hxxps://pagead2[.]googlesyndication[.]com/pagead/s/cookie_push_onload[.]html#aHR0cHM6Ly9zeW5jLXRtLmV2ZXJlc3R0ZWNoLm5ldC91cGkvcGlkLzV3M2pxcjRrP3JlZGlyPWh0dHBzJTNBJTJGJTJGY20uZy5kb3VibGVjbGljay5uZXQlMkZwaXhlbCUzRmdvb2dsZV9uaWQlM0RnOGY0N3MzOWUzOTlmM2ZlJTI2Z29vZ2xlX2htJTNEJTI0JTdCVE1fVVNFUl9JRF9CQVNFNjRFTkNfVVJMRU5DJTdEJmdvb2dsZV9naWQ9Q0FFU0VBd3dYOUh3MXdQTTBYUW9hVy1ob0tnJmdvb2dsZV9jdmVyPTEmZ29vZ2xlX3B1c2g9QVhjb09tVFdZeGhFTWlZSHZtYm5FQ0JEZTluQVZrcUdWMGt0SkdxUzdRQjFHX1l1c2lzbExWSWtWS0trb3lodGJkSE9icDVfMWVyM1lwOHk3Uld3ZzZVVVA1QXZaUlQtVHkyeDFR,aHR0cHM6Ly9tYXRjaC5hZHNydnIub3JnL3RyYWNrL2NtZi9nb29nbGU_Z29vZ2xlX2dpZD1DQUVTRUgzNElMQ2tQTDFEbEJETzhjVU9iLW8mZ29vZ2xlX2N2ZXI9MSZnb29nbGVfcHVzaD1BWGNvT21RcWlxOWwwR1dmeWdaWEtSVGhQMl9JaVZVejRYQkM2Y05uUVZNMnY5RVlEUjBHSWlPbkhfdHJQZlVmU1l0Y003bW1PUV83bWVDdzJFTTVXR2g0eDg4eVNyX1YwSEhNTEE=,aHR0cHM6Ly9zLnV1aWRrc2luYy5uZXQvbWF0Y2gvNDcvP3JlbW90ZV91aWQ9Q0FFU0VMQ0tQTk9pUzREa19VZTdvTlZkMWhVJmNfcGFyYW0xPUFYY29PbVF2bG40WDYyOGxXeDJDV2ptaHU2MnNFYTFsQXYyY051eEtRS2lKdFZORmdlZEY0MF9DUjVpVUo0SkxxeFp0VndLUXg4WjRreHFpX3Fwa2JJMTN2Y1hNQ25iVWVZOXhkdyZnZHByPSUlR0RQUiUlJmFkZHRsX2NvbnNlbnQ9JSVBRERUTF9DT05TRU5UJSUmZ29vZ2xlX2N2ZXI9MQ==,aHR0cHM6Ly9jMS5hZGZvcm0ubmV0L3NlcnZpbmcvY29va2llL21hdGNoLz9wYXJ0eT0xJmdvb2dsZV9naWQ9Q0FFU0VJSXBrakkxUTVlQ29MN1Zvc0ZaUXRnJmdvb2dsZV9jdmVyPTEmZ29vZ2xlX3B1c2g9QVhjb09tVFRsSFh0ZEU5cmNsVmpoRnc4dl81eVRTdVFhNExnNG9val81YmpITElmWXVkVVR5bUlsNDU5NnVwV3B1am5nS3FOdS1kSlc5UFE3UkppaFU4UEg0SU5ydzBGMzQ0NGlR,aHR0cHM6Ly9zeW5jLnNydi5zdGFja2FkYXB0LmNvbS9zeW5jP25pZD0xNTQmZ29vZ2xlX2dpZD1DQUVTRUlFZXlYdVJrRUNIcl8zNml1NU5XWTQmZ29vZ2xlX2N2ZXI9MSZnb29nbGVfcHVzaD1BWGNvT21RNjFLUWY4QldiTHhWdHRqcDkzdDNGNFhaMEVfYU4xVGprOXZILUxvLWgxbTRMazJ3b1hlMnFjSUp4bWJiR3QyX2pZYUlFUWRiU1BwQ09pRm1sWjBQNktmTk1Icl9pcEE=,aHR0cHM6Ly9iZWFjb24ubHlueC5jb2duaXRpdmxhYnMuY29tL2FkeC5naWY_Z29vZ2xlX2dpZD1DQUVTRU9lMUgxUDRxM3ZRRWVrZTQ4enVlWUEmZ29vZ2xlX2N2ZXI9MSZnb29nbGVfcHVzaD1BWGNvT21SRGUxbzZWSDcyYkFTSUFzMkxnM2hoZkdURmwtLVRubC14bWt3WmcyNjFfUnpXdVRSQnF5VjVnd0lLOG8zNXpWeWdTRXZveHI3WnhrdXZiM0J0U3NJTUNLUzZJV19RSmc=,aHR0cHM6Ly9vbmV0YWctc3lzLmNvbS9tYXRjaC8_aW50X2lkPTEwNiZyZWRpcj0xJmdvb2dsZV9naWQ9Q0FFU0VQMEZvcXdpMUFkREliUWd3MkZBY2lJJmdvb2dsZV9jdmVyPTEmZ29vZ2xlX3B1c2g9QVhjb09tUVRXUVR5b05ud1phNkFsZWplWWxUbUJsb1E3R1NkRDBLcGVVbEFHNTgyTHZubl9vT1M3dEJYbnVKQWRoelV4U3duODBZYnlqMkkweVdmeXBITm40T3ZFS2Zsdi1fd0Jfaw==,aHR0cHM6Ly9jbS5nLmRvdWJsZWNsaWNrLm5ldC9waXhlbC9hdHRyP2Q9QUhORjEzSUV4YjZjWXZkNVh5SHBYV1NDeTZpTlI3RnNKX0plUkZqSGdpZ2VrRWNVa0kwbjN0WXpCYUhpbjBJS0o0ckJ3Y0hWN2doTXlSZw==

