Find similar analyses in TI Lookup
Analysis date (UTC): 13 December 2024, 09:16Analysis environment: Windows 10 Pro, build 19045, x64

https://onzmowkbmebuiwyi5bwjubq5gewcupnhftdk0lefabjsijgclc.brghtmind.ru/horyaxlnfrazbxqcTpeJFhHkEKEZTRMDZDDSZUWWUPFWIAOXEJXGOLYUGRHpqVY04R1GA4yz0fbuv40

MD5:393E5F8280604A88375EF18441498680
SHA1:56C07A93B6940943E55D2976BD71B09F7EA8B57D
SHA256:A5A120F8DC22C00997CB1A1F7D5E8A5FFBB99B127BA8D8C74253463241711C55

Analysis result

Threat level:Malicious activity
Tags:
phishingtycoonstorm1747
Full analysis:Analysis https://onzmowkbmebuiwyi5bwjubq5gewcupnhftdk0lefabjsijgclc.brghtmind.ru/horyaxlnfrazbxqcTpeJFhHkEKEZTRMDZDDSZUWWUPFWIAOXEJXGOLYUGRHpqVY04R1GA4yz0fbuv40 Malicious activity - Interactive analysis ANY.RUN

Behavior activities

MALICIOUS

PHISHING has been detected (SURICATA)

  • msedge.exe (PID: 6672)

SUSPICIOUS

No suspicious indicators.

INFO

Checks supported languages

  • identity_helper.exe (PID: 7624)

Reads Environment values

  • identity_helper.exe (PID: 7624)

Reads the computer name

  • identity_helper.exe (PID: 7624)

Application launched itself

  • msedge.exe (PID: 6348)

Threats

PIDProcessClassMessage
6672msedge.exePossible Social Engineering AttemptedPHISHING [ANY.RUN] Suspected Tycoon2FA`s Phishing-Kit domain by CrossDomain ( .brghtmind .ru)
6672msedge.exePossible Social Engineering AttemptedPHISHING [ANY.RUN] Suspected Tycoon2FA`s Phishing-Kit domain by CrossDomain ( .brghtmind .ru)

ANY.RUN is an interactive service which provides full access to the guest system. Information in this report could be distorted by user actions and is provided for user acknowledgement as it is. ANY.RUN does not guarantee maliciousness or safety of the content.

Interactive malware hunting service ANY.RUN

© 2017-2026 ANY.RUN LLC. ALL RIGHTS RESERVED