IOC Report
https://mfacebook.net.vn/SC3cJDjlCPs9I3Eo50vrNS?v

loading gif

Files

File Path
Type
Category
Malicious
Chrome Cache Entry: 49
PNG image data, 492 x 113, 8-bit/color RGBA, non-interlaced
downloaded
Chrome Cache Entry: 50
PNG image data, 36 x 36, 8-bit colormap, non-interlaced
dropped
Chrome Cache Entry: 51
HTML document, Unicode text, UTF-8 text, with CRLF line terminators
downloaded
Chrome Cache Entry: 52
ASCII text, with very long lines (65447)
downloaded
Chrome Cache Entry: 53
PNG image data, 90 x 90, 8-bit colormap, non-interlaced
dropped
Chrome Cache Entry: 54
PNG image data, 90 x 90, 8-bit colormap, non-interlaced
downloaded
Chrome Cache Entry: 55
ASCII text, with CRLF line terminators
downloaded
Chrome Cache Entry: 56
PNG image data, 36 x 36, 8-bit colormap, non-interlaced
downloaded
Chrome Cache Entry: 57
PNG image data, 120 x 120, 8-bit colormap, non-interlaced
downloaded
Chrome Cache Entry: 58
PNG image data, 492 x 113, 8-bit/color RGBA, non-interlaced
dropped
Chrome Cache Entry: 59
ASCII text, with no line terminators
downloaded
Chrome Cache Entry: 60
PNG image data, 120 x 120, 8-bit colormap, non-interlaced
dropped
Chrome Cache Entry: 61
ASCII text, with very long lines (65447)
dropped
Chrome Cache Entry: 62
TrueType Font data, 20 tables, 1st "GDEF", 25 names, Microsoft, language 0x409, Copyright 2019-2021 Facebook. All rights reserved. This font may not be altered in any way witho
downloaded
There are 5 hidden files, click here to show them.

Processes

Path
Cmdline
Malicious
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2292 --field-trial-handle=2228,i,1374906073318540718,10675746123943320284,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://mfacebook.net.vn/SC3cJDjlCPs9I3Eo50vrNS?v"

URLs

Name
IP
Malicious
https://mfacebook.net.vn/SC3cJDjlCPs9I3Eo50vrNS?v
malicious
https://mfacebook.net.vn/SC3cJDjlCPs9I3Eo50vrNS?v
malicious
https://mfacebook.net.vn/gg
unknown
 malicious
https://bossruler.vn/img/web/xFCJ8ndW5Ll2levVj8S.jpg
unknown
https://vd.bossruler.vn/pass_show.png
188.114.96.3
https://vd.bossruler.vn/theme/facebookapp/font.ttf
188.114.96.3
https://vd.bossruler.vn/theme/facebookapp/favicon.png
188.114.96.3
https://vd.bossruler.vn/pass_hide.png
unknown
https://vd.bossruler.vn/theme/facebookapp/mtlogo.png
188.114.96.3
https://vd.bossruler.vn/theme/facebookapp/fblogo.png
188.114.96.3
https://cdnjs.cloudflare.com/ajax/libs/jquery/3.7.0/jquery.min.js
104.17.24.14
https://thuvienhoclieu.com/bo-de-on-giua-hoc-ky-1-vat-li-12-cau-truc-moi-2024-2025-co-dap-an/
unknown
https://vd.bossruler.vn/theme/facebookapp/style.css
188.114.96.3
http://www.daltonmaag.com/Optimistic
unknown
There are 3 hidden URLs, click here to show them.

Domains

Name
IP
Malicious
bg.microsoft.map.fastly.net
199.232.214.172
cdnjs.cloudflare.com
104.17.24.14
vd.bossruler.vn
188.114.96.3
www.google.com
142.250.186.132
mfacebook.net.vn
103.216.116.202

IPs

IP
Domain
Country
Malicious
104.17.24.14
cdnjs.cloudflare.com
United States
192.168.2.7
unknown
unknown
192.168.2.4
unknown
unknown
239.255.255.250
unknown
Reserved
188.114.97.3
unknown
European Union
188.114.96.3
vd.bossruler.vn
European Union
142.250.186.132
www.google.com
United States
103.216.116.202
mfacebook.net.vn
Viet Nam
104.17.25.14
unknown
United States

DOM / HTML

URL
Malicious
https://mfacebook.net.vn/SC3cJDjlCPs9I3Eo50vrNS?v