IOC Report
https://vondst.legalsense.nl/static/billing/vondst-mail-logo.jpg

loading gif

Files

File Path
Type
Category
Malicious
Chrome Cache Entry: 39
HTML document, Unicode text, UTF-8 text
dropped
Chrome Cache Entry: 40
HTML document, Unicode text, UTF-8 text
downloaded
Chrome Cache Entry: 41
JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 2031x836, components 3
downloaded

Processes

Path
Cmdline
Malicious
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2144 --field-trial-handle=1948,i,18081680380473525882,12367243239583161665,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://vondst.legalsense.nl/static/billing/vondst-mail-logo.jpg"

URLs

Name
IP
Malicious
https://vondst.legalsense.nl/static/billing/vondst-mail-logo.jpg
https://vondst.legalsense.nl/favicon.ico
81.171.31.143
https://support.legalsense.nl/hc/nl/sections/360003779554-Release-notes
unknown
https://vondst.legalsense.nl/static/billing/vondst-mail-logo.jpg
https://support.legalsense.nl/hc/nl/articles/360012382253-Configuring-Two-Factor-Authentication-2FA-
unknown
https://vondst.legalsense.nl/accounts/login/?next=/favicon.ico
81.171.31.143
https://support.legalsense.nl/hc/nl
unknown
https://support.legalsense.nl
unknown

Domains

Name
IP
Malicious
bg.microsoft.map.fastly.net
199.232.214.172
apps-nl-leaseweb-0002.legalsense.nl
81.171.31.143
s-part-0017.t-0009.fb-t-msedge.net
13.107.253.45
www.google.com
142.250.185.164
vondst.legalsense.nl
unknown

IPs

IP
Domain
Country
Malicious
239.255.255.250
unknown
Reserved
81.171.31.143
apps-nl-leaseweb-0002.legalsense.nl
Netherlands
142.250.185.164
www.google.com
United States
192.168.2.6
unknown
unknown

DOM / HTML

URL
Malicious
https://vondst.legalsense.nl/static/billing/vondst-mail-logo.jpg
https://vondst.legalsense.nl/static/billing/vondst-mail-logo.jpg