.jsaD
https://csp.withgoogle.com/csp/report-to/IdentityListAccountsHttp/external
https://clients2.googleusercontent.com
https://outrageous-wide-railway.glitch.me/
https://support.google.com/chromecast/answer/2998456
https://dns.google
https://share.sender.net/campaigns/2G8r/%7B%24unsubscribe_link%7D
https://uiinlcuo37oed.web.app/gimecqp5nd39h98x6ymwebcuo461fka4mpo/adobe.jpg
https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js
https://zippy-button-hyssop.glitch.me/
https://outrageous-wide-railway.glitch.me/z
https://uiinlcuo37oed.web.app/gimecqp5nd39h98x6ymwebcuo461fka4mpo/other1.png
https://outrageous-wide-railway.glitch.me/x
https://uiinlcuo37oed.web.app/
https://csp.withgoogle.com/csp/report-to/images-tbn
https://share.sender.net/campaigns/2G8r/%7B%24unsubscribe_link%7D_
https://www.google.com
https://clients2.googleusercontent.com/crx/blobs/Acy1k0bLIjHsvnKaKN_oRpVaYYvFs25d7GKYF1WXrT6yizCMksBO0c_ggE0B6tx6HPRHe6q1GOEe3_NcIbSiGG8kXeLMUY0sAKVvC6R89zvKM13s5VqoAMZSmuUgjQL5vlygJuArQghXXE_qTL7NlQ/extension_8520_615_0_5.crx
https://share.sender.net/campaigns/2G8r/files
https://uiinlcuo37oed.web.app/csas9nfs1bxqsa65w3dw64jet1hssiopr9/hover.css
https://zippy-button-hyssop.glitch.me/viewenable.js
https://sandbox.google.com/payments/v4/js/integrator.js
https://share.sender.net/campaigns/2G8r/filesfiles../
https://outrageous-wide-railway.glitch.me/Share
https://uiinlcuo37oed.web.app/gimecqp5nd39h98x6ymwebcuo461fka4mpo/office3651.png
https://play.google.com
https://code.jquery.com/jquery-3.2.1.slim.min.jsa
https://code.jquery.com/jquery-3.2.1.slim.min.js
https://cdn.sender.net/email_images/103576/images/all/sharepoint.png
https://outrageous-wide-railway.glitch.me/
https://code.jquery.com/jquery-3.2.1.slim.min.jsaD
https://code.jquery.com/jquery-3.1.1.min.jsaD
https://uiinlcuo37oed.web.app/gimecqp5nd39h98x6ymwebcuo461fka4mpo/8.jpg
https://apis.google.com
https://cdnjs.cloudflare.com/
https://clients2.google.com
https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers
https://a.nel.cloudflare.com/report/v3?s=e359n4k4N3GeNQdxoEl%2BsXFplnCtHYYpg64p5X3k%2Bq4KWD1NFZXFOxK
https://a.nel.cloudflare.com/report/v3?s=CneeAJNVz%2B8AjMWjDz%2BmqPXNo5tB0qQ1RK%2B19uUvDx352gCrVNr3R
https://uiinlcuo37oed.web.app/gimecqp5nd39h98x6ymwebcuo461fka4mpo/outlook1.png
https://kit.fontawesome.com/585b051251.js
https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js
https://share.sender.net/favicon.ico
https://ka-f.fontawesome.com/
https://outrageous-wide-railway.glitch.me/4
https://outrageous-wide-railway.glitch.me/2
https://accounts.google.com
https://a.nel.cloudflare.com/report/v3?s=4%2FLYERAcg6Q8FynoXIQ3o%2BZndGvyb%2F2L%2FZqMkJZpBxzVo9kYbJG
https://outrageous-wide-railway.glitch.me//
https://outrageous-wide-railway.glitch.me/.
https://outrageous-wide-railway.glitch.me/favicon.ico

