IOC Report
https://kukcon-xlogns.godaddysites.com/

loading gif

Files

File Path
Type
Category
Malicious
Chrome Cache Entry: 100
ASCII text, with very long lines (8076)
dropped
Chrome Cache Entry: 101
ASCII text, with very long lines (32950), with no line terminators
downloaded
Chrome Cache Entry: 102
ASCII text, with very long lines (330)
downloaded
Chrome Cache Entry: 103
ASCII text
dropped
Chrome Cache Entry: 104
ASCII text, with very long lines (3043)
dropped
Chrome Cache Entry: 105
ASCII text, with very long lines (330)
dropped
Chrome Cache Entry: 106
ASCII text, with very long lines (3043)
downloaded
Chrome Cache Entry: 107
PNG image data, 3168 x 1946, 8-bit/color RGB, non-interlaced
dropped
Chrome Cache Entry: 108
HTML document, ASCII text, with very long lines (2677)
downloaded
Chrome Cache Entry: 109
ASCII text, with very long lines (65536), with no line terminators
dropped
Chrome Cache Entry: 110
ASCII text
dropped
Chrome Cache Entry: 111
ASCII text, with very long lines (1211)
downloaded
Chrome Cache Entry: 112
ASCII text, with very long lines (829)
dropped
Chrome Cache Entry: 113
ASCII text, with very long lines (23126)
dropped
Chrome Cache Entry: 114
Unicode text, UTF-8 text, with very long lines (20947)
dropped
Chrome Cache Entry: 115
Web Open Font Format (Version 2), TrueType, length 23580, version 1.0
downloaded
Chrome Cache Entry: 116
ASCII text, with very long lines (522)
downloaded
Chrome Cache Entry: 117
ASCII text, with very long lines (13834)
downloaded
Chrome Cache Entry: 118
JPEG image data, baseline, precision 8, 192x192, components 3
dropped
Chrome Cache Entry: 119
ASCII text, with very long lines (852)
downloaded
Chrome Cache Entry: 120
ASCII text, with very long lines (1824)
dropped
Chrome Cache Entry: 121
ASCII text, with very long lines (829)
downloaded
Chrome Cache Entry: 122
ASCII text, with very long lines (522)
dropped
Chrome Cache Entry: 123
HTML document, ASCII text, with very long lines (2677)
dropped
Chrome Cache Entry: 124
HTML document, Unicode text, UTF-8 text, with very long lines (4341)
downloaded
Chrome Cache Entry: 125
ASCII text
downloaded
Chrome Cache Entry: 126
ASCII text, with very long lines (8076)
downloaded
Chrome Cache Entry: 127
ASCII text, with very long lines (1824)
downloaded
Chrome Cache Entry: 128
RIFF (little-endian) data, Web/P image, VP8 encoding, 192x192, Scaling: [none]x[none], YUV color, decoders should clamp
downloaded
Chrome Cache Entry: 73
ASCII text, with very long lines (852)
dropped
Chrome Cache Entry: 74
ASCII text, with very long lines (51862)
downloaded
Chrome Cache Entry: 75
ASCII text, with very long lines (1352)
downloaded
Chrome Cache Entry: 76
ASCII text, with very long lines (51862)
dropped
Chrome Cache Entry: 77
PNG image data, 3168 x 1946, 8-bit/color RGB, non-interlaced
downloaded
Chrome Cache Entry: 78
ASCII text, with very long lines (905)
dropped
Chrome Cache Entry: 79
Unicode text, UTF-8 text, with very long lines (63425)
dropped
Chrome Cache Entry: 80
ASCII text, with very long lines (1352)
dropped
Chrome Cache Entry: 81
Web Open Font Format (Version 2), TrueType, length 11644, version 1.0
downloaded
Chrome Cache Entry: 82
Web Open Font Format (Version 2), TrueType, length 23040, version 1.0
downloaded
Chrome Cache Entry: 83
ASCII text, with very long lines (23126)
downloaded
Chrome Cache Entry: 84
ASCII text
dropped
Chrome Cache Entry: 85
ASCII text, with very long lines (65536), with no line terminators
downloaded
Chrome Cache Entry: 86
Unicode text, UTF-8 text, with very long lines (63425)
downloaded
Chrome Cache Entry: 87
ASCII text, with very long lines (1211)
dropped
Chrome Cache Entry: 88
Web Open Font Format (Version 2), TrueType, length 11728, version 1.0
downloaded
Chrome Cache Entry: 89
Unicode text, UTF-8 text, with very long lines (20947)
downloaded
Chrome Cache Entry: 90
ASCII text
downloaded
Chrome Cache Entry: 91
ASCII text, with very long lines (905)
downloaded
Chrome Cache Entry: 92
ASCII text, with very long lines (383)
dropped
Chrome Cache Entry: 93
ASCII text, with very long lines (13834)
dropped
Chrome Cache Entry: 94
ASCII text
downloaded
Chrome Cache Entry: 95
HTML document, Unicode text, UTF-8 text, with very long lines (4678)
downloaded
Chrome Cache Entry: 96
JSON data
downloaded
Chrome Cache Entry: 97
ASCII text, with very long lines (383)
downloaded
Chrome Cache Entry: 98
ASCII text
dropped
Chrome Cache Entry: 99
ASCII text
downloaded
There are 47 hidden files, click here to show them.

