hxxp://click[.]e[.]progressive[.]com/?qs=43cb74b2dd4346ff7f7717fa93ba3cf8a9c93492370688c317c3e16caf33c846978d4796758a813f40183cdd1a5531f0b3fde0bfd1d3bceec8dc3cc13b321bda","hxxp://click[.]e[.]progressive[.]com/?qs=43cb74b2dd4346ffb6453d1d4e072c9f805ec73ed5ec20c810a3680b7d66455878a499c18761e5a570106102f26139ae5fcb9fc7887e9a7eca7078b87558e037","hxxp://click[.]e[.]progressive[.]com/?qs=21b275adbb102d1f50315d46d1da0646d1b17b6234ad07fa96b8894f53dbc5f97fbfafcf5589af16db7a68a2f0d4f62d48bdcc0590b8dd6781ff21596c6c1a9e","hxxp://click[.]e[.]progressive[.]com/?qs=43cb74b2dd4346ff838bb136b81bf1a623d3deed4aed3db06e1329a446935a11af579ab8419c82ffe3ad5ca439751994f591f7e7d600526b05569be2f69ff7f3","hxxp://click[.]e[.]progressive[.]com/?qs=43cb74b2dd4346ff5401c3fd41f1714d11410fceb3f7d10d5ed1424936c00116ec8f8b08620977eb3076530812a0817de1315b2957b7fe2a01caee1cce44aa55","hxxp://click[.]e[.]progressive[.]com/?qs=43cb74b2dd4346ff662649238af04c20b0ef6b8e0d8b2551d73b8942e3bc45ceeed169d8317244189ae0f91870c2ad3bce7196787a2dc218ab09db0b40430a14","hxxp://click[.]e[.]progressive[.]com/?qs=43cb74b2dd4346ffce2b91beff9fd6c33a2a6f18769447bd640b0e0e30b8d80f826d5adbb4420be3d4dc5050a1314703a4ff28bf6b65c1b137939710fa0f66e1","hxxps://loginrouter[.]progressive[.]com/access/documents?guid=e2aa19b0-8389-48f5-8b53-013f7354fd90&type=idCard&BC=10&utm_source=progressive&utm_medium=email&utm_campaign=S2_Document_Request_Confirmation&utm_content=DocReqConf&cntgrp=P","hxxp://click[.]e[.]progressive[.]com/?qs=4edbaec40761bf665d9788dfc2474b69f382c749e73cb9fffc5d4775286a84ee57b354d8ff841475d455b9697460159593ddeed8217445d330eb6180930b900b","hxxp://click[.]e[.]progressive[.]com/?qs=4edbaec40761bf66c98ab55b69b082fe563c511bd1745aac53595fcf7e85d47c2ef168e164f284c921c5ad52b1b2dd00c74428863151f0972062bbf17a6321de

