FILE
File #01
PE32 executable (GUI) Intel 80386, for MS Windows, 5 sections
URL
HTTPShttps://grchristian.screenconnect.com/Bin/ScreenConnect.ClientSetup.exe?e=Access&y=Guest&c=feed&c=&c=&c=&c=&c=&c=&c=
IP / ASN
15.204.108.68AS16276 · OVH SAS
WEBSITE ANALYSIS REPORT
https://nam02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fstorage.googleapis.com%2Fuz-zg8311%2Fhs789fil&data=05%7C02%7Cbackground.screening-us%40fadv.com%7C0aa91272dbfb45607de708df09414217%7C6c4b33465ad44991b51ebb35a33065b0%7C1%7C0%7C639239848210258359%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7C0%7C%7C%7C&sdata=IvixDU122Mc3V2bKMpt0hVq8lhjw2gWK%2FmXY0mrq1jo%3D&reserved=0
public
Phishing detected
Review evidence →4 detections · review the detection signals
Artifacts
Extracted files, shortcuts, Telegram observations, PDF documents, and clipboard content
Files1Telegram1
Extracted files
1 15.204.108.68Telegram observations
1TELEGRAM TOKEN
Telegram token #01
Token not recorded as revoked
URL
HTTPShttps://oat.tavrenix.it.com/?p=ottqd0gfrx
IP / ASN
Not recorded
Unknown