SUSPICIOUS — 70618060cc2eb58fcaf5dd8c85c95325c980687337be146e486513fc3ac1ed09
SUSPICIOUS — 70618060cc2eb58fcaf5dd8c85c95325c980687337be146e486513fc3ac1ed09 is a html sample analyzed by MalwareAnalyzer by Cyble with a suspicious verdict (54/100). 1 of 50 detection engines flagged it.
Identification
- SHA-256:
70618060cc2eb58fcaf5dd8c85c95325c980687337be146e486513fc3ac1ed09 - SHA-1:
926c32f286ba757036d0e380fdbcbe68d9c73ea5 - MD5:
df8e134f6948ea527fff168f1022f1a0 - ssdeep:
3072:oahd4Cp5ZPyQOy6agd4GTIoC+S/f0veE3/D6f6el9QFDkNva2:oREf0veE8 - TLSH:
T1C23F08AF7B015FA395D1504093E80F5CA1CAF88719282A5BC252CFC99D9DF01907A6EF - Submitted as: 70618060cc2eb58fcaf5dd8c85c95325c980687337be146e486513fc3ac1ed09
- File type: html · Size: 163739 bytes
- Verdict: suspicious (54/100)
Detections (1 of 50 engines)
- Emsisoft (Emergency Kit): Trojan.JS.Redirector.BWY
Why this verdict
The suspicious score of 54/100 is the fusion of 2 weighted signals:
- Obfuscated javascript script: dynamic-exec, defense-evasion (layers: base64+char-code+concat) (rule
script-deobfuscation) - static signal, weight 0.55, confidence 0.75 - Embedded network infrastructure: https://yoast.com/wordpress/plugins/seo/, https://zestdanceworkshops.co.uk/, https://static.wixstatic.com/media/579034_c3a2ac125ed24c74b100690e03a2953c~mv2.png - static signal, weight 0.35, confidence 0.60
Dynamic analysis
No runtime behaviour was captured for this sample, so the analysis above is static only. That is a limit of this run rather than evidence the sample does nothing.
Embedded URLs
- https://yoast.com/wordpress/plugins/seo/
- https://zestdanceworkshops.co.uk/
- https://static.wixstatic.com/media/579034_c3a2ac125ed24c74b100690e03a2953c~mv2.png
- https://schema.org
- https://zestdanceworkshops.co.uk/#organization
- https://zestdanceworkshops.co.uk/#logo
- https://zestdanceworkshops.co.uk/wp-content/uploads/2017/06/Zest-web-logo.png
- https://zestdanceworkshops.co.uk/#website
- https://zestdanceworkshops.co.uk/#primaryimage
- https://zestdanceworkshops.co.uk/#webpage
- https://zestdanceworkshops.co.uk/#breadcrumb
- https://zestdanceworkshops.co.uk/feed/
- https://zestdanceworkshops.co.uk/comments/feed/
- https://zestdanceworkshops.co.uk/wp-includes/css/dist/block-library/style.min.css?ver=5.7.4
- https://zestdanceworkshops.co.uk/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.5.1
- https://zestdanceworkshops.co.uk/wp-content/plugins/cookie-law-info/public/css/cookie-law-info-public.css?ver=2.0.6
- https://zestdanceworkshops.co.uk/wp-content/plugins/cookie-law-info/public/css/cookie-law-info-gdpr.css?ver=2.0.6
- https://zestdanceworkshops.co.uk/wp-content/themes/fitness-club/style.crush.css?ver=5.7.4
- https://zestdanceworkshops.co.uk/wp-content/themes/fitness-club/css/viewport-buggyfill.css?ver=5.7.4
- https://zestdanceworkshops.co.uk/wp-content/themes/fitness-club/css/magnific-popup.css?ver=5.7.4
- https://zestdanceworkshops.co.uk/wp-content/themes/fitness-club/css/ie9.css?ver=5.7.4
- https://fonts.googleapis.com/css?family=Crimson+Text%3A100%2C200%2C300%2C400%2C500%2C600%2C700%2C800%2C900%2C100italic%2C200italic%2C300italic%2C400italic%2C500italic%2C600italic%2C700italic%2C800italic%2C900italic%7CDosis%3A100%2C200%2C300%2C400%2C500%2C600%2C700%2C800%2C900%2C100italic%2C200italic%2C300italic%2C400italic%2C500italic%2C600italic%2C700italic%2C800italic%2C900italic%7CMontserrat%3A100%2C200%2C300%2C400%2C500%2C600%2C700%2C800%2C900%2C100italic%2C200italic%2C300italic%2C400italic%2C500italic%2C600italic%2C700italic%2C800italic%2C900italic%7CDosis%3A100%2C200%2C300%2C400%2C500%2C600%2C700%2C800%2C900%2C100italic%2C200italic%2C300italic%2C400italic%2C500italic%2C600italic%2C700italic%2C800italic%2C900italic%7CDosis%3A100%2C200%2C300%2C400%2C500%2C600%2C700%2C800%2C900%2C100italic%2C200italic%2C300italic%2C400italic%2C500italic%2C600italic%2C700italic%2C800italic%2C900italic&
- https://zestdanceworkshops.co.uk/wp-content/themes/fitness-club/framework/css/style.css?ver=5.7.4
- https://zestdanceworkshops.co.uk/wp-includes/js/jquery/jquery.min.js?ver=3.5.1
- https://zestdanceworkshops.co.uk/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2
Embedded domains
- yoast.com
- zestdanceworkshops.co.uk
- static.wixstatic.com
- schema.org
- www.google.com
- fonts.googleapis.com
- s.w.org
- api.w.org
- m0n.co
- www.google-analytics.com
- twitter.com
- youtu.be
- www.youtube.com
- www.zestdanceworkshops.co.uk
- weddingseo.co.uk
- platform.twitter.com
- maps.googleapis.com
- adsnet.work
- yourservice.live
Latest analyzed threats · ATT&CK coverage
Analyzed on MalwareAnalyzer by Cyble · Open interactive report