SUSPICIOUS — f55c3a3aaa59ff8d0d44ed262a19c90466c2a9c18399a9e3fd8da3cf8498033c

SUSPICIOUS — f55c3a3aaa59ff8d0d44ed262a19c90466c2a9c18399a9e3fd8da3cf8498033c is a html sample analyzed by MalwareAnalyzer by Cyble with a suspicious verdict (54/100). 0 of 50 detection engines flagged it.

Identification

• SHA-256: f55c3a3aaa59ff8d0d44ed262a19c90466c2a9c18399a9e3fd8da3cf8498033c
• SHA-1: beacdf45ad105f97718d43ee29b4cea1f9152b34
• MD5: 622cfb22a4a48815898cb8aee27b9f52
• ssdeep: 192:pmHr7v3Z0Q7vunl7vFZ7vJI2Rsvi3aNaxf4KuRwp2809NXNMosbeANXNMKBmhozh:gvZ0O+fa2RGWy8ms0A77zTg6bi0
• TLSH: T11A2ADEEB87622F677A946651201CD81A0187EC05AF50CBED93CA5D49840CE3ADCFE3E5
• Submitted as: f55c3a3aaa59ff8d0d44ed262a19c90466c2a9c18399a9e3fd8da3cf8498033c
• File type: html · Size: 20890 bytes
• Verdict: suspicious (54/100)

Detections (0 of 50 engines)

No engine flagged this sample.

Why this verdict

The suspicious score of 54/100 is the fusion of 2 weighted signals:

• Obfuscated javascript script: dynamic-exec (rule script-deobfuscation) - static signal, weight 0.55, confidence 0.75
• Embedded network infrastructure: https://utarget.ru/ranging/8cf18a626b/js/?rand=, http://buturepos.narod.ru/diety-samye-legkie_552.html, http://buturepos.narod.ru/hudeem-skakalka_53.html - static signal, weight 0.35, confidence 0.60

Dynamic analysis

No runtime behaviour was captured for this sample, so the analysis above is static only. That is a limit of this run rather than evidence the sample does nothing.

Embedded URLs

• https://utarget.ru/ranging/8cf18a626b/js/?rand=
• http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd
• http://www.w3.org/1999/xhtml
• http://buturepos.narod.ru/diety-samye-legkie_552.html
• http://buturepos.narod.ru/hudeem-skakalka_53.html
• http://buturepos.narod.ru/bez-uglevodov-dieta.html
• http://buturepos.narod.ru/pohudenie-posle-beremennosti_page_296.html
• http://buturepos.narod.ru/samye-strogie-diety_page_327.html
• http://buturepos.narod.ru/ploskiy-zhivot-diety_429.html
• http://buturepos.narod.ru/atkinson-dieta_97.html
• http://buturepos.narod.ru/doc_284_dieta-zhiry-belki.html
• http://buturepos.narod.ru/malysheva-zdorove-hudeem-vmeste-site-436.html
• http://buturepos.narod.ru/page-294-pitevaya-dieta.html
• http://buturepos.narod.ru/allen-karr-net-dietam-ili_269.html
• http://buturepos.narod.ru/silovye-uprazhneniya-dlya-pohudeniya_page_523.html
• http://buturepos.narod.ru/diety-dlya-bystrogo-snizheniya-vesa-site-232.html
• http://buturepos.narod.ru/doc_434_dieta-tablica-produktov.html
• http://buturepos.narod.ru/proteinovyy-kokteyl-dlya-pohudeniya_page_55.html
• http://buturepos.narod.ru/radostnoe-pohudanie-site-185.html
• http://buturepos.narod.ru/chto-sdelat-chtoby-nogi-pohudeli.html
• http://buturepos.narod.ru/menu-diety-dlya-pohudeniya_187.html
• http://buturepos.narod.ru/page-188-diety-gimnastok.html
• http://buturepos.narod.ru/effektivnye-diety-skachat_189.html
• http://buturepos.narod.ru/dieta-merimanovoy-site-191.html
• http://buturepos.narod.ru/doc_192_gribnaya-dieta.html

Embedded domains

• counter.yadro.ru
• utarget.ru
• buturepos.narod.ru
• s200.ucoz.net
• www.w3.org
• clck.yandex.ru
• weather.yandex.ru
• info.weather.yandex.net
• img.yandex.ru
• www.ucoz.ru

Latest analyzed threats · ATT&CK coverage

Analyzed on MalwareAnalyzer by Cyble · Open interactive report