Automated Malware Analysis IOC Report for

Files

File Path

Type

Category

Malicious

Chrome Cache Entry: 47

HTML document, Unicode text, UTF-8 text, with very long lines (8861), with no line terminators

downloaded

Details

File:	Chrome Cache Entry: 47
Category:	downloaded
Dump:	chromecache_47.2.dr
ID:	dr_8
Target ID:	2
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
Type:	HTML document, Unicode text, UTF-8 text, with very long lines (8861), with no line terminators
Entropy:	5.118402664657652
Encrypted:	false
Ssdeep:	192:ScjZjejvU4c/+qKsRIBmfBSaspVZ7u4IpXlIBmfzdpbu5rrb:SctKGt2BmfBSXpVZapXiBmfz/u5rX
Size:	9025
Whitelisted:	false
Reputation:	low

Chrome Cache Entry: 48

ASCII text, with very long lines (65451)

downloaded

Details

File:	Chrome Cache Entry: 48
Category:	downloaded
Dump:	chromecache_48.2.dr
ID:	dr_9
Target ID:	2
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
Type:	ASCII text, with very long lines (65451)
Entropy:	5.2896589255084425
Encrypted:	false
Ssdeep:	1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakF:AYh8eip3huuf6IidlrvakdtQ47GK1
Size:	89476
Whitelisted:	true
Reputation:	low

Chrome Cache Entry: 49

PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced

downloaded

Details

File:	Chrome Cache Entry: 49
Category:	downloaded
Dump:	chromecache_49.2.dr
ID:	dr_10
Target ID:	2
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Entropy:	7.789203921183075
Encrypted:	false
Ssdeep:	48:zJEqY7IB0zOCVpZ+gR2X0THRG8VHD3GtQ15BhD:NYw0CCdWXOzstQ1jhD
Size:	1755
Whitelisted:	false
Reputation:	low

Chrome Cache Entry: 50

gzip compressed data, from Unix, original size modulo 2^32 37646

downloaded

Details

File:	Chrome Cache Entry: 50
Category:	downloaded
Dump:	chromecache_50.2.dr
ID:	dr_11
Target ID:	2
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
Type:	gzip compressed data, from Unix, original size modulo 2^32 37646
Entropy:	7.983324348564223
Encrypted:	false
Ssdeep:	384:bxhwOLdEQrZqSNhzfiPSWl/Io2hOgCSE8qMNmE:bPwOLdEGNzfAIo2MlSE8tN3
Size:	13749
Whitelisted:	false
Reputation:	low

Chrome Cache Entry: 51

JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1264x764, components 3

dropped

Details

File:	Chrome Cache Entry: 51
Category:	dropped
Dump:	chromecache_51.2.dr
ID:	dr_4
Target ID:	2
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1264x764, components 3
Entropy:	7.777021849482456
Encrypted:	false
Ssdeep:	1536:pRWUhS2mulJr0O9YQKPWGNXgj+aditexinqix2kbTWbT+VKP1XNfl7:rD+ulJvFKPRwHdit4u2kbSbKVKdD7
Size:	67389
Whitelisted:	false
Reputation:	low

Chrome Cache Entry: 52

gzip compressed data, from Unix, original size modulo 2^32 37279

downloaded

Details

File:	Chrome Cache Entry: 52
Category:	downloaded
Dump:	chromecache_52.2.dr
ID:	dr_12
Target ID:	2
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
Type:	gzip compressed data, from Unix, original size modulo 2^32 37279
Entropy:	7.9771159369913365
Encrypted:	false
Ssdeep:	192:Jb2IvLuJ+4qVQMVv44oH4P2qj5v4gw7GbyjuIx9MTcmjkZNozl5:JbiNMVvH1PTNX7byeyAl5
Size:	8349
Whitelisted:	false
Reputation:	low

Chrome Cache Entry: 53

JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1264x764, components 3

downloaded

Details

File:	Chrome Cache Entry: 53
Category:	downloaded
Dump:	chromecache_53.2.dr
ID:	dr_13
Target ID:	2
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1264x764, components 3
Entropy:	7.777021849482456
Encrypted:	false
Ssdeep:	1536:pRWUhS2mulJr0O9YQKPWGNXgj+aditexinqix2kbTWbT+VKP1XNfl7:rD+ulJvFKPRwHdit4u2kbSbKVKdD7
Size:	67389
Whitelisted:	false
Reputation:	low

Chrome Cache Entry: 54

PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced

dropped

Details

File:	Chrome Cache Entry: 54
Category:	dropped
Dump:	chromecache_54.2.dr
ID:	dr_7
Target ID:	2
Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Entropy:	7.789203921183075
Encrypted:	false
Ssdeep:	48:zJEqY7IB0zOCVpZ+gR2X0THRG8VHD3GtQ15BhD:NYw0CCdWXOzstQ1jhD
Size:	1755
Whitelisted:	false
Reputation:	low

Processes

Path

Cmdline

Malicious

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"