Sharing

Behavioral task

behavioral1

Sample

http://click.e.progressive.com/?qs=43cb74b2dd4346ff7f7717fa93ba3cf8a9c93492370688c317c3e16caf33c846978d4796758a813f40183cdd1a5531f0b3fde0bfd1d3bceec8dc3cc13b321bda","http://click.e.progressive.com/?qs=43cb74b2dd4346ffb6453d1d4e072c9f805ec73ed5ec20c810a3680b7d66455878a499c18761e5a570106102f26139ae5fcb9fc7887e9a7eca7078b87558e037","http://click.e.progressive.com/?qs=21b275adbb102d1f50315d46d1da0646d1b17b6234ad07fa96b8894f53dbc5f97fbfafcf5589af16db7a68a2f0d4f62d48bdcc0590b8dd6781ff21596c6c1a9e","http://click.e.progressive.com/?qs=43cb74b2dd4346ff838bb136b81bf1a623d3deed4aed3db06e1329a446935a11af579ab8419c82ffe3ad5ca439751994f591f7e7d600526b05569be2f69ff7f3","http://click.e.progressive.com/?qs=43cb74b2dd4346ff5401c3fd41f1714d11410fceb3f7d10d5ed1424936c00116ec8f8b08620977eb3076530812a0817de1315b2957b7fe2a01caee1cce44aa55","http://click.e.progressive.com/?qs=43cb74b2dd4346ff662649238af04c20b0ef6b8e0d8b2551d73b8942e3bc45ceeed169d8317244189ae0f91870c2ad3bce7196787a2dc218ab09db0b40430a14","http://click.e.progressive.com/?qs=43cb74b2dd4346ffce2b91beff9fd6c33a2a6f18769447bd640b0e0e30b8d80f826d5adbb4420be3d4dc5050a1314703a4ff28bf6b65c1b137939710fa0f66e1","https://loginrouter.progressive.com/access/documents?guid=e2aa19b0-8389-48f5-8b53-013f7354fd90&type=idCard&BC=10&utm_source=progressive&utm_medium=email&utm_campaign=S2_Document_Request_Confirmation&utm_content=DocReqConf&cntgrp=P","http://click.e.progressive.com/?qs=4edbaec40761bf665d9788dfc2474b69f382c749e73cb9fffc5d4775286a84ee57b354d8ff841475d455b9697460159593ddeed8217445d330eb6180930b900b","http://click.e.progressive.com/?qs=4edbaec40761bf66c98ab55b69b082fe563c511bd1745aac53595fcf7e85d47c2ef168e164f284c921c5ad52b1b2dd00c74428863151f0972062bbf17a6321de

Resource

win10v2004-20230703-en

windows10-2004-x64

8 signatures

1200 seconds

General

Target

http://click.e.progressive.com/?qs=43cb74b2dd4346ff7f7717fa93ba3cf8a9c93492370688c317c3e16caf33c846978d4796758a813f40183cdd1a5531f0b3fde0bfd1d3bceec8dc3cc13b321bda","http://click.e.progressive.com/?qs=43cb74b2dd4346ffb6453d1d4e072c9f805ec73ed5ec20c810a3680b7d66455878a499c18761e5a570106102f26139ae5fcb9fc7887e9a7eca7078b87558e037","http://click.e.progressive.com/?qs=21b275adbb102d1f50315d46d1da0646d1b17b6234ad07fa96b8894f53dbc5f97fbfafcf5589af16db7a68a2f0d4f62d48bdcc0590b8dd6781ff21596c6c1a9e","http://click.e.progressive.com/?qs=43cb74b2dd4346ff838bb136b81bf1a623d3deed4aed3db06e1329a446935a11af579ab8419c82ffe3ad5ca439751994f591f7e7d600526b05569be2f69ff7f3","http://click.e.progressive.com/?qs=43cb74b2dd4346ff5401c3fd41f1714d11410fceb3f7d10d5ed1424936c00116ec8f8b08620977eb3076530812a0817de1315b2957b7fe2a01caee1cce44aa55","http://click.e.progressive.com/?qs=43cb74b2dd4346ff662649238af04c20b0ef6b8e0d8b2551d73b8942e3bc45ceeed169d8317244189ae0f91870c2ad3bce7196787a2dc218ab09db0b40430a14","http://click.e.progressive.com/?qs=43cb74b2dd4346ffce2b91beff9fd6c33a2a6f18769447bd640b0e0e30b8d80f826d5adbb4420be3d4dc5050a1314703a4ff28bf6b65c1b137939710fa0f66e1","https://loginrouter.progressive.com/access/documents?guid=e2aa19b0-8389-48f5-8b53-013f7354fd90&type=idCard&BC=10&utm_source=progressive&utm_medium=email&utm_campaign=S2_Document_Request_Confirmation&utm_content=DocReqConf&cntgrp=P","http://click.e.progressive.com/?qs=4edbaec40761bf665d9788dfc2474b69f382c749e73cb9fffc5d4775286a84ee57b354d8ff841475d455b9697460159593ddeed8217445d330eb6180930b900b","http://click.e.progressive.com/?qs=4edbaec40761bf66c98ab55b69b082fe563c511bd1745aac53595fcf7e85d47c2ef168e164f284c921c5ad52b1b2dd00c74428863151f0972062bbf17a6321de

Sharing

General

Malware Config

Signatures

Files