File: 88a661f5cc75eb494cfe0af8c70d4c1f

Metadata
File name:http://user.mxficus.com/
File type:N/A
File size:N/A
Analysis date:2022-05-29 09:59:22
MD5:88a661f5cc75eb494cfe0af8c70d4c1f
SHA1:21ab32c4c4b0dd3bdbf7bb690a2c5ad3c8d95ce2
SHA256:90b6f0393bcc073de34d16e96e21fe90817798b4d5b44b58fec7be7fd2de053f
SHA512:N/A
SSDEEP:N/A
IMPHASH:N/A
Authentihash:N/A
Related resources
APTNotes
Cyber threat intelligence reports associated with 88a661f5cc75eb494cfe0af8c70d4c1f.
Loading...
Domains
Domains the malware sample communicates with.
DomainIP
a.remarketstats.comN/A
cdnjs.cloudflare.comN/A
js.hs-analytics.netN/A
js.hs-banner.comN/A
match.adsrvr.orgN/A
o.ss2.usN/A
ocsp.pki.googN/A
ocsp.rootca1.amazontrust.comN/A
ocsp.rootg2.amazontrust.comN/A
ocsp.sca1b.amazontrust.comN/A
pixel.tapad.comN/A
user.mxficus.comN/A
Hosts
Hosts the malware sample communicates with.
54.208.137.110
99.84.170.116
13.249.90.138
13.249.90.150
13.249.90.38
199.60.103.30
104.17.24.14
142.250.190.136
172.217.2.42
104.16.88.20
18.220.110.143
216.24.57.3
104.16.168.82
172.217.2.35
172.217.4.78
23.45.233.49
172.217.0.162
13.249.85.64
172.64.154.216
172.217.5.2
172.67.69.73
104.18.33.171
104.17.71.176
104.17.112.176
104.17.129.171
104.26.9.50
99.84.160.42
142.250.111.156
107.178.246.49
52.6.156.194
104.18.99.194
142.250.190.130
HTTP Requests
HTTP requests the malware sample makes.
HostURLUser-Agent
54.208.137.110 (user.mxficus.com)user.mxficus.com/Mozilla/5.0 (Windows NT 6.1; Trident/7.0; rv:11.0) like Gecko
N/A
N/A
N/A
99.84.170.116 (o.ss2.us)o.ss2.us//MEowSDBGMEQwQjAJBgUrDgMCGgUABBSLwZ6EW5gdYc9UaSEaaLjjETNtkAQUv1%2B30c7dH4b0W1Ws3NcQwg6piOcCCQCnDkpMNIK3fw%3D%3DMicrosoft-CryptoAPI/6.1
N/A
N/A
N/A
13.249.90.138 (ocsp.rootg2.amazontrust.com)ocsp.rootg2.amazontrust.com/MFQwUjBQME4wTDAJBgUrDgMCGgUABBSIfaREXmfqfJR3TkMYnD7O5MhzEgQUnF8A36oB1zArOIiiuG1KnPIRkYMCEwZ%2FlEoqJ83z%2BsKuKw...2A 2F 2A 0D 0A 55 73 65 72 2D 41 67 65 6E 74 3A [*/*..User-Agent:]
N/A
N/A
N/A
13.249.90.150 (ocsp.rootca1.amazontrust.com)ocsp.rootca1.amazontrust.com/MFQwUjBQME4wTDAJBgUrDgMCGgUABBRPWaOUU8%2B5VZ5%2Fa9jFTaU9pkK3FAQUhBjMhTTsvAyUlC4IWZzHshBOCggCEwZ%2FlFeFh%2Bisd...Microsoft-CryptoAPI/6.1
N/A
N/A
N/A
13.249.90.38 (ocsp.sca1b.amazontrust.com)ocsp.sca1b.amazontrust.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBQz9arGHWbnBV0DFzpNHz4YcTiFDQQUWaRmBlKge5WSPKOUByeWdFv5PdACEAFuiky73oXPlv0y8pyG5Rk...Microsoft-CryptoAPI/6.1
N/A
N/A
N/A
172.217.2.35 (ocsp.pki.goog)ocsp.pki.goog/gsr1/MFEwTzBNMEswSTAJBgUrDgMCGgUABBS3V7W2nAf4FiMTjpDJKg6%2BMgGqMQQUYHtmGkUNl8qJUC99BM00qP%2F8%2FUsCEHe9DWzbNvka6iEPxPBY0w0%3...Microsoft-CryptoAPI/6.1
N/A
N/A
N/A
