URL: | auth.scribd.com |
Full analysis: | https://app.any.run/tasks/20a2e92f-1f97-4da1-9a6a-12beed438d61 |
Verdict: | Malicious activity |
Analysis date: | May 23, 2024, 15:01:45 |
OS: | Ubuntu 22.04.2 |
MD5: | DF46AC0AA7B3688CB5DE9E4DC97AC671 |
SHA1: | 5A6C6C95FDA39BD47C998775EF97EB7CAD988E0A |
SHA256: | B49673D2B64193D75910C0F29E819E5CFE59C3FD8D03E79DFD45FE7DB172A316 |
SSDEEP: | 3:5Ch2n:a2 |
PID | CMD | Path | Indicators | Parent process |
---|---|---|---|---|
6169 | /bin/sh -c "DISPLAY=:0 sudo -iu user google-chrome auth\.scribd\.com " | /bin/sh | — | any-guest-agent |
User: user Integrity Level: UNKNOWN | ||||
6170 | sudo -iu user google-chrome auth.scribd.com | /usr/bin/sudo | — | sh |
User: user Integrity Level: UNKNOWN | ||||
6171 | /usr/bin/google-chrome auth.scribd.com | /opt/google/chrome/chrome | sudo | |
User: user Integrity Level: UNKNOWN | ||||
6172 | /usr/bin/locale-check C.UTF-8 | /usr/bin/locale-check | — | chrome |
User: user Integrity Level: UNKNOWN Exit code: 0 | ||||
6173 | readlink -f /usr/bin/google-chrome | /usr/bin/readlink | — | chrome |
User: user Integrity Level: UNKNOWN Exit code: 0 | ||||
6174 | dirname /opt/google/chrome/google-chrome | /usr/bin/dirname | — | chrome |
User: user Integrity Level: UNKNOWN Exit code: 0 | ||||
6175 | mkdir -p /home/user/.local/share/applications | /usr/bin/mkdir | — | chrome |
User: user Integrity Level: UNKNOWN Exit code: 0 | ||||
6176 | cat | /usr/bin/cat | — | chrome |
User: user Integrity Level: UNKNOWN | ||||
6177 | cat | /usr/bin/cat | — | chrome |
User: user Integrity Level: UNKNOWN | ||||
6178 | /opt/google/chrome/chrome | — | chrome | |
User: user Integrity Level: UNKNOWN Exit code: 0 |
PID | Process | Filename | Type | |
---|---|---|---|---|
6171 | chrome | /proc/6171/fd/63 | — | |
MD5:— | SHA256:— | |||
6171 | chrome | /dev/shm/.com.google.Chrome.DqLl2L | — | |
MD5:— | SHA256:— | |||
6171 | chrome | /dev/shm/.com.google.Chrome.OoKsoi | — | |
MD5:— | SHA256:— | |||
6171 | chrome | /dev/shm/.com.google.Chrome.fElHNm | — | |
MD5:— | SHA256:— | |||
6171 | chrome | /dev/shm/.com.google.Chrome.zfg35M | — | |
MD5:— | SHA256:— | |||
6171 | chrome | /dev/shm/.com.google.Chrome.RGsdOI | — | |
MD5:— | SHA256:— | |||
6171 | chrome | /dev/shm/.com.google.Chrome.grFnKP | — | |
MD5:— | SHA256:— | |||
6171 | chrome | /dev/shm/.com.google.Chrome.nPrKQd | — | |
MD5:— | SHA256:— | |||
6171 | chrome | /home/user/.config/google-chrome/Default/Sync Data/LevelDB/LOG | — | |
MD5:— | SHA256:— | |||
6171 | chrome | /dev/shm/.com.google.Chrome.mvfRnk | — | |
MD5:— | SHA256:— |
PID | Process | Method | HTTP Code | IP | URL | CN | Type | Size | Reputation |
---|---|---|---|---|---|---|---|---|---|
— | — | GET | 204 | 185.125.190.97:80 | http://connectivity-check.ubuntu.com/ | unknown | — | — | unknown |
PID | Process | IP | Domain | ASN | CN | Reputation |
---|---|---|---|---|---|---|
470 | avahi-daemon | 224.0.0.251:5353 | — | — | — | unknown |
— | — | 185.125.190.97:80 | — | Canonical Group Limited | GB | unknown |
— | — | 195.181.175.15:443 | — | Datacamp Limited | DE | unknown |
— | — | 91.189.91.97:80 | — | Canonical Group Limited | US | unknown |
— | — | 185.125.190.49:80 | — | Canonical Group Limited | GB | unknown |
6215 | chrome | 216.58.206.67:443 | clientservices.googleapis.com | GOOGLE | US | whitelisted |
6171 | chrome | 239.255.255.250:1900 | — | — | — | unknown |
6215 | chrome | 74.125.133.84:443 | accounts.google.com | GOOGLE | US | unknown |
6215 | chrome | 104.19.167.24:443 | auth.scribd.com | CLOUDFLARENET | — | unknown |
6215 | chrome | 104.19.167.24:80 | auth.scribd.com | CLOUDFLARENET | — | unknown |
Domain | IP | Reputation |
---|---|---|
clientservices.googleapis.com |
| whitelisted |
accounts.google.com |
| shared |
auth.scribd.com |
| unknown |
scribd-cd-lm3sidnjqtxglkyf.edge.tenants.us.auth0.com |
| unknown |
scribd.com |
| whitelisted |
www.scribd.com |
| unknown |
scribd.map.fastly.net |
| unknown |
cmp.osano.com |
| whitelisted |
s-f.scribdassets.com |
| whitelisted |
safebrowsing.googleapis.com |
| whitelisted |