MALICIOUS — f55ccc0ebb7dad02ef05abb00b33315ed3647690978b490f46ce83a4145247ee
MALICIOUS — f55ccc0ebb7dad02ef05abb00b33315ed3647690978b490f46ce83a4145247ee is a html sample analyzed by MalwareAnalyzer by Cyble with a malicious verdict (93/100). 3 of 50 detection engines flagged it.
Identification
- SHA-256:
f55ccc0ebb7dad02ef05abb00b33315ed3647690978b490f46ce83a4145247ee - SHA-1:
594c09e173611600b4f4fa2292aff71cf1b07f87 - MD5:
7869b243b283f5e8b27efbd17a704bad - ssdeep:
768:vnppmKNGONA5l4tuoCjWiBgGJrhxIp6P14FfCpJ2jUQla:vnjvGONA5luuvZB/rhxIUWFfCp5 - TLSH:
T15B33D71A7662264F1CB081262DACC7E450DBDA5BE53782EDD8E3DF48BC78C6078444AD - Submitted as: f55ccc0ebb7dad02ef05abb00b33315ed3647690978b490f46ce83a4145247ee
- File type: html · Size: 49075 bytes
- Verdict: malicious (93/100)
Detections (3 of 50 engines)
- ClamAV (daily): Html.Exploit.Agent-6598769-0
- Microsoft Defender: TrojanClicker:JS/Faceliker.A
- Kaspersky (KVRT): HEUR:Trojan.Script.Generic
Why this verdict
The malicious score of 93/100 is the fusion of 3 weighted signals:
- ClamAV (daily) flagged Html.Exploit.Agent-6598769-0 (rule
Html.Exploit.Agent-6598769-0) - engine signal, weight 0.90, confidence 0.95 - Obfuscated javascript script: dynamic-exec (layers: concat) (rule
script-deobfuscation) - static signal, weight 0.55, confidence 0.75 - Embedded network infrastructure: https://www.blogger.com/static/v1/widgets/1394523530-widget_css_bundle.css, http://funny-amazing-pictures.blogspot.com/favicon.ico, http://funny-amazing-pictures.blogspot.com/search/label/celebrity%2Bpictures - static signal, weight 0.35, confidence 0.60
Dynamic analysis
No runtime behaviour was captured for this sample, so the analysis above is static only. That is a limit of this run rather than evidence the sample does nothing.
Embedded URLs
- http://www.w3.org/1999/xhtml
- http://www.google.com/2005/gml/b
- http://www.google.com/2005/gml/data
- http://www.google.com/2005/gml/expr
- https://www.blogger.com/static/v1/widgets/1394523530-widget_css_bundle.css
- http://funny-amazing-pictures.blogspot.com/favicon.ico
- http://funny-amazing-pictures.blogspot.com/search/label/celebrity%2Bpictures
- http://funny-amazing-pictures.blogspot.com/feeds/posts/default
- http://funny-amazing-pictures.blogspot.com/feeds/posts/default?alt=rss
- https://www.blogger.com/feeds/7415099783983527079/posts/default
- https://www.blogger.com/profile/17793692538243028049
- http://4.bp.blogspot.com/_0vKyxg80gxY/SvOnouPUxpI/AAAAAAAAAMg/zDCXZjGoTtQ/s1600/ico-quote.png
- http://1.bp.blogspot.com/_0vKyxg80gxY/SvOl_YEKRwI/AAAAAAAAAMI/J5yJ0SVTKT0/s1600/ico-rss.gif
- http://1.bp.blogspot.com/_u4gySN2ZgqE/SosvnavWq0I/AAAAAAAAArk/yL95WlyTqr0/s400/noimage.png
- http://bloggergadgets.googlecode.com/files/related_posts_with_thumbnails_min.js
- http://ajax.googleapis.com/ajax/libs/jquery/1.5.2/jquery.min.js
- https://www.blogger.com/dyn-css/authorization.css?targetBlogID=7415099783983527079&
- http://rcm.amazon.com/e/cm?t=hotscarjohawl-20&o=1&p=8&l=as1&asins=B0085RUZ7S&ref=tf_til&fc1=000000&IS2=1<1=_blank&m=amazon&lc1=0000FF&bc1=000000&bg1=FFFFFF&f=ifr
- http://rcm.amazon.com/e/cm?t=hotscarjohawl-20&o=1&p=8&l=as1&asins=B004KZJ0UM&ref=tf_til&fc1=000000&IS2=1<1=_blank&m=amazon&lc1=0000FF&bc1=000000&bg1=FFFFFF&f=ifr
- https://apis.google.com/js/plusone.js
- http://funny-amazing-pictures.blogspot.com/
- http://ads.clicksor.com/newServing/showAd.php?nid=1&
- http://www.yesadvertising.com
- http://funny-amazing-pictures.blogspot.com/2012/07/alexis-knapp-hot-alexis-knapp-model.html
- http://3.bp.blogspot.com/-jFio_xjhjnE/T0-wrFbOMoI/AAAAAAAALyI/LBF1_aItTYM/w72-h72-p-k-no-nu/25.jpg
Embedded domains
- www.w3.org
- www.google.com
- www.blogger.com
- funny-amazing-pictures.blogspot.com
- 4.bp.blogspot.com
- 1.bp.blogspot.com
- bloggergadgets.googlecode.com
- ajax.googleapis.com
- blogspot.com
- rcm.amazon.com
- apis.google.com
- pagead2.googlesyndication.com
- ads.clicksor.com
- www.yesadvertising.com
- 3.bp.blogspot.com
- www.amazon.com
- www.blogblog.com
Latest analyzed threats · ATT&CK coverage
Analyzed on MalwareAnalyzer by Cyble · Open interactive report