IOC Report
https://hwvtu.us17.list-manage.com/track/click?u=b34582412f60404066a5f49b0&id=a034dac789&e=6353042e9a

loading gif

Files

File Path
Type
Category
Malicious
Chrome Cache Entry: 41
very short file (no magic)
downloaded
Chrome Cache Entry: 42
HTML document, ASCII text
downloaded

Processes

Path
Cmdline
Malicious
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2560 --field-trial-handle=2248,i,14434729802013882964,1299651225016094446,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://hwvtu.us17.list-manage.com/track/click?u=b34582412f60404066a5f49b0&id=a034dac789&e=6353042e9a"

URLs

Name
IP
Malicious
https://hwvtu.us17.list-manage.com/track/click?u=b34582412f60404066a5f49b0&id=a034dac789&e=6353042e9a
malicious
https://acbp.com.br/favicon.ico
184.171.250.122
https://vangoik.sa.com/?utm_source=marys-newsletter-e857bc.beehiiv.com&utm_medium=newsletter&utm_campaign=new-post
159.148.38.101
https://acbp.com.br/m/?c3Y9bzM2NV8xX25vbSZyYW5kPU9UaDNaRlU9JnVpZD1VU0VSMjQwOTIwMjRVNDkwOTI0MzA=N0123N%5bEMAIL%5d

Domains

Name
IP
Malicious
link.mail.beehiiv.com
104.18.69.40
www.google.com
142.250.184.196
acbp.com.br
184.171.250.122
vangoik.sa.com
159.148.38.101
fp2e7a.wpc.phicdn.net
192.229.221.95
hwvtu.us17.list-manage.com
unknown

IPs

IP
Domain
Country
Malicious
142.250.184.196
www.google.com
United States
239.255.255.250
unknown
Reserved
184.171.250.122
acbp.com.br
United States
159.148.38.101
vangoik.sa.com
Latvia
104.18.69.40
link.mail.beehiiv.com
United States
192.168.2.4
unknown
unknown

DOM / HTML

URL
Malicious
https://acbp.com.br/m/?c3Y9bzM2NV8xX25vbSZyYW5kPU9UaDNaRlU9JnVpZD1VU0VSMjQwOTIwMjRVNDkwOTI0MzA=N0123N%5bEMAIL%5d