IOC Report
https://telegram.jiefengbss.top/

loading gif

Files

File Path
Type
Category
Malicious
Chrome Cache Entry: 100
Unicode text, UTF-8 text, with very long lines (18078)
dropped
Chrome Cache Entry: 101
Web Open Font Format (Version 2), TrueType, length 11016, version 1.0
downloaded
Chrome Cache Entry: 102
Unicode text, UTF-8 text, with very long lines (18078)
downloaded
Chrome Cache Entry: 103
ASCII text, with very long lines (65536), with no line terminators
downloaded
Chrome Cache Entry: 104
PNG image data, 192 x 192, 8-bit colormap, non-interlaced
downloaded
Chrome Cache Entry: 105
Audio file with ID3 version 2.3.0, contains: MPEG ADTS, layer III, v1, 128 kbps, 44.1 kHz, JntStereo
downloaded
Chrome Cache Entry: 106
PNG image data, 50 x 50, 8-bit/color RGB, non-interlaced
downloaded
Chrome Cache Entry: 107
Unicode text, UTF-8 text, with very long lines (34267), with no line terminators
dropped
Chrome Cache Entry: 108
ASCII text, with very long lines (9780)
downloaded
Chrome Cache Entry: 109
ASCII text
downloaded
Chrome Cache Entry: 110
ASCII text, with very long lines (11172)
downloaded
Chrome Cache Entry: 111
ASCII text, with very long lines (44841)
dropped
Chrome Cache Entry: 112
ASCII text
dropped
Chrome Cache Entry: 113
Unicode text, UTF-8 text, with very long lines (34267), with no line terminators
downloaded
Chrome Cache Entry: 114
PNG image data, 50 x 50, 8-bit/color RGB, non-interlaced
dropped
Chrome Cache Entry: 115
MS Windows icon resource - 3 icons, 32x32 with PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced, 32 bits/pixel, 48x48 with PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced, 32 bits/pixel
downloaded
Chrome Cache Entry: 116
PNG image data, 192 x 192, 8-bit colormap, non-interlaced
dropped
Chrome Cache Entry: 117
ASCII text, with very long lines (27305)
downloaded
Chrome Cache Entry: 118
WebAssembly (wasm) binary module version 0x1 (MVP)
downloaded
Chrome Cache Entry: 119
JSON data
downloaded
Chrome Cache Entry: 120
MS Windows icon resource - 3 icons, 32x32 with PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced, 32 bits/pixel, 48x48 with PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced, 32 bits/pixel
dropped
Chrome Cache Entry: 121
ASCII text, with very long lines (10206)
dropped
Chrome Cache Entry: 122
Unicode text, UTF-8 text, with very long lines (454)
downloaded
Chrome Cache Entry: 123
Unicode text, UTF-8 text, with very long lines (65534), with no line terminators
downloaded
Chrome Cache Entry: 124
ASCII text, with very long lines (21394)
downloaded
Chrome Cache Entry: 125
ASCII text
downloaded
Chrome Cache Entry: 126
HTML document, Unicode text, UTF-8 text, with very long lines (451)
downloaded
Chrome Cache Entry: 127
PNG image data, 1 x 1, 8-bit gray+alpha, non-interlaced
downloaded
Chrome Cache Entry: 128
ASCII text, with very long lines (27305)
dropped
Chrome Cache Entry: 129
gzip compressed data, was "PlaneLogoPlain.json", last modified: Fri Dec 17 11:58:31 2021, from Unix, original size modulo 2^32 18810
downloaded
Chrome Cache Entry: 130
Unicode text, UTF-8 text, with very long lines (65534), with no line terminators
dropped
Chrome Cache Entry: 131
ASCII text, with very long lines (65536), with no line terminators
downloaded
Chrome Cache Entry: 132
ASCII text, with very long lines (21394)
dropped
Chrome Cache Entry: 133
ASCII text, with very long lines (9780)
dropped
Chrome Cache Entry: 134
ASCII text
dropped
Chrome Cache Entry: 135
ASCII text, with very long lines (65536), with no line terminators
dropped
Chrome Cache Entry: 90
HTML document, Unicode text, UTF-8 text, with very long lines (45662)
downloaded
Chrome Cache Entry: 91
Unicode text, UTF-8 text, with very long lines (9998)
downloaded
Chrome Cache Entry: 92
ASCII text, with very long lines (65536), with no line terminators
dropped
Chrome Cache Entry: 93
ASCII text, with very long lines (44841)
downloaded
Chrome Cache Entry: 94
PNG image data, 1123 x 2307, 4-bit colormap, non-interlaced
dropped
Chrome Cache Entry: 95
PNG image data, 1123 x 2307, 4-bit colormap, non-interlaced
downloaded
Chrome Cache Entry: 96
HTML document, Unicode text, UTF-8 text, with very long lines (45662)
dropped
Chrome Cache Entry: 97
Web Open Font Format (Version 2), TrueType, length 11056, version 1.0
downloaded
Chrome Cache Entry: 98
ASCII text, with very long lines (10206)
downloaded
Chrome Cache Entry: 99
Unicode text, UTF-8 text, with very long lines (454)
dropped
There are 37 hidden files, click here to show them.

