SUSPICIOUS — bf04a71ee520b069080f965192f436c1cdda7fd017fb0a4b581b255d3b8bd1ad
SUSPICIOUS — bf04a71ee520b069080f965192f436c1cdda7fd017fb0a4b581b255d3b8bd1ad is a html sample analyzed by MalwareAnalyzer by Cyble with a suspicious verdict (54/100). 1 of 50 detection engines flagged it.
Identification
- SHA-256:
bf04a71ee520b069080f965192f436c1cdda7fd017fb0a4b581b255d3b8bd1ad - SHA-1:
3c66773d215c0de66363431cb888fee81d102fb0 - MD5:
1609f0350cb3e9abfc6c70c6e3d2e53e - ssdeep:
1536:ul3WP9ZSNxQp0NcNtxNSNeNBNYNoNJNbNw+SQ:ulGP9ZSNy0NcNtxNSNeNBNYNoNJNbNwK - TLSH:
T1F0399216A2F47D4F424594CE6090524D8CA5BDFFB413B0EE9AE49B8B489CF62F439423 - Submitted as: bf04a71ee520b069080f965192f436c1cdda7fd017fb0a4b581b255d3b8bd1ad
- File type: html · Size: 85648 bytes
- Verdict: suspicious (54/100)
Detections (1 of 50 engines)
- Emsisoft (Emergency Kit): Trojan.Agent.FKLR
Why this verdict
The suspicious score of 54/100 is the fusion of 2 weighted signals:
- Obfuscated javascript script: dynamic-exec (rule
script-deobfuscation) - static signal, weight 0.55, confidence 0.75 - Embedded network infrastructure: https://1.bp.blogspot.com/-ksSw6Ey_Uqo/YNmCfgZhsnI/AAAAAAAABv8/Q8iGrcbJoREasJHYXShlXZ21zt6wm2ZcwCLcBGAsYHQ/s16000/og.png, https://www.ebay.com/, https://cdn.jsdelivr.cc/npm/jquery@3.6.0/dist/jquery.min.js - static signal, weight 0.35, confidence 0.60
Dynamic analysis
No runtime behaviour was captured for this sample, so the analysis above is static only. That is a limit of this run rather than evidence the sample does nothing.
Embedded URLs
- https://1.bp.blogspot.com/-ksSw6Ey_Uqo/YNmCfgZhsnI/AAAAAAAABv8/Q8iGrcbJoREasJHYXShlXZ21zt6wm2ZcwCLcBGAsYHQ/s16000/og.png
- https://www.ebay.com/
- https://cdn.jsdelivr.cc/npm/jquery@3.6.0/dist/jquery.min.js
- https://cdn.jsdelivr.cc/npm/bootstrap@4.6.0/dist/js/bootstrap.min.js
- https://cdn.jsdelivr.cc/npm/sweetalert2@10.16.0/dist/sweetalert2.all.min.js
- https://cdn.jsdelivr.cc/npm/lazyload@2.0.0-rc.2/lazyload.min.js
- https://cdn.jsdelivr.cc/npm/popper.js@1.16.1/dist/umd/popper.min.js
- https://cdn.jsdelivr.cc/npm/bootstrap@4.6.0/dist/css/bootstrap.min.css
- https://1.bp.blogspot.com/-TG6UrPbh-f8/YNl1jr0uQSI/AAAAAAAABt4/75GpX_bMLtEZa0qfXfQaV6TJcMYzky36QCLcBGAsYHQ/s16000/favicon_ebay.ico
