IOC Report
http://www.holidaybunch.com

loading gif

Files

File Path
Type
Category
Malicious
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 23 18:12:59 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 23 18:12:59 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 6 08:05:01 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 23 18:12:59 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 23 18:12:59 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
dropped
C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk
MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 23 18:12:59 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
dropped
Chrome Cache Entry: 57
gzip compressed data, max speed, from Unix, original size modulo 2^32 282
downloaded
Chrome Cache Entry: 59
gzip compressed data, from Unix, original size modulo 2^32 76776
downloaded
Chrome Cache Entry: 61
Web Open Font Format (Version 2), TrueType, length 52648, version 1.0
downloaded
Chrome Cache Entry: 63
ASCII text, with very long lines (33229)
downloaded

URLs

Name
IP
Malicious
http://www.holidaybunch.com
malicious
http://www.holidaybunch.com/
188.127.227.229
 malicious
http://www.holidaybunch.com/favicon.ico
188.127.227.229
 malicious
http://www.holidaybunch.com/Just%20a%20moment..._files/v1(1)
188.127.227.229
 malicious

Domains

Name
IP
Malicious
www.holidaybunch.com
188.127.227.229
 malicious
use.fontawesome.com
unknown
 malicious
www.google.com
142.250.181.228
i.ibb.co
162.19.58.161

IPs

IP
Domain
Country
Malicious
188.127.227.229
www.holidaybunch.com
Russian Federation
malicious
142.250.186.78
unknown
United States
162.19.58.160
unknown
United States
162.19.58.161
i.ibb.co
United States
172.67.142.245
unknown
United States
142.251.5.84
unknown
United States
192.168.2.16
unknown
unknown
172.217.18.3
unknown
United States
142.250.185.110
unknown
United States
239.255.255.250
unknown
Reserved
142.250.181.228
www.google.com
United States
172.217.16.196
unknown
United States
172.217.16.195
unknown
United States
There are 3 hidden IPs, click here to show them.