IOC Report
https://t4w86zlc.r.sa-east-1.awstrack.me/L0/https:%2F%2Fdeverechemicals3.s3.amazonaws.com%2FDeveres3project002files.htm/1/010301919a36c887-bd0fadb9-69a9-4c66-8a65-7770fcfd1a1e-000000/4liC3XgeimVwv5ob78Q6Bl4nESk=173

loading gif

Files

File Path
Type
Category
Malicious
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Aug 29 14:01:04 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Aug 29 14:01:04 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 6 08:05:01 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Aug 29 14:01:04 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Aug 29 14:01:04 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Aug 29 14:01:04 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
dropped
Chrome Cache Entry: 101
ASCII text, with very long lines (1621)
dropped
Chrome Cache Entry: 102
ASCII text, with very long lines (32701)
downloaded
Chrome Cache Entry: 103
XML 1.0 document, ASCII text
downloaded
Chrome Cache Entry: 104
ASCII text, with very long lines (1458)
downloaded
Chrome Cache Entry: 105
HTML document, ASCII text, with very long lines (472), with CRLF line terminators
dropped
Chrome Cache Entry: 106
ASCII text, with very long lines (32450)
downloaded
Chrome Cache Entry: 107
ASCII text, with very long lines (6216)
dropped
Chrome Cache Entry: 108
ASCII text, with very long lines (12547), with no line terminators
downloaded
Chrome Cache Entry: 109
ASCII text, with very long lines (65447)
dropped
Chrome Cache Entry: 110
JSON data
downloaded
Chrome Cache Entry: 112
ASCII text, with very long lines (386)
downloaded
Chrome Cache Entry: 113
Unicode text, UTF-8 text, with very long lines (18747)
dropped
Chrome Cache Entry: 114
ASCII text, with very long lines (65536), with no line terminators
downloaded
Chrome Cache Entry: 118
ASCII text
downloaded
Chrome Cache Entry: 119
ASCII text, with very long lines (2836)
downloaded
Chrome Cache Entry: 120
ASCII text, with very long lines (62605)
dropped
Chrome Cache Entry: 121
HTML document, ASCII text, with very long lines (1392), with CRLF line terminators
downloaded
Chrome Cache Entry: 122
ASCII text, with very long lines (1339)
downloaded
Chrome Cache Entry: 123
ASCII text
downloaded
Chrome Cache Entry: 124
HTML document, ASCII text, with CRLF, LF line terminators
downloaded
Chrome Cache Entry: 127
XML 1.0 document, ASCII text
downloaded
Chrome Cache Entry: 130
XML 1.0 document, ASCII text
downloaded
Chrome Cache Entry: 133
XML 1.0 document, ASCII text
downloaded
Chrome Cache Entry: 136
HTML document, ASCII text, with very long lines (6127), with CRLF line terminators
downloaded
Chrome Cache Entry: 139
ASCII text, with very long lines (4635)
downloaded
Chrome Cache Entry: 140
ASCII text, with very long lines (65451)
dropped
Chrome Cache Entry: 141
Unicode text, UTF-8 text, with very long lines (43130), with no line terminators
dropped
Chrome Cache Entry: 142
ASCII text, with very long lines (597)
downloaded
Chrome Cache Entry: 145
ASCII text, with very long lines (8298), with no line terminators
downloaded
Chrome Cache Entry: 146
ASCII text, with very long lines (4864)
downloaded
Chrome Cache Entry: 147
ASCII text, with very long lines (14521)
dropped
Chrome Cache Entry: 149
ASCII text, with very long lines (45034)
downloaded
Chrome Cache Entry: 151
XML 1.0 document, ASCII text
downloaded
Chrome Cache Entry: 152
ASCII text, with very long lines (899)
dropped
Chrome Cache Entry: 154
HTML document, ASCII text, with CRLF line terminators
downloaded
Chrome Cache Entry: 155
PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced
downloaded
Chrome Cache Entry: 156
HTML document, ASCII text, with no line terminators
downloaded
Chrome Cache Entry: 157
PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced
dropped
Chrome Cache Entry: 159
ASCII text, with very long lines (47992), with no line terminators
downloaded
Chrome Cache Entry: 160
XML 1.0 document, ASCII text
downloaded
Chrome Cache Entry: 165
PNG image data, 89 x 64, 8-bit/color RGB, non-interlaced
dropped
Chrome Cache Entry: 166
ASCII text, with very long lines (65536), with no line terminators
downloaded
Chrome Cache Entry: 168
Unicode text, UTF-8 text, with very long lines (65534), with no line terminators
dropped
There are 40 hidden files, click here to show them.

