analyze malware
- Huge database of samples and IOCs
- Custom VM setup
- Unlimited submissions
- Interactive approach
| URL: | https://eatcells.com/landing/ |
| Full analysis: | https://app.any.run/tasks/040ae2ae-11c1-4273-89a6-f68252819ba0 |
| Verdict: | No threats detected |
| Analysis date: | November 04, 2018, 04:32:12 |
| OS: | Windows 7 Professional Service Pack 1 (build: 7601, 32 bit) |
| Indicators: | |
| MD5: | 9F40FD9EBDC870FE1EF4F37E10E17643 |
| SHA1: | 0F234A1EB9ACBF7A3C0C722813FCA5E63D024869 |
| SHA256: | 18949ACE45461AB21DAF2DE8C13D1114940A3A336ED97C69730A7EF1E42067BC |
| SSDEEP: | 3:N8lGsJMKSE10:2cU10 |
MALICIOUS
No malicious indicators.SUSPICIOUS
No suspicious indicators.INFO
Creates files in the user directory
- iexplore.exe (PID: 1752)
- iexplore.exe (PID: 2108)
Reads internet explorer settings
- iexplore.exe (PID: 1752)
Changes internet zones settings
- iexplore.exe (PID: 2108)
Reads Internet Cache Settings
- iexplore.exe (PID: 1752)
Application launched itself
- iexplore.exe (PID: 2108)
Reads settings of System Certificates
- iexplore.exe (PID: 2108)
Find more information about signature artifacts and mapping to MITRE ATT&CK™ MATRIX at the full report
Total processes
35
Monitored processes
2
Malicious processes
0
Suspicious processes
0
Behavior graph
Click at the process to see the details
Process information
PID | CMD | Path | Indicators | Parent process |
|---|---|---|---|---|
| 2108 | "C:\Program Files\Internet Explorer\iexplore.exe" -nohome | C:\Program Files\Internet Explorer\iexplore.exe | explorer.exe | |
User: admin Company: Microsoft Corporation Integrity Level: MEDIUM Description: Internet Explorer Version: 8.00.7600.16385 (win7_rtm.090713-1255) | ||||
| 1752 | "C:\Program Files\Internet Explorer\iexplore.exe" SCODEF:2108 CREDAT:71937 | C:\Program Files\Internet Explorer\iexplore.exe | iexplore.exe | |
User: admin Company: Microsoft Corporation Integrity Level: LOW Description: Internet Explorer Version: 8.00.7600.16385 (win7_rtm.090713-1255) | ||||
Total events
439
Read events
367
Write events
0
Delete events
0
Modification events
Executable files
0
Suspicious files
1
Text files
32
Unknown types
5
Dropped files
PID | Process | Filename | Type | |
|---|---|---|---|---|
| 2108 | iexplore.exe | C:\Users\admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\RB73MZ6Y\favicon[1].ico | — | |
MD5:— | SHA256:— | |||
| 2108 | iexplore.exe | C:\Users\admin\AppData\LocalLow\Microsoft\Internet Explorer\Services\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico | — | |
MD5:— | SHA256:— | |||
| 2108 | iexplore.exe | C:\Users\admin\AppData\Roaming\Microsoft\SystemCertificates\My\Certificates\E02357FC7708441D4B0BE5F371F4B28961870F70 | binary | |
MD5:DA6C793FB0533AF0139A6D76C9956547 | SHA256:BCEC4BFFD8EE03E0FDF1C1577EF4635AC08DB1F94CF07B0C406A6B3A171E9E1D | |||
| 1752 | iexplore.exe | C:\Users\admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\OCDM6JB6\landing[1].htm | html | |
MD5:B3EED2EE75096E378DAC488F705380B2 | SHA256:DC5790C9D417FB5B6478F53294EB77D9B93622E9491F1E54354196AA9BFDB19C | |||
| 1752 | iexplore.exe | C:\Users\admin\AppData\Local\Microsoft\Windows\History\Low\History.IE5\MSHist012018110420181105\index.dat | dat | |
