URL: | http://www.bing.com/?scope=web&cc=US |
Full analysis: | https://app.any.run/tasks/79c6b549-0f5a-4a09-ab3e-8b34d0f8ea9b |
Verdict: | Malicious activity |
Analysis date: | June 25, 2024, 22:54:30 |
OS: | Ubuntu 22.04.2 |
MD5: | EAFF52462800403D6906D55ABB74A1DE |
SHA1: | 810F07216C3C942D5B1488B47E3A7E6D5AF24A86 |
SHA256: | 6D40F8039B0C986997B77494DE3CFA18105375B82AFE2A0B5CBBD81FE44F2FE2 |
SSDEEP: | 3:N1KJS4sm9SAHr2n:Cc4smw82n |
PID | CMD | Path | Indicators | Parent process |
---|---|---|---|---|
12933 | /bin/sh -c "DISPLAY=:0 sudo -iu user google-chrome http://www\.bing\.com/?scope=web&cc=US " | /bin/sh | — | any-guest-agent |
User: root Integrity Level: UNKNOWN Exit code: 0 | ||||
12934 | sudo -iu user google-chrome http://www.bing.com/?scope=web | /usr/bin/sudo | — | sh |
User: root Integrity Level: UNKNOWN | ||||
12935 | /usr/bin/google-chrome http://www.bing.com/?scope=web | /opt/google/chrome/chrome | sudo | |
User: user Integrity Level: UNKNOWN | ||||
12936 | /usr/bin/locale-check C.UTF-8 | /usr/bin/locale-check | — | chrome |
User: user Integrity Level: UNKNOWN Exit code: 0 | ||||
12937 | readlink -f /usr/bin/google-chrome | /usr/bin/readlink | — | chrome |
User: user Integrity Level: UNKNOWN Exit code: 0 | ||||
12938 | dirname /opt/google/chrome/google-chrome | /usr/bin/dirname | — | chrome |
User: user Integrity Level: UNKNOWN Exit code: 0 | ||||
12939 | mkdir -p /home/user/.local/share/applications | /usr/bin/mkdir | — | chrome |
User: user Integrity Level: UNKNOWN Exit code: 0 | ||||
12940 | cat | /usr/bin/cat | — | chrome |
User: user Integrity Level: UNKNOWN | ||||
12941 | cat | /usr/bin/cat | — | chrome |
User: user Integrity Level: UNKNOWN | ||||
12942 | /opt/google/chrome/chrome | — | chrome | |
User: user Integrity Level: UNKNOWN Exit code: 0 |
PID | Process | Filename | Type | |
---|---|---|---|---|
12935 | chrome | /home/user/.config/google-chrome/ShaderCache/data_3 | binary | |
MD5:— | SHA256:— | |||
12935 | chrome | /home/user/.config/google-chrome/ShaderCache/data_2 | binary | |
MD5:— | SHA256:— | |||
12935 | chrome | /home/user/.config/google-chrome/ShaderCache/data_0 | binary | |
MD5:— | SHA256:— | |||
12935 | chrome | /home/user/.config/google-chrome/Default/GPUCache/data_3 | vxd | |
MD5:— | SHA256:— | |||
12935 | chrome | /home/user/.config/google-chrome/Default/GPUCache/data_2 | vxd | |
MD5:— | SHA256:— | |||
12935 | chrome | /home/user/.config/google-chrome/Default/GPUCache/data_0 | vxd | |
MD5:— | SHA256:— | |||
12935 | chrome | /home/user/.config/google-chrome/Default/DawnCache/data_3 | vxd | |
MD5:— | SHA256:— | |||
12935 | chrome | /home/user/.config/google-chrome/Default/DawnCache/data_2 | vxd | |
MD5:— | SHA256:— | |||
12935 | chrome | /home/user/.config/google-chrome/Default/DawnCache/data_0 | vxd | |
MD5:— | SHA256:— | |||
13085 | chrome | /home/user/.cache/mesa_shader_cache/index | koa | |
MD5:— | SHA256:— |
PID | Process | Method | HTTP Code | IP | URL | CN | Type | Size | Reputation |
---|---|---|---|---|---|---|---|---|---|
— | — | GET | 204 | 91.189.91.96:80 | http://connectivity-check.ubuntu.com/ | unknown | — | — | — |
PID | Process | IP | Domain | ASN | CN | Reputation |
---|---|---|---|---|---|---|
— | — | 91.189.91.96:80 | — | Canonical Group Limited | US | unknown |
470 | avahi-daemon | 224.0.0.251:5353 | — | — | — | unknown |
— | — | 91.189.91.97:80 | — | Canonical Group Limited | US | unknown |
— | — | 185.125.188.55:443 | api.snapcraft.io | Canonical Group Limited | GB | unknown |
— | — | 108.177.15.84:443 | accounts.google.com | — | — | unknown |
12935 | chrome | 239.255.255.250:1900 | — | — | — | unknown |
— | — | 142.250.185.67:443 | clientservices.googleapis.com | GOOGLE | US | unknown |
— | — | 216.58.206.42:443 | safebrowsingohttpgateway.googleapis.com | GOOGLE | US | unknown |
— | — | 2.23.209.189:443 | www.bing.com | Akamai International B.V. | GB | unknown |
— | — | 2.23.209.189:80 | www.bing.com | Akamai International B.V. | GB | unknown |
Domain | IP | Reputation |
---|---|---|
api.snapcraft.io |
| unknown |
clientservices.googleapis.com |
| unknown |
accounts.google.com |
| unknown |
www.bing.com |
| unknown |
safebrowsingohttpgateway.googleapis.com |
| unknown |
e86303.dscx.akamaiedge.net |
| unknown |
r.bing.com |
| unknown |
aefd.nelreports.net |
| unknown |
a1851.dscg2.akamai.net |
| unknown |
connectivity-check.ubuntu.com |
| unknown |