URLs

Name
IP
Malicious
https://t4w86zlc.r.sa-east-1.awstrack.me/L0/https:%2F%2Fdeverechemicals3.s3.amazonaws.com%2FDeveres3project002files.htm/1/010301919a36c887-bd0fadb9-69a9-4c66-8a65-7770fcfd1a1e-000000/4liC3XgeimVwv5ob78Q6Bl4nESk=173
malicious
https://deverechemicals3.s3.amazonaws.com/Deveres3project002files.htm
malicious
https://welshpoolsharkspnu.ru/NrFB2/#J
malicious
https://50ou-vasil-levski.com/tvavx.php

Domains

Name
IP
Malicious
thebookwormprojectonu.ru
104.21.79.65
malicious
a.nel.cloudflare.com
35.190.80.1
50ou-vasil-levski.com
78.142.63.8
welshpoolsharkspnu.ru
172.67.206.158
fonts.shopifycdn.com
185.146.173.20
cdn.shopify.com
23.227.60.200
shops.myshopify.com
23.227.38.74
s3-w.us-east-1.amazonaws.com
16.182.66.145
shop.app
185.146.173.20
whatsapp.carthike.com
188.114.97.3
code.jquery.com
151.101.2.137
gw-monorail-production-gateway-1-apps-a-us-ce1-eg6.shopifycloud.com
34.111.205.129
cdnjs.cloudflare.com
104.17.25.14
challenges.cloudflare.com
104.18.94.41
www.google.com
142.250.186.68
baconredirects-elb-1nz5mum1h1a1y-1105981855.sa-east-1.elb.amazonaws.com
15.229.76.122
monorail-edge.shopifysvc.com
unknown
t4w86zlc.r.sa-east-1.awstrack.me
unknown
deverechemicals3.s3.amazonaws.com
unknown
55db36-5b.myshopify.com
unknown
There are 10 hidden domains, click here to show them.

IPs

IP
Domain
Country
Malicious
104.21.79.65
thebookwormprojectonu.ru
United States
malicious
142.250.186.68
www.google.com
United States
78.142.63.8
50ou-vasil-levski.com
Bulgaria
216.58.206.74
unknown
United States
104.18.94.41
challenges.cloudflare.com
United States
23.227.38.74
shops.myshopify.com
Canada
192.168.2.16
unknown
unknown
23.227.60.200
cdn.shopify.com
Canada
142.250.181.234
unknown
United States
74.125.206.84
unknown
United States
142.250.181.238
unknown
United States
15.229.76.122
baconredirects-elb-1nz5mum1h1a1y-1105981855.sa-east-1.elb.amazonaws.com
United States
185.146.173.20
fonts.shopifycdn.com
Sweden
142.250.186.131
unknown
United States
35.190.80.1
a.nel.cloudflare.com
United States
151.101.194.137
unknown
United States
172.217.18.10
unknown
United States
1.1.1.1
unknown
Australia
16.182.66.145
s3-w.us-east-1.amazonaws.com
United States
172.67.206.158
welshpoolsharkspnu.ru
United States
34.111.205.129
gw-monorail-production-gateway-1-apps-a-us-ce1-eg6.shopifycloud.com
United States
104.18.95.41
unknown
United States
151.101.2.137
code.jquery.com
United States
239.255.255.250
unknown
Reserved
188.114.97.3
whatsapp.carthike.com
European Union
142.250.185.131
unknown
United States
172.217.16.195
unknown
United States
104.17.25.14
cdnjs.cloudflare.com
United States
There are 18 hidden IPs, click here to show them.