- https://www.googletagmanager.com/gtag/js?id=G-KJRR0Q6NEE
- https://1.bp.blogspot.com/-RAFqFKaHj7k/YNl8rCmeQWI/AAAAAAAABu0/muuXpi2Aqtk4tim8F1dcU4djK3Mmil8vgCLcBGAsYHQ/s16000/ebay.png
- https://1.bp.blogspot.com/-DJGpTA-BLUU/YNl-vQ-YRVI/AAAAAAAABvU/XHRmDIJ0cn8Sp87bSzCtYcjtjkcwFN0IgCLcBGAsYHQ/s16000/ebay_header.png
- https://1.bp.blogspot.com/-tVeD809-mSU/YNl1i5myxSI/AAAAAAAABts/5Smvj7iC_ag5YEp8pGiO-ustM5mg1cXyACLcBGAsYHQ/s16000/ebay_img.jpg
- https://1.bp.blogspot.com/-Lmcfr0tvUJ8/YNl1i6jdr8I/AAAAAAAABto/uJWo8yYQhIMkmdA-r0PvU9sCuHE-UVjIACLcBGAsYHQ/s16000/ebay_LOGO.jpg
- https://1.bp.blogspot.com/-CK5rYc5a4MY/YNl1jxb1q_I/AAAAAAAABuA/kGDiXAPKuiodTbhG93LDhmNNyx4Ie7ldgCLcBGAsYHQ/s16000/outbox_facebook.png
- https://1.bp.blogspot.com/-qa0pVWCHod8/YKuuSNzx7AI/AAAAAAAABqs/yJdB27ONsJEzhlpBTPMLPxBQxPd3jXqTgCLcBGAsYHQ/s16000/box1.png
- https://1.bp.blogspot.com/-5zjHRLCnfiM/YKuuSHUdAhI/AAAAAAAABqk/kHKLfdfBULgUaOTvFw0xJ7v8k-H5SyPtQCLcBGAsYHQ/s16000/box2.png
- https://1.bp.blogspot.com/-lTFLwFj5iAw/YNmAqcIU2XI/AAAAAAAABvs/ssF9NF2ctSMXzZr4ea9eKiWBQWLnU1hpwCLcBGAsYHQ/s16000/inbox_facebook.png
- https://1.bp.blogspot.com/-320k2STjtp8/YKuuSNbYMSI/AAAAAAAABqo/e3KsK79zMmcBJSPl5x8b5JZUjfiJDEYLgCLcBGAsYHQ/s16000/box3.png
- https://uprimp.com/bnr.php?section=General&pub=593174&format=300x50&ga=g
- https://1.bp.blogspot.com/-aFHXix0cq2c/YHgCmEPw5xI/AAAAAAAABAI/LI1oUlRa6oYUMGcwrxIeJPf1xCCkDOf4ACLcBGAsYHQ/s16000/35.jpg
- https://1.bp.blogspot.com/-s43CntDzIBc/YHgCktUJZ6I/AAAAAAAAA_k/wnguN39yjrMUTk-xcJNl-sHznogBWJ_SQCLcBGAsYHQ/s16000/26.jpg
- https://1.bp.blogspot.com/-GcUECoPSoUQ/YFMhNFFgIhI/AAAAAAAABss/LmWdBuxr-eEYkJSf7pakIz8PQueAwK1dwCLcBGAsYHQ/s0/n22.png
- https://1.bp.blogspot.com/-1SVwIIXsq6s/YFmmNtbTF8I/AAAAAAAAAPM/6Wd3onQP0RMPXtGhf_6eFLnbJKpInw9RwCLcBGAsYHQ/s0/8.jpg
- https://1.bp.blogspot.com/-xgccQJMIV-I/YFmmMnfnoFI/AAAAAAAAAO4/af6-Sudw4RIJlPx3zHezUL6XfnsjWtAKQCLcBGAsYHQ/s0/11.jpg
Embedded domains
- 1.bp.blogspot.com
- www.ebay.com
- cdn.jsdelivr.cc
- www.googletagmanager.com
- c.top
- benfly.net
- uprimp.com
- v.gapis.xyz
- www.w3.org
- hm.baidu.com
Embedded IP addresses
- 41.17.79.44
Latest analyzed threats · ATT&CK coverage
Analyzed on MalwareAnalyzer by Cyble · Open interactive report