Details

Is windows:	true
Is dropped:	false
PID:	4948
Target ID:	0
Parent PID:	1076
Name:	chrome.exe
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Size:	3242272
MD5:	45DE480806D1B5D462A7DDE4DCEFC4E4
Time:	18:20:07
Date:	04/07/2024
Reason:	newprocess
Reputation:	low
Is admin:	true
Is elevated:	true
Modulebase:	0x7ff76e190000
Modulesize:	3325952
Wow64:	false

Signature Hits	Behavior Group	Mitre Attack
Spawns processes	System Summary	Process Injection

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2516 --field-trial-handle=2296,i,4188136114675171219,13452510514202242541,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8

Details

Is windows:	true
Is dropped:	false
PID:	3720
Target ID:	2
Parent PID:	4948
Name:	chrome.exe
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2516 --field-trial-handle=2296,i,4188136114675171219,13452510514202242541,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Size:	3242272
MD5:	45DE480806D1B5D462A7DDE4DCEFC4E4
Time:	18:20:11
Date:	04/07/2024
Reason:	newprocess
Reputation:	low
Is admin:	true
Is elevated:	true
Modulebase:	0x7ff76e190000
Modulesize:	3325952
Wow64:	false

Signature Hits	Behavior Group	Mitre Attack
Spawns processes	System Summary	Process Injection

C:\Program Files\Google\Chrome\Application\chrome.exe

"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://metaioseklcogin.webflow.io/"

Details

Is windows:	true
Is dropped:	false
PID:	6468
Target ID:	3
Parent PID:	1076
Name:	chrome.exe
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://metaioseklcogin.webflow.io/"
Size:	3242272
MD5:	45DE480806D1B5D462A7DDE4DCEFC4E4
Time:	18:20:13
Date:	04/07/2024
Reason:	newprocess
Reputation:	low
Is admin:	true
Is elevated:	true
Modulebase:	0x7ff76e190000
Modulesize:	3325952
Wow64:	false

Signature Hits	Behavior Group	Mitre Attack
Spawns processes	System Summary	Process Injection

URLs

Name

Malicious

https://metaioseklcogin.webflow.io/

https://d3e54v103j8qbb.cloudfront.net/js/jquery-3.5.1.min.dc5e7f18c8.js?site=658cec990fe960c2d842cbdb

52.222.232.99

https://assets-global.website-files.com/658cec990fe960c2d842cbdb/js/webflow.235cb1a9b.js

18.245.162.13

https://assets-global.website-files.com/658cec990fe960c2d842cbdb/css/metaioseklcogin.webflow.5e22c9479.css

18.245.162.13

https://assets-global.website-files.com/658cec990fe960c2d842cbdb/658ced94adc727c27bb15f04_MetaMask_Fox.svg.png

18.245.162.13

https://assets-global.website-files.com/img/webclip.png

unknown

https://assets-global.website-files.com/658cec990fe960c2d842cbdb/658cecd186303d8f3a24cfe1_metamas-banner_.jpg

18.245.162.13

https://assets-global.website-files.com/658cec990fe960c2d842cbdb/658cecd186303d8f3a24cfe1_metamas-ba

unknown

https://assets-global.website-files.com/658cec990fe960c2d842cbdb/css/metaioseklcogin.webflow.5e22c94

unknown

https://assets-global.website-files.com/658cec990fe960c2d842cbdb/658ced94adc727c27bb15f04_MetaMask_F

unknown

https://flesterwisors.com/a84e76ff-85b6-4efe-95ff-70294deaf642

unknown

https://webflow.com

unknown

There are 2 hidden URLs, click here to show them.

Domains

Name

Malicious

d3e54v103j8qbb.cloudfront.net

52.222.232.99

webflow-io.map.fastly.net

151.101.2.188

google.com

142.250.184.238

d3vmvmej3wjbxn.cloudfront.net

18.245.162.13

www.google.com

142.250.185.196

fp2e7a.wpc.phicdn.net

192.229.221.95

windowsupdatebg.s.llnwi.net

87.248.205.0

assets-global.website-files.com

unknown

flesterwisors.com

unknown

metaioseklcogin.webflow.io

unknown

IPs

Domain

Country

Malicious

18.239.69.126

unknown

United States

192.168.2.4

unknown

192.168.2.5

unknown

239.255.255.250

unknown

Reserved

151.101.2.188

webflow-io.map.fastly.net

United States

18.245.162.13

d3vmvmej3wjbxn.cloudfront.net

United States

142.250.185.196

www.google.com

United States

52.222.232.99

d3e54v103j8qbb.cloudfront.net

United States

DOM / HTML

URL

Malicious

https://metaioseklcogin.webflow.io/

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

IOC Report
https://metaioseklcogin.webflow.io/

Files

Processes

URLs

Domains

IPs

DOM / HTML

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

IOC Reporthttps://metaioseklcogin.webflow.io/

Files

Processes

URLs

Domains

IPs

DOM / HTML

IOC Report
https://metaioseklcogin.webflow.io/