13.249.90.38 (ocsp.sca1b.amazontrust.com)ocsp.sca1b.amazontrust.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBQz9arGHWbnBV0DFzpNHz4YcTiFDQQUWaRmBlKge5WSPKOUByeWdFv5PdACEAL80GIbt7gZKZjrURCMIp4...Microsoft-CryptoAPI/6.1
N/A
N/A
N/A
172.217.2.35 (ocsp.pki.goog)ocsp.pki.goog/gtsr1/ME4wTDBKMEgwRjAJBgUrDgMCGgUABBQwkcLWD4LqGJ7bE7B1XZsEbmfwUAQU5K8rJnEaK0gnhS9SZizv8IkTcT4CDQIDvFNZazTHGPUBUGY%3DMicrosoft-CryptoAPI/6.1
N/A
N/A
N/A
172.217.2.35 (ocsp.pki.goog)ocsp.pki.goog/gts1c3/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBTHLnmK3f9hNLO67UdCuLvGwCQHYwQUinR%2Fr4XN7pXNPZzQ4kYU83E1HScCEQDwQ9JNOs3IcArkp%2FBu7NbUMicrosoft-CryptoAPI/6.1
N/A
N/A
N/A
172.217.2.35 (ocsp.pki.goog)ocsp.pki.goog/gts1c3/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBTHLnmK3f9hNLO67UdCuLvGwCQHYwQUinR%2Fr4XN7pXNPZzQ4kYU83E1HScCEQCdUrA%2FwvrytArhIvu6cF3dMicrosoft-CryptoAPI/6.1
N/A
N/A
N/A
172.217.2.35 (ocsp.pki.goog)ocsp.pki.goog/gts1c3/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBTHLnmK3f9hNLO67UdCuLvGwCQHYwQUinR%2Fr4XN7pXNPZzQ4kYU83E1HScCEQDd76IKIvXSJxLysEZlLgdJ2F 2A 0D 0A 55 73 65 72 2D 41 67 65 6E 74 3A 20 [/*..User-Agent
N/A
N/A
N/A
172.217.2.35 (ocsp.pki.goog)ocsp.pki.goog/gts1c3/MFEwTzBNMEswSTAJBgUrDgMCGgUABBTHLnmK3f9hNLO67UdCuLvGwCQHYwQUinR%2Fr4XN7pXNPZzQ4kYU83E1HScCEG3aTvFLTYzNCmxS2fUJutw%3DMicrosoft-CryptoAPI/6.1
N/A
N/A
N/A
172.217.2.35 (ocsp.pki.goog)ocsp.pki.goog/gts1c3/MFEwTzBNMEswSTAJBgUrDgMCGgUABBTHLnmK3f9hNLO67UdCuLvGwCQHYwQUinR%2Fr4XN7pXNPZzQ4kYU83E1HScCEG3aTvFLTYzNCmxS2fUJutw%3DMicrosoft-CryptoAPI/6.1
N/A
N/A
N/A
172.217.2.35 (ocsp.pki.goog)ocsp.pki.goog/gts1c3/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBTHLnmK3f9hNLO67UdCuLvGwCQHYwQUinR%2Fr4XN7pXNPZzQ4kYU83E1HScCEQCHXS%2FWwGsOSRJbmAIB8NC3Microsoft-CryptoAPI/6.1
N/A
N/A
N/A
172.217.2.35 (ocsp.pki.goog)ocsp.pki.goog/gts1c3/MFEwTzBNMEswSTAJBgUrDgMCGgUABBTHLnmK3f9hNLO67UdCuLvGwCQHYwQUinR%2Fr4XN7pXNPZzQ4kYU83E1HScCEFsL8ccV6MRJElibH7RYju4%3DMicrosoft-CryptoAPI/6.1
N/A
N/A
N/A
13.249.90.38 (ocsp.sca1b.amazontrust.com)ocsp.sca1b.amazontrust.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBQz9arGHWbnBV0DFzpNHz4YcTiFDQQUWaRmBlKge5WSPKOUByeWdFv5PdACEAtydR9FAV1wEGxlCyXBTYE...Microsoft-CryptoAPI/6.1
N/A
N/A
N/A
AV Detections
AV detection names associated with the malware sample.
Mutants
Mutants created by the malware sample.
Registry keys
Registry keys created by the malware sample.
Comments
User comments about 88a661f5cc75eb494cfe0af8c70d4c1f.
NOTICE: We have updated our privacy terms and conditions in accordance to GDPR. By using our site, you acknowledge that you have read and understand our Privacy Policy. Your use of ThreatMiner’s Products and Services is subject to these policies and terms.