Sharing

Behavioral task

behavioral1

Sample

https://pagead2.googlesyndication.com/pagead/s/cookie_push_onload.html#aHR0cHM6Ly9zeW5jLXRtLmV2ZXJlc3R0ZWNoLm5ldC91cGkvcGlkLzV3M2pxcjRrP3JlZGlyPWh0dHBzJTNBJTJGJTJGY20uZy5kb3VibGVjbGljay5uZXQlMkZwaXhlbCUzRmdvb2dsZV9uaWQlM0RnOGY0N3MzOWUzOTlmM2ZlJTI2Z29vZ2xlX2htJTNEJTI0JTdCVE1fVVNFUl9JRF9CQVNFNjRFTkNfVVJMRU5DJTdEJmdvb2dsZV9naWQ9Q0FFU0VBd3dYOUh3MXdQTTBYUW9hVy1ob0tnJmdvb2dsZV9jdmVyPTEmZ29vZ2xlX3B1c2g9QVhjb09tVFdZeGhFTWlZSHZtYm5FQ0JEZTluQVZrcUdWMGt0SkdxUzdRQjFHX1l1c2lzbExWSWtWS0trb3lodGJkSE9icDVfMWVyM1lwOHk3Uld3ZzZVVVA1QXZaUlQtVHkyeDFR,aHR0cHM6Ly9tYXRjaC5hZHNydnIub3JnL3RyYWNrL2NtZi9nb29nbGU_Z29vZ2xlX2dpZD1DQUVTRUgzNElMQ2tQTDFEbEJETzhjVU9iLW8mZ29vZ2xlX2N2ZXI9MSZnb29nbGVfcHVzaD1BWGNvT21RcWlxOWwwR1dmeWdaWEtSVGhQMl9JaVZVejRYQkM2Y05uUVZNMnY5RVlEUjBHSWlPbkhfdHJQZlVmU1l0Y003bW1PUV83bWVDdzJFTTVXR2g0eDg4eVNyX1YwSEhNTEE=,aHR0cHM6Ly9zLnV1aWRrc2luYy5uZXQvbWF0Y2gvNDcvP3JlbW90ZV91aWQ9Q0FFU0VMQ0tQTk9pUzREa19VZTdvTlZkMWhVJmNfcGFyYW0xPUFYY29PbVF2bG40WDYyOGxXeDJDV2ptaHU2MnNFYTFsQXYyY051eEtRS2lKdFZORmdlZEY0MF9DUjVpVUo0SkxxeFp0VndLUXg4WjRreHFpX3Fwa2JJMTN2Y1hNQ25iVWVZOXhkdyZnZHByPSUlR0RQUiUlJmFkZHRsX2NvbnNlbnQ9JSVBRERUTF9DT05TRU5UJSUmZ29vZ2xlX2N2ZXI9MQ==,aHR0cHM6Ly9jMS5hZGZvcm0ubmV0L3NlcnZpbmcvY29va2llL21hdGNoLz9wYXJ0eT0xJmdvb2dsZV9naWQ9Q0FFU0VJSXBrakkxUTVlQ29MN1Zvc0ZaUXRnJmdvb2dsZV9jdmVyPTEmZ29vZ2xlX3B1c2g9QVhjb09tVFRsSFh0ZEU5cmNsVmpoRnc4dl81eVRTdVFhNExnNG9val81YmpITElmWXVkVVR5bUlsNDU5NnVwV3B1am5nS3FOdS1kSlc5UFE3UkppaFU4UEg0SU5ydzBGMzQ0NGlR,aHR0cHM6Ly9zeW5jLnNydi5zdGFja2FkYXB0LmNvbS9zeW5jP25pZD0xNTQmZ29vZ2xlX2dpZD1DQUVTRUlFZXlYdVJrRUNIcl8zNml1NU5XWTQmZ29vZ2xlX2N2ZXI9MSZnb29nbGVfcHVzaD1BWGNvT21RNjFLUWY4QldiTHhWdHRqcDkzdDNGNFhaMEVfYU4xVGprOXZILUxvLWgxbTRMazJ3b1hlMnFjSUp4bWJiR3QyX2pZYUlFUWRiU1BwQ09pRm1sWjBQNktmTk1Icl9pcEE=,aHR0cHM6Ly9iZWFjb24ubHlueC5jb2duaXRpdmxhYnMuY29tL2FkeC5naWY_Z29vZ2xlX2dpZD1DQUVTRU9lMUgxUDRxM3ZRRWVrZTQ4enVlWUEmZ29vZ2xlX2N2ZXI9MSZnb29nbGVfcHVzaD1BWGNvT21SRGUxbzZWSDcyYkFTSUFzMkxnM2hoZkdURmwtLVRubC14bWt3WmcyNjFfUnpXdVRSQnF5VjVnd0lLOG8zNXpWeWdTRXZveHI3WnhrdXZiM0J0U3NJTUNLUzZJV19RSmc=,aHR0cHM6Ly9vbmV0YWctc3lzLmNvbS9tYXRjaC8_aW50X2lkPTEwNiZyZWRpcj0xJmdvb2dsZV9naWQ9Q0FFU0VQMEZvcXdpMUFkREliUWd3MkZBY2lJJmdvb2dsZV9jdmVyPTEmZ29vZ2xlX3B1c2g9QVhjb09tUVRXUVR5b05ud1phNkFsZWplWWxUbUJsb1E3R1NkRDBLcGVVbEFHNTgyTHZubl9vT1M3dEJYbnVKQWRoelV4U3duODBZYnlqMkkweVdmeXBITm40T3ZFS2Zsdi1fd0Jfaw==,aHR0cHM6Ly9jbS5nLmRvdWJsZWNsaWNrLm5ldC9waXhlbC9hdHRyP2Q9QUhORjEzSUV4YjZjWXZkNVh5SHBYV1NDeTZpTlI3RnNKX0plUkZqSGdpZ2VrRWNVa0kwbjN0WXpCYUhpbjBJS0o0ckJ3Y0hWN2doTXlSZw==

