IOC Report
https://starpack.mediabox.com/Mediabox-Independence/Base/weblink?id=20241120-080307-837-8LV2SE6ACR9JVQCF9ONFYW52XBVFBUOJW5OWX0IN&num=CE6PXFINEE&MBI_datasource=STARPACK

loading gif

Files

File Path
Type
Category
Malicious
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Nov 20 07:27:33 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Nov 20 07:27:33 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 6 08:54:41 2023, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Nov 20 07:27:33 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Nov 20 07:27:33 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Nov 20 07:27:33 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
dropped

URLs

Name
IP
Malicious
https://starpack.mediabox.com/Mediabox-Independence/Base/weblink?id=20241120-080307-837-8LV2SE6ACR9JVQCF9ONFYW52XBVFBUOJW5OWX0IN&num=CE6PXFINEE&MBI_datasource=STARPACK
https://starpack.mediabox.com/Mediabox-Independence/Base/weblink?id=20241120-080307-837-8LV2SE6ACR9JVQCF9ONFYW52XBVFBUOJW5OWX0IN&num=CE6PXFINEE&MBI_datasource=STARPACK

Domains

Name
IP
Malicious
jsdelivr.map.fastly.net
151.101.1.229
fastly-tls12-bam.nr-data.net
162.247.243.29
script.hotjar.com
18.244.18.56
js-agent.newrelic.com
162.247.243.39
maxcdn.bootstrapcdn.com
104.18.11.207
www.google.com
142.250.185.68
mdb-indep1.mediabox.com
35.157.114.126
static-cdn.hotjar.com
18.66.102.51
starpack.mediabox.com
unknown
cdn.jsdelivr.net
unknown
static.hotjar.com
unknown
bam.nr-data.net
unknown
There are 2 hidden domains, click here to show them.

IPs

IP
Domain
Country
Malicious
151.101.1.229
jsdelivr.map.fastly.net
United States
18.244.18.56
script.hotjar.com
United States
142.250.185.68
www.google.com
United States
1.1.1.1
unknown
Australia
216.58.212.142
unknown
United States
104.18.186.31
unknown
United States
192.168.2.17
unknown
unknown
172.217.18.3
unknown
United States
18.66.102.106
unknown
United States
142.251.173.84
unknown
United States
216.58.206.35
unknown
United States
104.18.11.207
maxcdn.bootstrapcdn.com
United States
142.250.185.170
unknown
United States
52.222.236.43
unknown
United States
20.150.37.228
unknown
United States
239.255.255.250
unknown
Reserved
35.157.114.126
mdb-indep1.mediabox.com
United States
162.247.243.29
fastly-tls12-bam.nr-data.net
United States
162.247.243.39
js-agent.newrelic.com
United States
172.217.18.10
unknown
United States
18.66.102.51
static-cdn.hotjar.com
United States
There are 11 hidden IPs, click here to show them.