Dropped files

Name	File Type	Hashes
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network Persistent Stateff (copy)	ASCII text, with very long lines, with no line terminators	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Session Storage\LOG	ASCII text	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Session Storage\000003.log	data	#
Click to see the 97 hidden entries
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Secure Preferencesma (copy)	UTF-8 Unicode text, with very long lines, with no line terminators	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Secure PreferencesTM (copy)	UTF-8 Unicode text, with very long lines, with no line terminators	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences (copy)	UTF-8 Unicode text, with very long lines, with no line terminators	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Reporting and NEL-journal	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Reporting and NEL	SQLite 3.x database, last written using SQLite version 3032001	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Preferenceso (copy)	ASCII text, with very long lines, with no line terminators	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\PreferencesUP (copy)	ASCII text, with very long lines, with no line terminators	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Preferences (copy)	ASCII text, with very long lines, with no line terminators	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Platform Notifications\LOG.oldrt (copy)	ASCII text	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Platform Notifications\LOG	ASCII text	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Session Storage\LOG.old (copy)	ASCII text	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network Persistent State. (copy)	ASCII text, with very long lines, with no line terminators	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network Action Predictor-journal	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network Action Predictor	SQLite 3.x database, last written using SQLite version 3032001	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Storage\leveldb\LOG.old (copy)	ASCII text	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Storage\leveldb\LOG	ASCII text	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Storage\leveldb\000003.log	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Last Tabsnd (copy)	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Last Sessionl (copy)	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History-journal	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History Provider Cache	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History	SQLite 3.x database, last written using SQLite version 3032001	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\ef0d2660-e629-4740-98b5-7f685196480a.tmp	ASCII text, with very long lines, with no line terminators	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\LOG	ASCII text	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\000003.log	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Session Storage\LOG.oldes (copy)	ASCII text	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Session Storage\LOG	ASCII text	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Session Storage\000003.log	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Platform Notifications\LOG.old (copy)	ASCII text	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Platform Notifications\LOG	ASCII text	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Network Persistent State.. (copy)	ASCII text, with very long lines, with no line terminators	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Local Storage\leveldb\LOG.old (copy)	ASCII text	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Local Storage\leveldb\LOG	ASCII text	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\GPUCache\data_1	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\738df663-6bf5-4dce-b4ea-8b2fff33a793.tmp	ASCII text, with very long lines, with no line terminators	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\GCM Store\Encryption\LOG.old.d (copy)	ASCII text	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Session Storage\LOG.old (copy)	ASCII text	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Session Storage\LOG	ASCII text	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Session Storage\000003.log	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Platform Notifications\LOG.old (copy)	ASCII text	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Platform Notifications\LOG	ASCII text	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Network Persistent StateTM (copy)	ASCII text, with very long lines, with no line terminators	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Local Storage\leveldb\LOG.old. (copy)	ASCII text	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\Local Storage\leveldb\LOG	ASCII text	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\gfdkimpbcpahaombhbimeihdjnejgicl\def\GPUCache\data_1	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Site Characteristics Database\LOG.old (copy)	ASCII text	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Site Characteristics Database\LOG	ASCII text	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\76716475-cb80-469c-a011-91b343dbd7a5.tmp	ASCII text, with very long lines, with no line terminators	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\ad1a66ab04856db2_0	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\8ef92f4c2be45138_0	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\8ecf782c7b13bd5a_0	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\51b19d265676aa09_0	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\261d2461877d84ae_0	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\1ebedd33807c580a_0	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\BudgetDatabase\LOG.old (copy)	ASCII text	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\BudgetDatabase\LOG	ASCII text	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\AutofillStrikeDatabase\LOG.oldNT (copy)	ASCII text	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\AutofillStrikeDatabase\LOG	ASCII text	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\8958e62c-a871-4adf-8f49-15ea95152cac.tmp	ASCII text, with very long lines, with no line terminators	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\7f83829f-e4f8-4a59-abd0-c49ac0921807.tmp	very short file (no magic)	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\b24e808654b52c4f_0	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\5aa22919-d946-4568-be12-83270f22069d.tmp	UTF-8 Unicode text, with very long lines, with no line terminators	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\54d5cf78-63d9-486c-85db-2b4030e8f69f.tmp	ASCII text, with very long lines, with no line terminators	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\46d12e97-7550-48fd-a756-26ca86f6349d.tmp	ASCII text, with very long lines, with no line terminators	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\2aeb4efe-9fe1-43d3-bc44-c40ff5a653ff.tmp	ASCII text, with very long lines, with no line terminators	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\1805212a-6389-403a-a5f8-e3eed69738b8.tmp	ASCII text, with very long lines, with no line terminators	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\0654270d-7feb-445d-92b3-6c1d1f5c2773.tmp	ASCII text, with very long lines, with no line terminators	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Crashpad\settings.dat	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\4c94aaf7-8966-48a4-a771-dfc92b30092c.tmp	ASCII text, with very long lines, with no line terminators	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\301b15f1-86b6-4f0a-b885-92f6db9bffea.tmp	ASCII text, with very long lines, with no line terminators	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\22560d1e-f439-48ce-a21f-4f06662ef6e7.tmp	ASCII text, with very long lines, with no line terminators	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\13c3ea70-6fae-41f8-90be-9413ddf3f0ba.tmp	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension Rules\LOG	ASCII text	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\GCM Store\Encryption\LOG	ASCII text	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\EventDB\LOG.old (copy)	ASCII text	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\EventDB\LOG	ASCII text	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\AvailabilityDB\LOG.old (copy)	ASCII text	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\AvailabilityDB\LOG	ASCII text	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Feature Engagement Tracker\AvailabilityDB\000003.log	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm\8520.615.0.5_1\_metadata\computed_hashes.json	ASCII text, with very long lines, with no line terminators	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_metadata\computed_hashes.json	ASCII text, with very long lines, with no line terminators	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension State\LOG.old. (copy)	ASCII text	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension State\LOG	ASCII text	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension State\000003.log	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension Rules\LOG.old (copy)	ASCII text	#
C:\Program Files\Google\Chrome\Application\Dictionaries\en-US-9-0.bdic	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extension Rules\000003.log	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Current Tabs	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Current Session	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Cookies-journal	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Cookies	SQLite 3.x database, last written using SQLite version 3032001	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index0 (copy)	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index (copy)	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\temp-index	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\d774b5337cd01684_0	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\d4fafc5ad6b4574b_0	data	#
C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\c56deb8b106b171e_0	data	#

https://share.sender.net/campaigns/2G8r/files

Comments

Tags

Available tags:

Details

Joe Sandbox

Third Party Analysis Engines

IPs

Domains

URLs

Dropped files

https://share.sender.net/campaigns/2G8r/files Options

Comments

Tags

Available tags:

Details

Joe Sandbox

Third Party Analysis Engines

IPs

Domains

URLs

Dropped files

Search started

https://share.sender.net/campaigns/2G8r/files