hxxps://click-haproxy[.]supersonicads[.]com/endcardclick/internal-media/rewarded-video/4ce8f1e0-8767-11ee-80be-a5b3fa4bdfb4/opp_101/8738ddb09?ispl=true&userAgent=&insType=2&xCodeVersion=1430&bdo=1&ismsd=1&fnv=3f5effc2f7a373fa140da6fc249b8652&supplyTrackID=6444528109&city=Silverton&iabbp=cd7d5750c86ece6d9717c071803ca324&rr=OR&mobileCarrier=&abt=A&dspm=0[.]4125&iabai=4ce45e00-8767-11ee-8da3-9b8db927e91f_2073655466&rati=2&sessionDepth=1&userApp=CDD445FB-EF66-48D8-8C22-05D007B062BC_770031&pf=1&sdt=b&dsOppPlumbus=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&adType=1&auff=32&deviceGroup=64&cld=a&deviceModel=iPad12%2C1&demandBundleEntityID=1224917&bds=3a18be03f5721306ff5e0d24d2b5a742&dpi=12&ppi=2[.]0&isp=Alyrica+Networks&ifer=778fd44de2786b07f4a05290d2ecaac3&supplyBundleId=com[.]atreus[.]ballsnropes&deviceLanguage=en&clickType=videoClick&rt=1700458823678&iabbt=hard&instanceID=11486559&country=US&rewardsHex=1&cr=KLUv_SAwgQEAIjK1-m1uDQHeE8yu1rmtqiBI7Sl0rYTewv2e9zf_swgyJFjAQonab3ZC2kCKtFG_&simp=On&uPlumbus=0CggIBRIEMTU4NwoHCAoSAzAwMAoFCBkSATEKCQg0EgU3LjIuNAoMCBQSCDUxNDkxMzc5CgwIFRIIOTQyOTY4NzcKBwgJEgMwMDAKBggiEgIxMAoJCCMSBWZhbHNlCg4IExIKMTcwMDM2NDU1NAooCD4SJDAwMDAwMDAwLTAwMDAtMDAwMC0wMDAwLTAwMDAwMDAwMDAwMAooCBYSJEM0RjUzOUZFLUVBMkEtNDc1Ri1BNzlGLTM3MzA0MDgwOTExNAoHCCwSAzIuMAooCGcSJDgxN0M0Mjg3LUMzOEUtNDQ2OC1CMzFELUM4QTU2Rjk4MjM4RQoICEISBHRydWUKBggaEgJlbgoXCBcSE0FtZXJpY2EvTG9zX0FuZ2VsZXM&displayWidth=405[.]0&browserName=Other&ipData=0&deviceOs=ios&dsicp=0[.]024019637371242696&clickCoords=466%2C949&gpf=0&auid=c4f539fe-ea2a-475f-a79f-373040809114&appOrientation=Portrait&deviceOEM=Apple&iphoneAppOnIpadDevice=&dsReqPlumbus=0CgsINxIHMC4wMTY4MgoHCGUSAzcxMw&dynamicParameter=0-770031-0-CDD445FB%7E*%7EEF66%7E*%7E48D8%7E*%7E8C22%7E*%7E05D007B062BC-be-8561895-8606089-0-2252076843404288-8-12628-US-1163-0-0--SVirtual+Item-0-3-0-0-0-0-0-0-267b9-655af147-0--0-0--0-5[.]104-4ce8f1e0g8767g11eeg80bega5b3fa4bdfb4-opp_101--737903ee&displayHeight=540[.]0&diskFreeSize=1587&creativeID=1169967&cot=3&segments=156&att=1&caf=0&ifb=3a18be03f5721306ff5e0d24d2b5a742&demandBundleID=com[.]tcg[.]fpsdungeonminer&idfv=CDD445FB-EF66-48D8-8C22-05D007B062BC&vuid=CDD445FB-EF66-48D8-8C22-05D007B062BC&rip=IUOSlQwZRth2fO1qugqjsA&ifprb=0[.]0018&sdp=0ChAITRIMbW1wX2FkanVzdGVkCgUIUxIBMQoICFcSBFJPQVMKBQhcEgE2&cf=true&bannerID=8606089&gsID=341993&petel=2&udbf=0&u2a=1&ubc=dKYA7ywTltcD3MbfBdejlBldztRDyHZEg7ZqV8hu2fY&deviceOSVersion=17[.]0&spp=0&cp=false&platform=3&urc=Iv-di1I_jYeCFPzIT9b9iw&accLang=en-US%2C+en%3Bq%3D0[.]9&endcardType=3&isLimitAdTrackingEnabled=true&sdkAbName=0&UII=57eaabe5-f5e2-4fcc-ba2e-ee205484a41d&landingID=12628&bdot=uar&SDKVersion=5[.]104&cvs=1&appID=770031&connectionType=2

