IOC Report
https://www.stellantis-videocheck.com/devis/O1YNFS5ENM

loading gif

Files

File Path
Type
Category
Malicious
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Dec 23 14:40:07 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Dec 23 14:40:07 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 6 08:05:01 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Dec 23 14:40:07 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Dec 23 14:40:07 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Dec 23 14:40:07 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
dropped
Chrome Cache Entry: 101
ASCII text
downloaded
Chrome Cache Entry: 102
ASCII text
downloaded
Chrome Cache Entry: 103
ASCII text, with very long lines (30837)
downloaded
Chrome Cache Entry: 104
ASCII text, with very long lines (50277)
downloaded
Chrome Cache Entry: 105
ASCII text, with very long lines (1485), with no line terminators
dropped
Chrome Cache Entry: 107
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 4608x3456, components 3
dropped
Chrome Cache Entry: 108
ASCII text, with very long lines (65536), with no line terminators
downloaded
Chrome Cache Entry: 109
ASCII text, with very long lines (19063)
downloaded
Chrome Cache Entry: 110
Web Open Font Format, CFF, length 37100, version 0.0
downloaded
Chrome Cache Entry: 113
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 4608x3456, components 3
downloaded
Chrome Cache Entry: 117
MS Windows icon resource - 4 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
downloaded
Chrome Cache Entry: 119
ASCII text
downloaded
Chrome Cache Entry: 120
PNG image data, 138 x 105, 8-bit/color RGBA, non-interlaced
dropped
Chrome Cache Entry: 121
Web Open Font Format (Version 2), TrueType, length 18536, version 1.0
downloaded
Chrome Cache Entry: 122
Web Open Font Format (Version 2), TrueType, length 18596, version 1.0
downloaded
Chrome Cache Entry: 123
JSON data
dropped
Chrome Cache Entry: 88
ASCII text, with very long lines (65536), with no line terminators
downloaded
Chrome Cache Entry: 89
Web Open Font Format (Version 2), TrueType, length 77160, version 4.459
downloaded
Chrome Cache Entry: 91
ASCII text, with very long lines (32058)
downloaded
Chrome Cache Entry: 92
ASCII text, with very long lines (32012)
dropped
Chrome Cache Entry: 93
ASCII text, with very long lines (65536), with no line terminators
dropped
Chrome Cache Entry: 94
HTML document, ASCII text
downloaded
Chrome Cache Entry: 95
ASCII text, with very long lines (65318)
downloaded
Chrome Cache Entry: 98
ASCII text, with no line terminators
downloaded
Chrome Cache Entry: 99
Web Open Font Format, TrueType, length 41920, version 0.0
downloaded
There are 22 hidden files, click here to show them.

URLs

Name
IP
Malicious
https://www.stellantis-videocheck.com/devis/O1YNFS5ENM
https://www.stellantis-videocheck.com/devis/O1YNFS5ENM

Domains

Name
IP
Malicious
cust.prod.videocheck.bsn0027990-rrd79f4c.stla-aws.net
13.39.207.169
api.prod.videocheck.bsn0027990-rrd79f4c.stla-aws.net
13.39.207.169
code.jquery.com
151.101.130.137
s3-r-w.eu-west-3.amazonaws.com
3.5.226.145
cdnjs.cloudflare.com
104.17.25.14
maxcdn.bootstrapcdn.com
104.18.11.207
www.google.com
172.217.21.36
www.stellantis-videocheck.com
unknown
videos-psa-videocheck.s3.eu-west-3.amazonaws.com
unknown
prod-assets-customer-psa-videocheck.s3.eu-west-3.amazonaws.com
unknown
api.psa-videocheck.com
unknown
There are 1 hidden domains, click here to show them.

IPs

IP
Domain
Country
Malicious
172.217.19.206
unknown
United States
104.18.10.207
unknown
United States
16.12.20.18
unknown
United States
192.168.2.16
unknown
unknown
216.58.208.227
unknown
United States
151.101.130.137
code.jquery.com
United States
142.250.181.138
unknown
United States
192.168.2.23
unknown
unknown
172.217.19.170
unknown
United States
172.217.21.35
unknown
United States
172.217.21.36
www.google.com
United States
104.17.24.14
unknown
United States
13.39.207.169
cust.prod.videocheck.bsn0027990-rrd79f4c.stla-aws.net
United States
172.217.19.238
unknown
United States
1.1.1.1
unknown
Australia
16.12.20.26
unknown
United States
172.217.17.35
unknown
United States
216.58.208.234
unknown
United States
104.18.11.207
maxcdn.bootstrapcdn.com
United States
52.47.153.142
unknown
United States
142.250.181.106
unknown
United States
239.255.255.250
unknown
Reserved
173.194.220.84
unknown
United States
172.217.19.10
unknown
United States
3.5.226.145
s3-r-w.eu-west-3.amazonaws.com
United States
104.17.25.14
cdnjs.cloudflare.com
United States
There are 16 hidden IPs, click here to show them.