Find similar analyses in TI Lookup
Analysis date (UTC): 16 October 2024, 19:42Analysis environment: Ubuntu 22.04.2

hianime.to

MD5:33DFC71708F50831A58069F5730CF4DD
SHA1:FD3F97E7C3BE3F79EC9F54316D2F995DAD9B5D5B
SHA256:2B6999B813809F9D03C626187D12DBCB3BB2BCB473D6EE201A39347354C267B5

Analysis result

Threat level:Malicious activity
Tags:
phishing
Full analysis:Analysis hianime.to Malicious activity - Interactive analysis ANY.RUN

Behavior activities

MALICIOUS

PHISHING has been detected (SURICATA)

  • systemd-resolved (PID: 425)

SUSPICIOUS

Reads /proc/mounts (likely used to find writable filesystems)

  • check-new-release-gtk (PID: 14382)

Executes commands using command-line interpreter

  • update-notifier (PID: 14380)

INFO

No info indicators.

Threats

PIDProcessClassMessage
425systemd-resolvedPotentially Bad TrafficET DNS Query for .to TLD
425systemd-resolvedPotentially Bad TrafficET DNS Query for .to TLD
425systemd-resolvedNot Suspicious TrafficINFO [ANY.RUN] Google Hosted Libraries (ajax .googleapis .com)
425systemd-resolvedNot Suspicious TrafficINFO [ANY.RUN] Google Hosted Libraries (ajax .googleapis .com)
425systemd-resolvedNot Suspicious TrafficINFO [ANY.RUN] Requests to a free CDN for open source projects (jsdelivr .net)
425systemd-resolvedNot Suspicious TrafficINFO [ANY.RUN] Requests to a free CDN for open source projects (jsdelivr .net)
425systemd-resolvedNot Suspicious TrafficINFO [ANY.RUN] Bidirectional and low-latency communication CDN (cdn .socket .io)
425systemd-resolvedNot Suspicious TrafficINFO [ANY.RUN] Bidirectional and low-latency communication CDN (cdn .socket .io)
425systemd-resolvedPossible Social Engineering AttemptedPHISHING [ANY.RUN] Domain chain identified as Phishing (socketzone)
425systemd-resolvedNot Suspicious TrafficINFO [ANY.RUN] Bidirectional and low-latency communication CDN (cdn .socket .io)

ANY.RUN is an interactive service which provides full access to the guest system. Information in this report could be distorted by user actions and is provided for user acknowledgement as it is. ANY.RUN does not guarantee maliciousness or safety of the content.

Interactive malware hunting service ANY.RUN

© 2017-2026 ANY.RUN LLC. ALL RIGHTS RESERVED