hxxps://s3[.]eu-west-1[.]amazonaws[.]com/oneview-mercury-plugins-eu[.]deliveryherocare[.]com/dh[.]herocare[.]wrap-up-plugin[.]js?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=ASIA44AU6XVVX2C3S7P5%2F20230807%2Feu-west-1%2Fs3%2Faws4_request&X-Amz-Date=20230807T094943Z&X-Amz-Expires=900&X-Amz-Security-Token=IQoJb3JpZ2luX2VjEMr%2F%2F%2F%2F%2F%2F%2F%2F%2F%2FwEaCWV1LXdlc3QtMSJHMEUCIFPdFduq68ITjnJwded3%2BGMS9SblOl5AZu9ItBQ71pwPAiEAmjlLWY%2FKQHmuXYKd%2FUD3ggmjlnuBLizEbP55exsqgIwqvAUIcxACGgw4ODQ4MDcyMjA1ODciDEXfRs6WS6F28bhiACqZBXJBlFNU%2FzdG94KmeharKbfOcdAiA8ts1hNlAVRGKavMuitNSWm9fJINOl30u%2FTxHOIc5bxuNNZpMIGXvWRbcHZ%2F%2BXOjmwDmKC0RP8zQTrV%2F8000XDWtZe7jpB5TwwKK5Dkuo8Qiv15Qq32u%2B5n4JdHMonO8mJJ7%2FtP41H1LnImMy26nSTIVHbENQ09%2FxapGteoWNuackgn50aNlsGZSXl9vHTK26sqPGKceVY4djbBKlM0LV7v7jKT%2B1Uo9rxjF8wcNZku6CIivcxM7iS3vJdfmdy8XghzddRwxJg9sj3ltFTSxfPIopMRZRcxp%2F7s8GXaQoNl%2BqA%2B1b0%2BDnzWyzUFEJpWLCeC0P30Br5TJ1O1eHgTdjbZK05H6tmmcKyKuS4vFztQYEfvBKiQQNPBb%2B50K2wXiAkB5oAcc6SffWB%2F9KrsN2UynJRcVdfa5D0mONyjfnt%2BzHaza7mI3iCrXd4L4Nn8R%2FYKDEabqAETwGl5VBBnVcL6jb8K8jVDvyE3r0Fbl0DlNBUY62InzJd6MnbbHm6SD4JT6NSY3plLxXISrSMtJZKt9vQljEA9JH5lhfVVGlDMAEPcIylIyUE%2BZfE7WuxfDiVJ7aH2gYbg3FKQOQdXz62DF5O1EocgSiOAuvZVZMuo0G0bzdxFDA1nQeBF36svCgm0WtXguQHSqDcTRr86bYRspdkpVYLQUx1RiIOqh9g%2FAIpGM9ADV1Px%2FDAidGX9z%2FdQER5%2FkghYGbtIlxgrvyoZzDsTK4cve%2FAJDVd3gPiCOeiN%2Ffj8gG3oaQ%2BJdh5oe14oxTujqoDob%2FRPwwiAm0tDkvSV5JrH%2BuGcAtSfP82QZ%2BC4OhutGIGtR9cC4gJQrkOXpmbhPPU2e9TRX1qXyq8nCW3XrMNr2wqYGOrEBSSFNSFsvB5NbUrrUw4HrrN6vJ5wtZ6ZdWr1Ju5VSCjVQL4t3fXlGnjFEaml1B%2F86sxt%2B4W1VAUIFt%2B5LLnRmNKVYWb6r%2FfGsXn3hTjIS2tOgWGpDyXRQoqLtUpJm96jczZDryKT3rd2%2BkMTYxyVikUDDo6QO7NqiGRUzcw38hUtgMBzdkO2i89t7srV%2BXG2oMZQBf9HZfkcNbGe3f0H1MCiciu%2BQXhL0mKTff9HjsFad&X-Amz-SignedHeaders=host&X-Amz-Signature=2b0be2e443c944f63cc7ad4885c7fc1c24c10b4bf1804d2602d53e884b48d0f3

