URLScan task
urlscan1
Behavioral task
behavioral1
Sample
https://adclick.g.doubleclick.net/aclk?fbs_aeid=-4438843871897982976&sa=l&ai=Cl9Cg-reAZMKrN8XFxtYP78ar4Az4zJjwcNzi2JDhEY_qpteDPBABIKvE5C5gx9WEjpwmoAGd_Zq6KcgBCakC8ttfFarcaz6oAwHIA4oEmAQIqgSFAk_QNxSaY5-yZiN19R01CVOoRrKDalYHysYRclaz3tWG44qibMmi0DGQmQNoLZmz-xaNlXd12X9dO9RbTkUyCL_G2m2qis11PvDcmaxg6d3lJyDpRnVLAB6PR0YsOYEEq4XeTkEY6g2mjT16q5tJ7fnKe-U5ssk9lIPIaDhmbtnYT2qTU0vr6wLHWOt7fGAP7r-oJhgGmIRtW0H0rU9JNmaLhsMrbE1l-PsY6ZhznXnvRKDPbN0z-g2JBHEiI0hSedSSdr8BJg8jZAKPKwKwluPFuLgN419UHY8YGJ0d0VtkWe1qdqEByCRgdvbOLc-7wD0tZRmNZVNEHBg2RDL9cUH0HQlgU8AEjd7vzKcEiAXao9uxSsAFBfoFBgglEAEYAJAGAaAGLtgGBIAHnbXrmQSYBwGoB_SZsQKoB-aasQKoB47OG6gHk9gbqAfulrECqAf-nrECqAeko7ECqAemvhuoB_PRG6gHltgbqAeqm7ECqAeDrbECqAf_nrECqAffn7EC2AcA8gcCQG6gCInlPrAIArgIAcAIAdIIHAiA4YCABBABGF8yAooGOgeAwICAgIBASL39wTqAChSQCwOYCwHICwGADAG4DAHSDAIIAeAS3cfai8rC2PpouBPzA9gTC4IUGBoWbW9iaWxlYXBwOjoxLTkyMTc2NTg4ONAVAZgWAfgWAYAXAboXAhAB&num=1&cid=CAQSWQBygQiD2_bnsSx7UGUXfssSWUWn2Ah3OyoIcj9IMoVgoAxBuG3hsUMh2b3Z7yBcFcFzPyL7Sr3v4Ko1JllLjNvbJ6Igbw4zsoeXhM2vct1u1vvw0HDOr9fjGAE&sig=AOD64_1D9XTo6vKC3xAs4WffSnyndn718w&ctype=5&client=ca-app-pub-3858157454086512&nb=25&nx=27&ny=26&mb=1&ms=YSCNOUw1K9gfIvKGrFyq5WqBjRRBsCx71gKgRtnmrosBOFwOR8bRNTaufq9RMhDf0BcC3cjvl7eu2MgC81LLcbE908RGnW7z71UA5HAwqb3_sj41ZabIjH79rn075dTagDBYfc8N68y-yHi7Smw-HV59zL-hQFz_1q-hsAkaHqJFCHsIPOMGckSNYP4CJCgpSyV6HXWDEdaASfziCptYbtx1MppPg8J-Tf6q5aVqb_bWMSqn2fO4R8yPkcp8_-0FdMUdPFeHwhn3RgvCz7VJO8xceOfyR1hBjdIQXOyBx8GLdWWHYRTUgwp62ArtTQAJce9qm9QGTUkRhIdUJvpgVA&adurl=//nexsiscomms.prodeskengineering.com.np/[email protected]
Resource
win10v2004-20230220-en
General
-
Target
https://adclick.g.doubleclick.net/aclk?fbs_aeid=-4438843871897982976&sa=l&ai=Cl9Cg-reAZMKrN8XFxtYP78ar4Az4zJjwcNzi2JDhEY_qpteDPBABIKvE5C5gx9WEjpwmoAGd_Zq6KcgBCakC8ttfFarcaz6oAwHIA4oEmAQIqgSFAk_QNxSaY5-yZiN19R01CVOoRrKDalYHysYRclaz3tWG44qibMmi0DGQmQNoLZmz-xaNlXd12X9dO9RbTkUyCL_G2m2qis11PvDcmaxg6d3lJyDpRnVLAB6PR0YsOYEEq4XeTkEY6g2mjT16q5tJ7fnKe-U5ssk9lIPIaDhmbtnYT2qTU0vr6wLHWOt7fGAP7r-oJhgGmIRtW0H0rU9JNmaLhsMrbE1l-PsY6ZhznXnvRKDPbN0z-g2JBHEiI0hSedSSdr8BJg8jZAKPKwKwluPFuLgN419UHY8YGJ0d0VtkWe1qdqEByCRgdvbOLc-7wD0tZRmNZVNEHBg2RDL9cUH0HQlgU8AEjd7vzKcEiAXao9uxSsAFBfoFBgglEAEYAJAGAaAGLtgGBIAHnbXrmQSYBwGoB_SZsQKoB-aasQKoB47OG6gHk9gbqAfulrECqAf-nrECqAeko7ECqAemvhuoB_PRG6gHltgbqAeqm7ECqAeDrbECqAf_nrECqAffn7EC2AcA8gcCQG6gCInlPrAIArgIAcAIAdIIHAiA4YCABBABGF8yAooGOgeAwICAgIBASL39wTqAChSQCwOYCwHICwGADAG4DAHSDAIIAeAS3cfai8rC2PpouBPzA9gTC4IUGBoWbW9iaWxlYXBwOjoxLTkyMTc2NTg4ONAVAZgWAfgWAYAXAboXAhAB&num=1&cid=CAQSWQBygQiD2_bnsSx7UGUXfssSWUWn2Ah3OyoIcj9IMoVgoAxBuG3hsUMh2b3Z7yBcFcFzPyL7Sr3v4Ko1JllLjNvbJ6Igbw4zsoeXhM2vct1u1vvw0HDOr9fjGAE&sig=AOD64_1D9XTo6vKC3xAs4WffSnyndn718w&ctype=5&client=ca-app-pub-3858157454086512&nb=25&nx=27&ny=26&mb=1&ms=YSCNOUw1K9gfIvKGrFyq5WqBjRRBsCx71gKgRtnmrosBOFwOR8bRNTaufq9RMhDf0BcC3cjvl7eu2MgC81LLcbE908RGnW7z71UA5HAwqb3_sj41ZabIjH79rn075dTagDBYfc8N68y-yHi7Smw-HV59zL-hQFz_1q-hsAkaHqJFCHsIPOMGckSNYP4CJCgpSyV6HXWDEdaASfziCptYbtx1MppPg8J-Tf6q5aVqb_bWMSqn2fO4R8yPkcp8_-0FdMUdPFeHwhn3RgvCz7VJO8xceOfyR1hBjdIQXOyBx8GLdWWHYRTUgwp62ArtTQAJce9qm9QGTUkRhIdUJvpgVA&adurl=//nexsiscomms.prodeskengineering.com.np/[email protected]
Malware Config
Signatures
-
A potential corporate email address has been identified in the URL: //nexsiscomms.prodeskengineering.com.np/[email protected]