IOC Report
https://idp.iso.org/realms/ws-iso/login-actions/action-token?key=eyJhbGciOiJIUzI1NiIsInR5cCIgOiAiSldUIiwia2lkIiA6ICI0NDY2Yzc5YS02MmUwLTQzY2MtYjBiOS00MWE5YjA3MzgwZGQifQ.eyJleHAiOjE3Mjk1MDM1NDMsImlhdCI6MTcyOTUwMjY0MywianRpIjoiMzRiMTkzODMtZjhlZS00Zjk2LWEwM2UtZTIxNTQ2YmM4NTVkIiwiaXNzIjoiaHR0cHM6Ly9pZHAu

loading gif

Files

File Path
Type
Category
Malicious
Chrome Cache Entry: 43
Web Open Font Format (Version 2), TrueType, length 37780, version 1.0
downloaded
Chrome Cache Entry: 44
MS Windows icon resource - 3 icons, 16x16, 8 bits/pixel, 32x32, 24 bits/pixel
downloaded
Chrome Cache Entry: 45
ASCII text
dropped
Chrome Cache Entry: 46
MS Windows icon resource - 3 icons, 16x16, 8 bits/pixel, 32x32, 24 bits/pixel
dropped
Chrome Cache Entry: 47
Web Open Font Format (Version 2), TrueType, length 17040, version 1.0
downloaded
Chrome Cache Entry: 48
ASCII text
downloaded
Chrome Cache Entry: 49
ASCII text
downloaded

Processes

Path
Cmdline
Malicious
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2228 --field-trial-handle=2192,i,1231324376558736503,5938949880496849384,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://idp.iso.org/realms/ws-iso/login-actions/action-token?key=eyJhbGciOiJIUzI1NiIsInR5cCIgOiAiSldUIiwia2lkIiA6ICI0NDY2Yzc5YS02MmUwLTQzY2MtYjBiOS00MWE5YjA3MzgwZGQifQ.eyJleHAiOjE3Mjk1MDM1NDMsImlhdCI6MTcyOTUwMjY0MywianRpIjoiMzRiMTkzODMtZjhlZS00Zjk2LWEwM2UtZTIxNTQ2YmM4NTVkIiwiaXNzIjoiaHR0cHM6Ly9pZHAuaXNvLm9yZy9yZWFsbXMvd3MtaXNvIiwiYXVkIjoiaHR0cHM6Ly9pZHAuaXNvLm9yZy9yZWFsbXMvd3MtaXNvIiwic3ViIjoiM2U0NDcyNjctMjM0Yy00NzE1LWFmNTEtZGUyZjNiZTA3ZjZlIiwidHlwIjoicmVzZXQtY3JlZGVudGlhbHMiLCJhenAiOiJ1aSIsIm5vbmNlIjoiMzRiMTkzODMtZjhlZS00Zjk2LWEwM2UtZTIxNTQ2YmM4NTVkIiwiZW1sIjoicmljaGFyZC5zdGFyckBsb2dpY2FsaXMuY29tIiwiYXNpZCI6ImY5Y2ZiY2NiLTQyY2ItNDI2Ni1iNjEyLTExYzE0NWM1YWRlNy5pSDFleWhrakVTdy45OGRjMzg2OC03N2NhLTRmZjMtYmFiMC1iMmUxNzI2OGY5MGQiLCJhc2lkIjoiZjljZmJjY2ItNDJjYi00MjY2LWI2MTItMTFjMTQ1YzVhZGU3LmlIMWV5aGtqRVN3Ljk4ZGMzODY4LTc3Y2EtNGZmMy1iYWIwLWIyZTE3MjY4ZjkwZCJ9.m3dBRyLjxBBLyKNqvA6_nLq6xD0BmtLNcj7Fx46baRg&execution=9eb99f14-82f8-4818-95c3-4eddf0e60cf3&client_id=ui&tab_id=iH1eyhkjESw"

