IOC Report
https://docsend.com/view/8bzvs74qq8k89vmw

loading gif

Files

File Path
Type
Category
Malicious
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Nov 19 18:38:45 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Nov 19 18:38:45 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 6 08:05:01 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Nov 19 18:38:45 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Nov 19 18:38:45 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Nov 19 18:38:45 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
dropped
Chrome Cache Entry: 56
RIFF (little-endian) data, Web/P image
downloaded
Chrome Cache Entry: 57
very short file (no magic)
downloaded
Chrome Cache Entry: 58
PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
dropped

URLs

Name
IP
Malicious
https://docsend.com/view/8bzvs74qq8k89vmw
https://miportalseguro.com/m/?c3Y9bzM2NV8xX25vbSZyYW5kPVpYQTVRa0U9JnVpZD1VU0VSMDYxMTIwMjRVMDYxMTA2MDg

Domains

Name
IP
Malicious
www.google.com
142.250.184.228
docsend.com
18.173.205.125
miportalseguro.com
162.241.60.177

IPs

IP
Domain
Country
Malicious
64.233.166.84
unknown
United States
1.1.1.1
unknown
Australia
239.255.255.250
unknown
Reserved
142.250.185.163
unknown
United States
162.241.60.177
miportalseguro.com
United States
142.250.185.131
unknown
United States
172.217.18.14
unknown
United States
192.168.2.16
unknown
unknown
18.173.205.125
docsend.com
United States
142.250.184.228
www.google.com
United States
216.58.206.46
unknown
United States
There are 1 hidden IPs, click here to show them.