Sharing

Behavioral task

behavioral1

Sample

https://s3.eu-west-1.amazonaws.com/oneview-mercury-plugins-eu.deliveryherocare.com/dh.herocare.wrap-up-plugin.js?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=ASIA44AU6XVVX2C3S7P5%2F20230807%2Feu-west-1%2Fs3%2Faws4_request&X-Amz-Date=20230807T094943Z&X-Amz-Expires=900&X-Amz-Security-Token=IQoJb3JpZ2luX2VjEMr%2F%2F%2F%2F%2F%2F%2F%2F%2F%2FwEaCWV1LXdlc3QtMSJHMEUCIFPdFduq68ITjnJwded3%2BGMS9SblOl5AZu9ItBQ71pwPAiEAmjlLWY%2FKQHmuXYKd%2FUD3ggmjlnuBLizEbP55exsqgIwqvAUIcxACGgw4ODQ4MDcyMjA1ODciDEXfRs6WS6F28bhiACqZBXJBlFNU%2FzdG94KmeharKbfOcdAiA8ts1hNlAVRGKavMuitNSWm9fJINOl30u%2FTxHOIc5bxuNNZpMIGXvWRbcHZ%2F%2BXOjmwDmKC0RP8zQTrV%2F8000XDWtZe7jpB5TwwKK5Dkuo8Qiv15Qq32u%2B5n4JdHMonO8mJJ7%2FtP41H1LnImMy26nSTIVHbENQ09%2FxapGteoWNuackgn50aNlsGZSXl9vHTK26sqPGKceVY4djbBKlM0LV7v7jKT%2B1Uo9rxjF8wcNZku6CIivcxM7iS3vJdfmdy8XghzddRwxJg9sj3ltFTSxfPIopMRZRcxp%2F7s8GXaQoNl%2BqA%2B1b0%2BDnzWyzUFEJpWLCeC0P30Br5TJ1O1eHgTdjbZK05H6tmmcKyKuS4vFztQYEfvBKiQQNPBb%2B50K2wXiAkB5oAcc6SffWB%2F9KrsN2UynJRcVdfa5D0mONyjfnt%2BzHaza7mI3iCrXd4L4Nn8R%2FYKDEabqAETwGl5VBBnVcL6jb8K8jVDvyE3r0Fbl0DlNBUY62InzJd6MnbbHm6SD4JT6NSY3plLxXISrSMtJZKt9vQljEA9JH5lhfVVGlDMAEPcIylIyUE%2BZfE7WuxfDiVJ7aH2gYbg3FKQOQdXz62DF5O1EocgSiOAuvZVZMuo0G0bzdxFDA1nQeBF36svCgm0WtXguQHSqDcTRr86bYRspdkpVYLQUx1RiIOqh9g%2FAIpGM9ADV1Px%2FDAidGX9z%2FdQER5%2FkghYGbtIlxgrvyoZzDsTK4cve%2FAJDVd3gPiCOeiN%2Ffj8gG3oaQ%2BJdh5oe14oxTujqoDob%2FRPwwiAm0tDkvSV5JrH%2BuGcAtSfP82QZ%2BC4OhutGIGtR9cC4gJQrkOXpmbhPPU2e9TRX1qXyq8nCW3XrMNr2wqYGOrEBSSFNSFsvB5NbUrrUw4HrrN6vJ5wtZ6ZdWr1Ju5VSCjVQL4t3fXlGnjFEaml1B%2F86sxt%2B4W1VAUIFt%2B5LLnRmNKVYWb6r%2FfGsXn3hTjIS2tOgWGpDyXRQoqLtUpJm96jczZDryKT3rd2%2BkMTYxyVikUDDo6QO7NqiGRUzcw38hUtgMBzdkO2i89t7srV%2BXG2oMZQBf9HZfkcNbGe3f0H1MCiciu%2BQXhL0mKTff9HjsFad&X-Amz-SignedHeaders=host&X-Amz-Signature=2b0be2e443c944f63cc7ad4885c7fc1c24c10b4bf1804d2602d53e884b48d0f3