Processes

Path
Cmdline
Malicious
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2684 --field-trial-handle=2608,i,14540920988098491866,6954823809956455996,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://telegram.jiefengbss.top/"
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5640 --field-trial-handle=2608,i,14540920988098491866,6954823809956455996,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://tg//login?token=AQLPowJnUIXXqtJRw4wZ_6_akubIe3AoU5A3EcPyV-rT_w
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2104 --field-trial-handle=1792,i,2555689974499604608,13631912587745979718,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8

URLs

Name
IP
Malicious
https://telegram.jiefengbss.top/
https://telegram.jiefengbss.top/rlottie-wasm.5e3833cedb8fb71c8d8e.js
43.128.51.186
https://web.telegram.org/a
unknown
https://t.me/
unknown
https://web.telegram.org/
unknown
https://telegram.jiefengbss.top/rlottie-wasm.wasm
43.128.51.186
https://telegra.ph/WebA-Beta-03-20
unknown
https://telegram.jiefengbss.top/1915.7c097c4f98f78164d509.js
43.128.51.186
https://t.me/_websync_?authed=0&version=10.4.5+A
149.154.167.99
https://telegram.jiefengbss.top/1649.23ef32650e96d33d6586.js
43.128.51.186
https://telegram.jiefengbss.top/3748.0fa60c5a44d4b42a0115.js
43.128.51.186
https://telegram.jiefengbss.top/8415.c61e007ed101c59e34dd.js
43.128.51.186
https://telegram.jiefengbss.top/trans.js
43.128.51.186
https://telegram.jiefengbss.top/9294.a20362bb7bd4d4aa799d.js
43.128.51.186
https://telegram.jiefengbss.top/icon-192x192.png
43.128.51.186
https://telegram.me/_websync_?authed=0&version=10.4.5+A
149.154.167.99
https://telegram.jiefengbss.top/favicon.ico
43.128.51.186
https://telegram.jiefengbss.top/8764.58763b7a689318950e51.js
43.128.51.186
https://telegram.jiefengbss.top/
https://telegram.jiefengbss.top/notification.mp3
43.128.51.186
https://github.com/rastikerdar/vazirmatn
unknown
https://telegram.jiefengbss.top/KFOmCnqEu92Fr1Mu4mxKKTU1Kg.465390c6e54c60f4a15f.woff2
43.128.51.186
https://bugs.telegram.org/?tag_ids=41&sort=time
unknown
https://telegram.jiefengbss.top/main.4087993f942398d56511.css
43.128.51.186
https://telegram.org/faq
unknown
https://telegram.jiefengbss.top/blank.8dd283bceccca95a48d8.png
43.128.51.186
https://ss3.4sqi.net/img/categories_v2/
unknown
https://telegram.jiefengbss.top/QrPlane.a921709f266564f65b7e.tgs
43.128.51.186
https://telegram.org/privacy
unknown
https://t.me/_websync_
unknown
https://telegram.jiefengbss.top/compatTest.js
43.128.51.186
https://telegram.jiefengbss.top/6839.01a53cbedf5d86d252ec.js
43.128.51.186
https://zws2.web.telegram.org/apiw1
149.154.167.99
https://telegram.jiefengbss.top/KFOlCnqEu92Fr1MmEU9fBBc4AMP6lQ.324b1e6d0f5ae7c6ab42.woff2
43.128.51.186
https://zws2.web.telegram.org/apiws
149.154.167.99
https://telegram.org/tos/mini-apps
unknown
https://telegram.jiefengbss.top/5802.36a9971f58c808c4a974.js
43.128.51.186
https://telegram.jiefengbss.top/2041.5fe028b52e13d7a937b4.js
43.128.51.186
https://telegram.me/_websync_;
unknown
https://telegram.jiefengbss.top/redirect.js
43.128.51.186
https://telegram.jiefengbss.top/chat-bg-pattern-light.ee148af944f6580293ae.png
43.128.51.186
https://telegram.jiefengbss.top/site.webmanifest
43.128.51.186
https://telegram.jiefengbss.top/main.49b3e83e3ef893a6bd65.js
43.128.51.186
https://telegram.jiefengbss.top/chat-bg-br.f34cc96fbfb048812820.png
43.128.51.186
https://telegram.jiefengbss.top/4680.ec5c4d9314039b5260e0.js
43.128.51.186
There are 34 hidden URLs, click here to show them.

Domains

Name
IP
Malicious
bg.microsoft.map.fastly.net
199.232.214.172
google.com
142.250.185.206
s-part-0044.t-0009.fb-t-msedge.net
13.107.253.72
zws2.web.telegram.org
149.154.167.99
telegram.me
149.154.167.99
t.me
149.154.167.99
www.google.com
142.250.185.132
telegram.jiefengbss.top
43.128.51.186
fp2e7a.wpc.phicdn.net
192.229.221.95
s-part-0032.t-0009.t-msedge.net
13.107.246.60

IPs

IP
Domain
Country
Malicious
142.250.185.132
www.google.com
United States
192.168.2.4
unknown
unknown
149.154.167.99
zws2.web.telegram.org
United Kingdom
192.168.2.6
unknown
unknown
239.255.255.250
unknown
Reserved
192.168.2.13
unknown
unknown
192.168.2.23
unknown
unknown
43.128.51.186
telegram.jiefengbss.top
Japan

DOM / HTML

URL
Malicious
https://telegram.jiefengbss.top/
https://telegram.jiefengbss.top/
https://telegram.jiefengbss.top/