Processes

Path
Cmdline
Malicious
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1688 --field-trial-handle=2000,i,3161492159356609941,11454387423049995908,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://kukcon-xlogns.godaddysites.com/"

URLs

Name
IP
Malicious
https://kukcon-xlogns.godaddysites.com/
malicious
https://kukcon-xlogns.godaddysites.com/
malicious
https://kukcon-xlogns.godaddysites.com/manifest.webmanifest
13.248.243.5
malicious
https://kukcon-xlogns.godaddysites.com/favicon.ico
13.248.243.5
malicious
https://kukcon-xlogns.godaddysites.com/404
unknown
malicious
https://kukcon-xlogns.godaddysites.com/sw.js
13.248.243.5
malicious
https://i.ibb.co/8sHfvk0/kucoin.png
169.197.85.95
https://img1.wsimg.com/gfonts/s/lato/v24/S6u9w4BMUTPHh6UVSwiPGQ.woff2)
unknown
https://img1.wsimg.com/gfonts/s/lusitana/v13/CSR74z9ShvucWzsMKyDmafctaNY.woff2)
unknown
https://img1.wsimg.com/gfonts/s/lato/v24/S6uyw4BMUTPHjx4wXg.woff2)
unknown
https://img1.wsimg.com/poly/v3/polyfill.min.js?rum=0&unknown=polyfill&flags=gated&features=Intl.~loc
unknown
https://img1.wsimg.com/gfonts/s/lato/v24/S6u9w4BMUTPHh6UVSwaPGR_p.woff2)
unknown
https://i.ibb.co/8sHfvk0/kucoin.png"
unknown
https://img1.wsimg.com/gfonts/s/lusitana/v13/CSR84z9ShvucWzsMKyhdTOI.woff2)
unknown
http://scripts.sil.org/OFL
unknown
https://img1.wsimg.com/gfonts/s/lato/v24/S6uyw4BMUTPHjxAwXjeu.woff2)
unknown
http://jedwatson.github.io/classnames
unknown
There are 6 hidden URLs, click here to show them.

Domains

Name
IP
Malicious
kukcon-xlogns.godaddysites.com
13.248.243.5
www.google.com
142.250.186.164
isteam.wsimg.com
3.121.64.201
i.ibb.co
169.197.85.95
img1.wsimg.com
unknown

IPs

IP
Domain
Country
Malicious
3.121.64.201
isteam.wsimg.com
United States
13.248.243.5
kukcon-xlogns.godaddysites.com
United States
192.168.2.4
unknown
unknown
192.168.2.6
unknown
unknown
162.19.58.158
unknown
United States
239.255.255.250
unknown
Reserved
142.250.186.164
www.google.com
United States
169.197.85.95
i.ibb.co
United States

DOM / HTML

URL
Malicious
https://kukcon-xlogns.godaddysites.com/
https://kukcon-xlogns.godaddysites.com/
https://kukcon-xlogns.godaddysites.com/