Resource

win10v2004-20230915-en

windows10-2004-x64

8 signatures

150 seconds

General

Target

https://pagead2.googlesyndication.com/pagead/s/cookie_push_onload.html#aHR0cHM6Ly9zeW5jLXRtLmV2ZXJlc3R0ZWNoLm5ldC91cGkvcGlkLzV3M2pxcjRrP3JlZGlyPWh0dHBzJTNBJTJGJTJGY20uZy5kb3VibGVjbGljay5uZXQlMkZwaXhlbCUzRmdvb2dsZV9uaWQlM0RnOGY0N3MzOWUzOTlmM2ZlJTI2Z29vZ2xlX2htJTNEJTI0JTdCVE1fVVNFUl9JRF9CQVNFNjRFTkNfVVJMRU5DJTdEJmdvb2dsZV9naWQ9Q0FFU0VBd3dYOUh3MXdQTTBYUW9hVy1ob0tnJmdvb2dsZV9jdmVyPTEmZ29vZ2xlX3B1c2g9QVhjb09tVFdZeGhFTWlZSHZtYm5FQ0JEZTluQVZrcUdWMGt0SkdxUzdRQjFHX1l1c2lzbExWSWtWS0trb3lodGJkSE9icDVfMWVyM1lwOHk3Uld3ZzZVVVA1QXZaUlQtVHkyeDFR,aHR0cHM6Ly9tYXRjaC5hZHNydnIub3JnL3RyYWNrL2NtZi9nb29nbGU_Z29vZ2xlX2dpZD1DQUVTRUgzNElMQ2tQTDFEbEJETzhjVU9iLW8mZ29vZ2xlX2N2ZXI9MSZnb29nbGVfcHVzaD1BWGNvT21RcWlxOWwwR1dmeWdaWEtSVGhQMl9JaVZVejRYQkM2Y05uUVZNMnY5RVlEUjBHSWlPbkhfdHJQZlVmU1l0Y003bW1PUV83bWVDdzJFTTVXR2g0eDg4eVNyX1YwSEhNTEE=,aHR0cHM6Ly9zLnV1aWRrc2luYy5uZXQvbWF0Y2gvNDcvP3JlbW90ZV91aWQ9Q0FFU0VMQ0tQTk9pUzREa19VZTdvTlZkMWhVJmNfcGFyYW0xPUFYY29PbVF2bG40WDYyOGxXeDJDV2ptaHU2MnNFYTFsQXYyY051eEtRS2lKdFZORmdlZEY0MF9DUjVpVUo0SkxxeFp0VndLUXg4WjRreHFpX3Fwa2JJMTN2Y1hNQ25iVWVZOXhkdyZnZHByPSUlR0RQUiUlJmFkZHRsX2NvbnNlbnQ9JSVBRERUTF9DT05TRU5UJSUmZ29vZ2xlX2N2ZXI9MQ==,aHR0cHM6Ly9jMS5hZGZvcm0ubmV0L3NlcnZpbmcvY29va2llL21hdGNoLz9wYXJ0