Analysis date (UTC): 23 October 2023, 09:46Analysis environment: Windows 7 Pro, build 7601, x86

https://otpdirekt-autentifica.codeanyapp.com/le/?52a8b2c752a8b2c7

MD5:6767BE663BD5777722BDF80BAABA7656
SHA1:08D4B9F5D631867CF44ADB9251592F74829AA228
SHA256:D0852E151655A8F71BC5A6CA926E8275E97CE9A5D9A5D33CF0EB444C2496A763

Analysis result

Behavior activities

MALICIOUS

No malicious indicators.

SUSPICIOUS

No suspicious indicators.

INFO

Application launched itself

  • firefox.exe (PID: 116)
  • firefox.exe (PID: 3412)

Threats

PIDProcessClassMessage
1088svchost.exeMisc activityET INFO DNS Query to Domain used for Phishing (codeanyapp .com)
1088svchost.exeMisc activityET INFO DNS Query to Domain used for Phishing (codeanyapp .com)
1088svchost.exeMisc activityET INFO DNS Query to Domain used for Phishing (codeanyapp .com)
116firefox.exeMisc activityET INFO Observed Domain used for Phishing in TLS SNI (codeanyapp .com)
116firefox.exeMisc activityET INFO Observed Domain used for Phishing in TLS SNI (codeanyapp .com)

ANY.RUN is an interactive service which provides full access to the guest system. Information in this report could be distorted by user actions and is provided for user acknowledgement as it is. ANY.RUN does not guarantee maliciousness or safety of the content.

Interactive malware hunting service ANY.RUN