Resource

win10v2004-20230703-en

windows10-2004-x64

7 signatures

300 seconds

General

Target

https://s3.eu-west-1.amazonaws.com/oneview-mercury-plugins-eu.deliveryherocare.com/dh.herocare.wrap-up-plugin.js?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=ASIA44AU6XVVX2C3S7P5%2F20230807%2Feu-west-1%2Fs3%2Faws4_request&X-Amz-Date=20230807T094943Z&X-Amz-Expires=900&X-Amz-Security-Token=IQoJb3JpZ2luX2VjEMr%2F%2F%2F%2F%2F%2F%2F%2F%2F%2FwEaCWV1LXdlc3QtMSJHMEUCIFPdFduq68ITjnJwded3%2BGMS9SblOl5AZu9ItBQ71pwPAiEAmjlLWY%2FKQHmuXYKd%2FUD3ggmjlnuBLizEbP55exsqgIwqvAUIcxACGgw4ODQ4MDcyMjA1ODciDEXfRs6WS6F28bhiACqZBXJBlFNU%2FzdG94KmeharKbfOcdAiA8ts1hNlAVRGKavMuitNSWm9fJINOl30u%2FTxHOIc5bxuNNZpMIGXvWRbcHZ%2F%2BXOjmwDmKC0RP8zQTrV%2F8000XDWtZe7jpB5TwwKK5Dkuo8Qiv15Qq32u%2B5n4JdHMonO8mJJ7%2FtP41H1LnImMy26nSTIVHbENQ09%2FxapGteoWNuackgn50aNlsGZSXl9vHTK26sqPGKceVY4djbBKlM0LV7v7jKT%2B1Uo9rxjF8wcNZku6CIivcxM7iS3vJdfmdy8XghzddRwxJg9sj3ltFTSxfPIopMRZRcxp%2F7s8GXaQoNl%2BqA%2B1b0%2BDnzWyzUFEJpWLCeC0P30Br5TJ1O1eHgTdjbZK05H6tmmcKyKuS4vFztQYEfvBKiQQNPBb%2B50K2wXiAkB5oAcc6SffWB%2F9KrsN2UynJRcVdfa5D0mONyjfnt%2BzHaza7mI3iCrXd4L4Nn8R%2FYKDEabqAETwGl5VBBnVcL6jb8K8jVDvyE3r0Fbl0DlNBUY62InzJd6MnbbHm6SD4JT6NSY3plLxXISrSMtJZKt9vQljEA9JH5lhfVVGlDMAEPcIylIyUE%2BZfE7WuxfDiVJ7aH2gYbg3FKQOQdXz62DF5O1EocgSiOAuvZVZMuo0G0bzdxFDA1nQeBF36svCgm0WtXguQHSqDcTRr86bYRspdkpVYLQUx1RiIOqh9g%2FAIpGM9ADV1Px%2FDAidGX9z%2FdQER5%2FkghYGbtIlxgrvyoZzDsTK4cve%2FAJDVd3gPiCOeiN%2Ffj8gG3oaQ%2BJdh5oe14oxTujqoDob%2FRPwwiAm0tDkvSV5JrH%2BuGcAtSfP82QZ%2BC4OhutGIGtR9cC4gJQrkOXpmbhPPU2e9TRX1qXyq8nCW3XrMNr2wqYGOrEBSSFNSFsvB5NbUrrUw4HrrN6vJ5wtZ6ZdWr1Ju5VSCjVQL4t3fXlGnjFEaml1B%2F86sxt%2B4W1VAUIFt%2B5LLnRmNKVYWb6r%2FfGsXn3hTjIS2tOgWGpDyXRQoqLtUpJm96jczZDryKT3rd2%2BkMTYxyVikUDDo6QO7NqiGRUzcw38hUtgMBzdkO2i89t7srV%2BXG2oMZQBf9HZfkcNbGe3f0H1MCiciu%2BQXhL0mKTff9HjsFad&X-Amz-SignedHeaders=host&X-Amz-Signature=2b0be2e443c944f63cc7ad4885c7fc1c24c10b4bf1804d2602d53e884b48d0f3

Sharing

General

Malware Config

Signatures

Files