CLEAN — 3262b123ed6702efe637e99ab920adf4303c371d806a0dcbc3ac5f6bdaa77834

CLEAN — 3262b123ed6702efe637e99ab920adf4303c371d806a0dcbc3ac5f6bdaa77834 is a html sample analyzed by MalwareAnalyzer by Cyble with a clean verdict (21/100). 3 of 53 detection engines flagged it.

Identification

• SHA-256: 3262b123ed6702efe637e99ab920adf4303c371d806a0dcbc3ac5f6bdaa77834
• SHA-1: ce9771e55485084c160ba8df3445f828841fb7a3
• MD5: a920b5185dfc19c497d55675e51e8c47
• ssdeep: 48:7ErAEKYm5S5d+5qeuXmZ762a4Hkk2l+Z5OAGvWKILbBACWF9LbTGbdrj:7gADK5w5P/vCIm9ibZ
• TLSH: T11C15521B7DE16ACBC0544BE7D83271056501E063278D22C006B8EBFCFDB2BD86A84278
• Submitted as: 3262b123ed6702efe637e99ab920adf4303c371d806a0dcbc3ac5f6bdaa77834
• File type: html · Size: 2271 bytes
• Verdict: clean (21/100)

Detections (3 of 53 engines)

• Microsoft Defender: Trojan:JS/Redirector.HNAA!MTB
• Emsisoft (Emergency Kit): Trojan.JS.Phishing.DJ
• Kaspersky (KVRT): HEUR:Trojan.Script.Generic

Why this verdict

The clean score of 21/100 is the fusion of 1 weighted signal:

• Embedded network infrastructure: http://www.cookiecasino.ru/tds/prtt.cgi?3&txiwy=0&elvmn=0&uheub=1&uaxvl=0&bonus=cookiecasino&ask=, https://www.cookiecasino.ru/tds/prtt.cgi?3&txiwy=0&elvmn=0&uheub=1&uaxvl=0&bonus=cookiecasino&ask= - static signal, weight 0.35, confidence 0.60

Dynamic analysis

No runtime behaviour was captured for this sample, so the analysis above is static only. That is a limit of this run rather than evidence the sample does nothing.

Embedded URLs

• http://www.cookiecasino.ru/tds/prtt.cgi?3&txiwy=0&elvmn=0&uheub=1&uaxvl=0&bonus=cookiecasino&ask=
• https://www.cookiecasino.ru/tds/prtt.cgi?3&txiwy=0&elvmn=0&uheub=1&uaxvl=0&bonus=cookiecasino&ask=

Embedded domains

• www.cookiecasino.ru

Latest analyzed threats · ATT&CK coverage

Analyzed on MalwareAnalyzer by Cyble · Open interactive report