File: 4bafe2fbe2abfe940defa49fe940d8ab

Metadata
File name:http://audienceexposure.com/iframe?redirect=https%3A%2F%2Fs.ad.smaato.net%2Fc%2F%3FdspId%3D1001714%26dspCookie%3D%7BUID%7D%26gdpr%3D0%26gdpr_consent%3D&gdpr=0&gdpr_consent
File type:N/A
File size:N/A
Analysis date:2024-05-17 16:51:01
MD5:4bafe2fbe2abfe940defa49fe940d8ab
SHA1:abd818630c6228617e2ede5d91ce203211a27141
SHA256:dd869b47e2b345fcb982a5e158900c9c885ac819ccaf76a505366af5d875fa24
SHA512:N/A
SSDEEP:N/A
IMPHASH:N/A
Authentihash:N/A
Related resources
APTNotes
Cyber threat intelligence reports associated with 4bafe2fbe2abfe940defa49fe940d8ab.
Loading...
Domains
Domains the malware sample communicates with.
DomainIP
afs.googleusercontent.comN/A
audienceexposure.comN/A
d38psrni17bvxu.cloudfront.netN/A
parking.parklogic.comN/A
partner.googleadservices.comN/A
ww12.audienceexposure.comN/A
www.adsensecustomsearchads.comN/A
www.google.comN/A
Hosts
Hosts the malware sample communicates with.
72.52.179.174
76.223.26.96
67.225.218.50
142.250.80.36
54.230.244.15
142.250.80.78
142.251.40.130
142.251.41.1
13.248.148.254
HTTP Requests
HTTP requests the malware sample makes.
HostURLUser-Agent
72.52.179.174 (audienceexposure.com)audienceexposure.com/iframe?redirect=https%3A%2F%2Fs.ad.smaato.net%2Fc%2F%3FdspId%3D1001714%26dspCookie%3D%7BUID%7D%26gdpr%3D0%26gdpr_cons...Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36 Edg/107.0.1418.56
N/A
N/A
N/A
76.223.26.96 (ww12.audienceexposure.com)ww12.audienceexposure.com/iframe?redirect=https%3A%2F%2Fs.ad.smaato.net%2Fc%2F%3FdspId%3D1001714%26dspCookie%3D%7BUID%7D%26gdpr%3D0%26gdpr...3A 20 31 0D 0A 55 73 65 72 2D 41 67 65 6E 74 3A [
N/A
N/A
N/A
67.225.218.50 (parking.parklogic.com)parking.parklogic.com/page/enhance.js?pcId=12&domain=audienceexposure.comMozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36 Edg/107.0.1418.56
N/A
N/A
N/A
76.223.26.96 (ww12.audienceexposure.com)ww12.audienceexposure.com/track.php?domain=audienceexposure.com&toggle=browserjs&uid=MTcxNTk2NDY5My4xMzU4OjJmN2JjM2VlNWI5MmJhMjU1ZmIzMzJkM...Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36 Edg/107.0.1418.56
N/A
N/A
N/A
67.225.218.50 (parking.parklogic.com)parking.parklogic.com/page/scribe.php?pcId=12&domain=audienceexposure.com&pId=715&usid=15&utid=28445440966&query=null&domainJs=ww12.audien...Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36 Edg/107.0.1418.56
N/A
N/A
N/A
76.223.26.96 (ww12.audienceexposure.com)ww12.audienceexposure.com/ls.php?t=66478b15&token=2fd8bb421c2bfa551cb64cd853ad0b48392e8a69Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36 Edg/107.0.1418.56
N/A
N/A
N/A
142.250.80.36 (www.google.com)www.google.com/adsense/domains/caf.js?abp=1&adsdeli=trueMozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36 Edg/107.0.1418.56
N/A
N/A
N/A
54.230.244.15 (d38psrni17bvxu.cloudfront.net)d38psrni17bvxu.cloudfront.net/themes/cleanPeppermintBlack_657d9013/img/arrows.pngMozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36 Edg/107.0.1418.56
N/A
N/A
N/A
76.223.26.96 (ww12.audienceexposure.com)ww12.audienceexposure.com/track.php?domain=audienceexposure.com&caf=1&toggle=answercheck&answer=yes&uid=MTcxNTk2NDY5My4xMzU4OjJmN2JjM2VlNW...0A 55 73 65 72 2D 41 67 65 6E 74 3A 20 4D 6F 7A [.User-Agent
N/A
N/A
N/A
76.223.26.96 (ww12.audienceexposure.com)ww12.audienceexposure.com/favicon.icoMozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/107.0.0.0 Safari/537.36 Edg/107.0.1418.56
N/A
N/A
N/A
AV Detections
AV detection names associated with the malware sample.
Mutants
Mutants created by the malware sample.
Registry keys
Registry keys created by the malware sample.
Comments
User comments about 4bafe2fbe2abfe940defa49fe940d8ab.
NOTICE: We have updated our privacy terms and conditions in accordance to GDPR. By using our site, you acknowledge that you have read and understand our Privacy Policy. Your use of ThreatMiner’s Products and Services is subject to these policies and terms.