IOC Report
https://is.gd/AC0Do2?grB=9rFPgoC8CX?feL=Bnp2ymnOCW

loading gif

Files

File Path
Type
Category
Malicious
Chrome Cache Entry: 40
ASCII text, with no line terminators
downloaded
Chrome Cache Entry: 41
ASCII text, with no line terminators
downloaded

Processes

Path
Cmdline
Malicious
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2292 --field-trial-handle=2156,i,17514280391790895604,12540238175327796301,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://is.gd/AC0Do2?grB=9rFPgoC8CX?feL=Bnp2ymnOCW"

URLs

Name
IP
Malicious
https://is.gd/AC0Do2?grB=9rFPgoC8CX?feL=Bnp2ymnOCW
https://nsw.aupostv.top/favicon.ico
91.92.241.33
https://nsw.aupostv.top/qSmFYO
https://is.gd/AC0Do2?grB=9rFPgoC8CX?feL=Bnp2ymnOCW
104.25.234.53

Domains

Name
IP
Malicious
nsw.aupostv.top
91.92.241.33
www.google.com
142.250.185.68
is.gd
104.25.234.53
fp2e7a.wpc.phicdn.net
192.229.221.95
windowsupdatebg.s.llnwi.net
87.248.205.0

IPs

IP
Domain
Country
Malicious
142.250.185.68
www.google.com
United States
239.255.255.250
unknown
Reserved
104.25.234.53
is.gd
United States
192.168.2.4
unknown
unknown
91.92.241.33
nsw.aupostv.top
Bulgaria

DOM / HTML

URL
Malicious
https://nsw.aupostv.top/qSmFYO