URLs

Name
IP
Malicious
https://idp.iso.org/realms/ws-iso/login-actions/action-token?key=eyJhbGciOiJIUzI1NiIsInR5cCIgOiAiSldUIiwia2lkIiA6ICI0NDY2Yzc5YS02MmUwLTQzY2MtYjBiOS00MWE5YjA3MzgwZGQifQ.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.m3dBRyLjxBBLyKNqvA6_nLq6xD0BmtLNcj7Fx46baRg&execution=9eb99f14-82f8-4818-95c3-4eddf0e60cf3&client_id=ui&tab_id=iH1eyhkjESw
https://idp.iso.org/resources/cwrhd/login/ws-iso/js/iso_sso_utils.js
138.81.131.162
https://developer.mozilla.org/en-US/docs/Web/API/Document/cookie
unknown
https://fontawesome.com
unknown
https://idp.iso.org/resources/cwrhd/login/ws-iso/img/favicon.ico
138.81.131.162
https://idp.iso.org/resources/cwrhd/login/ws-iso/css/webstore_sso_common.css
138.81.131.162
https://cdn.iso.org/resources/img/appicons/iso/1.2.0/spritesheet-150.png
unknown
https://fontawesome.com/license
unknown
https://cdn.iso.org/resources/fonts/fontawesome/6.4.0/fa-solid-900.woff2
unknown
https://cdnjs.com/libraries/toastr.js
unknown
https://idp.iso.org/realms/ws-iso/login-actions/action-token?key=eyJhbGciOiJIUzI1NiIsInR5cCIgOiAiSldUIiwia2lkIiA6ICI0NDY2Yzc5YS02MmUwLTQzY2MtYjBiOS00MWE5YjA3MzgwZGQifQ.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.m3dBRyLjxBBLyKNqvA6_nLq6xD0BmtLNcj7Fx46baRg&execution=9eb99f14-82f8-4818-95c3-4eddf0e60cf3&client_id=ui&tab_id=iH1eyhkjESw
https://cdn.iso.org/resources/fonts/fontawesome/6.4.0/fa-solid-900.ttf
unknown
https://idp.iso.org/realms/ws-iso/login-actions/action-token?key=eyJhbGciOiJIUzI1NiIsInR5cCIgOiAiSldUIiwia2lkIiA6ICI0NDY2Yzc5YS02MmUwLTQzY2MtYjBiOS00MWE5YjA3MzgwZGQifQ.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.m3dBRyLjxBBLyKNqvA6_nLq6xD0BmtLNcj7Fx46baRg&execution=9eb99f14-82f8-4818-95c3-4eddf0e60cf3&client_id=ui&tab_id=iH1eyhkjESw#
There are 2 hidden URLs, click here to show them.

Domains

Name
IP
Malicious
idp.iso.org
138.81.131.162
s-part-0017.t-0009.t-msedge.net
13.107.246.45
www.google.com
216.58.206.36
fp2e7a.wpc.phicdn.net
192.229.221.95
s-part-0032.t-0009.t-msedge.net
13.107.246.60

IPs

IP
Domain
Country
Malicious
138.81.131.162
idp.iso.org
Switzerland
239.255.255.250
unknown
Reserved
192.168.2.4
unknown
unknown
216.58.206.36
www.google.com
United States

DOM / HTML

URL
Malicious
https://idp.iso.org/realms/ws-iso/login-actions/action-token?key=eyJhbGciOiJIUzI1NiIsInR5cCIgOiAiSldUIiwia2lkIiA6ICI0NDY2Yzc5YS02MmUwLTQzY2MtYjBiOS00MWE5YjA3MzgwZGQifQ.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.m3dBRyLjxBBLyKNqvA6_nLq6xD0BmtLNcj7Fx46baRg&execution=9eb99f14-82f8-4818-95c3-4eddf0e60cf3&client_id=ui&tab_id=iH1eyhkjESw
https://idp.iso.org/realms/ws-iso/login-actions/action-token?key=eyJhbGciOiJIUzI1NiIsInR5cCIgOiAiSldUIiwia2lkIiA6ICI0NDY2Yzc5YS02MmUwLTQzY2MtYjBiOS00MWE5YjA3MzgwZGQifQ.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.m3dBRyLjxBBLyKNqvA6_nLq6xD0BmtLNcj7Fx46baRg&execution=9eb99f14-82f8-4818-95c3-4eddf0e60cf3&client_id=ui&tab_id=iH1eyhkjESw#
https://idp.iso.org/realms/ws-iso/login-actions/action-token?key=eyJhbGciOiJIUzI1NiIsInR5cCIgOiAiSldUIiwia2lkIiA6ICI0NDY2Yzc5YS02MmUwLTQzY2MtYjBiOS00MWE5YjA3MzgwZGQifQ.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.m3dBRyLjxBBLyKNqvA6_nLq6xD0BmtLNcj7Fx46baRg&execution=9eb99f14-82f8-4818-95c3-4eddf0e60cf3&client_id=ui&tab_id=iH1eyhkjESw#