eT0xJmdvb2dsZV9naWQ9Q0FFU0VJSXBrakkxUTVlQ29MN1Zvc0ZaUXRnJmdvb2dsZV9jdmVyPTEmZ29vZ2xlX3B1c2g9QVhjb09tVFRsSFh0ZEU5cmNsVmpoRnc4dl81eVRTdVFhNExnNG9val81YmpITElmWXVkVVR5bUlsNDU5NnVwV3B1am5nS3FOdS1kSlc5UFE3UkppaFU4UEg0SU5ydzBGMzQ0NGlR,aHR0cHM6Ly9zeW5jLnNydi5zdGFja2FkYXB0LmNvbS9zeW5jP25pZD0xNTQmZ29vZ2xlX2dpZD1DQUVTRUlFZXlYdVJrRUNIcl8zNml1NU5XWTQmZ29vZ2xlX2N2ZXI9MSZnb29nbGVfcHVzaD1BWGNvT21RNjFLUWY4QldiTHhWdHRqcDkzdDNGNFhaMEVfYU4xVGprOXZILUxvLWgxbTRMazJ3b1hlMnFjSUp4bWJiR3QyX2pZYUlFUWRiU1BwQ09pRm1sWjBQNktmTk1Icl9pcEE=,aHR0cHM6Ly9iZWFjb24ubHlueC5jb2duaXRpdmxhYnMuY29tL2FkeC5naWY_Z29vZ2xlX2dpZD1DQUVTRU9lMUgxUDRxM3ZRRWVrZTQ4enVlWUEmZ29vZ2xlX2N2ZXI9MSZnb29nbGVfcHVzaD1BWGNvT21SRGUxbzZWSDcyYkFTSUFzMkxnM2hoZkdURmwtLVRubC14bWt3WmcyNjFfUnpXdVRSQnF5VjVnd0lLOG8zNXpWeWdTRXZveHI3WnhrdXZiM0J0U3NJTUNLUzZJV19RSmc=,aHR0cHM6Ly9vbmV0YWctc3lzLmNvbS9tYXRjaC8_aW50X2lkPTEwNiZyZWRpcj0xJmdvb2dsZV9naWQ9Q0FFU0VQMEZvcXdpMUFkREliUWd3MkZBY2lJJmdvb2dsZV9jdmVyPTEmZ29vZ2xlX3B1c2g9QVhjb09tUVRXUVR5b05ud1phNkFsZWplWWxUbUJsb1E3R1NkRDBLcGVVbEFHNTgyTHZubl9vT1M3dEJYbnVKQWRoelV4U3duODBZYnlqMkkweVdmeXBITm40T3ZFS2Zsdi1fd0Jfaw==,aHR0cHM6Ly9jbS5nLmRvdWJsZWNsaWNrLm5ldC9waXhlbC9hdHRyP2Q9QUhORjEzSUV4YjZjWXZkNVh5SHBYV1NDeTZpTlI3RnNKX0plUkZqSGdpZ2VrRWNVa0kwbjN0WXpCYUhpbjBJS0o0ckJ3Y0hWN2doTXlSZw==

Sharing

General

Malware Config

Signatures

Files