MD5:F7D29B5027D0B02C2405C8AD1F436BF6 | SHA256:941DE3CA54AE101921FCB9EC8455971270EFB475638377567596765157140EE6 | |||
| 1752 | iexplore.exe | C:\Users\admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\BWPPCY0O\addthis_widget[1].js | text | |
MD5:A5D1D6F8321E586900928BA3A7E7443F | SHA256:8E07795E1B86C75FDFC480B754A3407E37F6309AC0B8FB9C592C6038659F3E9E | |||
| 2108 | iexplore.exe | C:\Users\admin\AppData\Local\Microsoft\Windows\History\History.IE5\MSHist012018110420181105\index.dat | dat | |
MD5:F4ACDBE53876D58308A7A4C8C00FCA6B | SHA256:C4826AF782EC15652E5D7895330E5F93A77299A49F3D12FEB5B5AD64F8931CBF | |||
| 2108 | iexplore.exe | C:\Users\admin\AppData\Roaming\Microsoft\Windows\Cookies\admin@eatcells[1].txt | text | |
MD5:ABFB60F5EF5BFDA92C75A89DA93C97E3 | SHA256:05D26C74B5AA4244F1A7FDAC434BFEF6A04333F5AF53D7C527104CC168B181FF | |||
| 1752 | iexplore.exe | C:\Users\admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\OCDM6JB6\upwingo_300x100[1].png | image | |
MD5:07890CA548E3E9599CB04418E6186B70 | SHA256:3AA8F38C7D82BEB0375BBD444FDAB06EAEECBC14BAE1CD403D27B2EC07843878 | |||
| 1752 | iexplore.exe | C:\Users\admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\U2ZG9DE0\eatcells_com[1].htm | html | |
MD5:3343562AA5775941B94FEB805B75F99A | SHA256:51FFD8F769ECBC293DF6D25FF2FEF4692603C17E3A0780A6F053CE9AE611591E | |||
Download PCAP, analyze network streams, HTTP content and a lot more at the full report
HTTP(S) requests
1
TCP/UDP connections
15
DNS requests
8
Threats
0
HTTP requests
PID | Process | Method | HTTP Code | IP | URL | CN | Type | Size | Reputation |
|---|---|---|---|---|---|---|---|---|---|
2108 | iexplore.exe | GET | 200 | 204.79.197.200:80 | http://www.bing.com/favicon.ico | US | image | 237 b | whitelisted |
Download PCAP, analyze network streams, HTTP content and a lot more at the full report
Connections
PID | Process | IP | Domain | ASN | CN | Reputation |
|---|---|---|---|---|---|---|
2108 | iexplore.exe | 204.79.197.200:80 | www.bing.com | Microsoft Corporation | US | whitelisted |
1752 | iexplore.exe | 104.27.185.82:443 | eatcells.com | Cloudflare Inc | US | shared |
2108 | iexplore.exe | 104.27.185.82:443 | eatcells.com | Cloudflare Inc | US | shared |
1752 | iexplore.exe | 23.210.248.44:443 | s7.addthis.com | Akamai International B.V. | NL | whitelisted |
1752 | iexplore.exe | 209.197.3.15:443 | maxcdn.bootstrapcdn.com | Highwinds Network Group, Inc. | US | whitelisted |
1752 | iexplore.exe | 172.217.168.10:443 | fonts.googleapis.com | Google Inc. | US | whitelisted |
1752 | iexplore.exe | 172.217.168.70:443 | s0.2mdn.net | Google Inc. | US | whitelisted |
1752 | iexplore.exe | 172.217.168.67:443 | fonts.gstatic.com | Google Inc. | US | whitelisted |
1752 | iexplore.exe | 172.217.168.72:443 | www.googletagmanager.com | Google Inc. | US | whitelisted |
DNS requests
Domain | IP | Reputation |
|---|---|---|
www.bing.com |
| whitelisted |
eatcells.com |
| whitelisted |
s7.addthis.com |
| whitelisted |
maxcdn.bootstrapcdn.com |
| whitelisted |
fonts.googleapis.com |
| whitelisted |
fonts.gstatic.com |
| whitelisted |
www.googletagmanager.com |
| whitelisted |
s0.2mdn.net |
| whitelisted |