Sharing

Behavioral task

behavioral1

Sample

https://click-haproxy.supersonicads.com/endcardclick/internal-media/rewarded-video/4ce8f1e0-8767-11ee-80be-a5b3fa4bdfb4/opp_101/8738ddb09?ispl=true&userAgent=&insType=2&xCodeVersion=1430&bdo=1&ismsd=1&fnv=3f5effc2f7a373fa140da6fc249b8652&supplyTrackID=6444528109&city=Silverton&iabbp=cd7d5750c86ece6d9717c071803ca324&rr=OR&mobileCarrier=&abt=A&dspm=0.4125&iabai=4ce45e00-8767-11ee-8da3-9b8db927e91f_2073655466&rati=2&sessionDepth=1&userApp=CDD445FB-EF66-48D8-8C22-05D007B062BC_770031&pf=1&sdt=b&dsOppPlumbus=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&adType=1&auff=32&deviceGroup=64&cld=a&deviceModel=iPad12%2C1&demandBundleEntityID=1224917&bds=3a18be03f5721306ff5e0d24d2b5a742&dpi=12&ppi=2.0&isp=Alyrica+Networks&ifer=778fd44de2786b07f4a05290d2ecaac3&supplyBundleId=com.atreus.ballsnropes&deviceLanguage=en&clickType=videoClick&rt=1700458823678&iabbt=hard&instanceID=11486559&country=US&rewardsHex=1&cr=KLUv_SAwgQEAIjK1-m1uDQHeE8yu1rmtqiBI7Sl0rYTewv2e9zf_swgyJFjAQonab3ZC2kCKtFG_&simp=On&uPlumbus=0CggIBRIEMTU4NwoHCAoSAzAwMAoFCBkSATEKCQg0EgU3LjIuNAoMCBQSCDUxNDkxMzc5CgwIFRIIOTQyOTY4NzcKBwgJEgMwMDAKBggiEgIxMAoJCCMSBWZhbHNlCg4IExIKMTcwMDM2NDU1NAooCD4SJDAwMDAwMDAwLTAwMDAtMDAwMC0wMDAwLTAwMDAwMDAwMDAwMAooCBYSJEM0RjUzOUZFLUVBMkEtNDc1Ri1BNzlGLTM3MzA0MDgwOTExNAoHCCwSAzIuMAooCGcSJDgxN0M0Mjg3LUMzOEUtNDQ2OC1CMzFELUM4QTU2Rjk4MjM4RQoICEISBHRydWUKBggaEgJlbgoXCBcSE0FtZXJpY2EvTG9zX0FuZ2VsZXM&displayWidth=405.0&browserName=Other&ipData=0&deviceOs=ios&dsicp=0.024019637371242696&clickCoords=466%2C949&gpf=0&auid=c4f539fe-ea2a-475f-a79f-373040809114&appOrientation=Portrait&deviceOEM=Apple&iphoneAppOnIpadDevice=&dsReqPlumbus=0CgsINxIHMC4wMTY4MgoHCGUSAzcxMw&dynamicParameter=0-770031-0-CDD445FB%7E*%7EEF66%7E*%7E48D8%7E*%7E8C22%7E*%7E05D007B062BC-be-8561895-8606089-0-2252076843404288-8-12628-US-1163-0-0--SVirtual+Item-0-3-0-0-0-0-0-0-267b9-655af147-0--0-0--0-5.104-4ce8f1e0g8767g11eeg80bega5b3fa4bdfb4-opp_101--737903ee&displayHeight=540.0&diskFreeSize=1587&creativeID=1169967&cot=3&segments=156&att=1&caf=0&ifb=3a18be03f5721306ff5e0d24d2b5a742&demandBundleID=com.tcg.fpsdungeonminer&idfv=CDD445FB-EF66-48D8-8C22-05D007B062BC&vuid=CDD445FB-EF66-48D8-8C22-05D007B062BC&rip=IUOSlQwZRth2fO1qugqjsA&ifprb=0.0018&sdp=0ChAITRIMbW1wX2FkanVzdGVkCgUIUxIBMQoICFcSBFJPQVMKBQhcEgE2&cf=true&bannerID=8606089&gsID=341993&petel=2&udbf=0&u2a=1&ubc=dKYA7ywTltcD3MbfBdejlBldztRDyHZEg7ZqV8hu2fY&deviceOSVersion=17.0&spp=0&cp=false&platform=3&urc=Iv-di1I_jYeCFPzIT9b9iw&accLang=en-US%2C+en%3Bq%3D0.9&endcardType=3&isLimitAdTrackingEnabled=true&sdkAbName=0&UII=57eaabe5-f5e2-4fcc-ba2e-ee205484a41d&landingID=12628&bdot=uar&SDKVersion=5.104&cvs=1&appID=770031&connectionType=2

Resource

win10v2004-20231023-en

windows10-2004-x64

6 signatures

1800 seconds

General

Target

https://click-haproxy.supersonicads.com/endcardclick/internal-media/rewarded-video/4ce8f1e0-8767-11ee-80be-a5b3fa4bdfb4/opp_101/8738ddb09?ispl=true&userAgent=&insType=2&xCodeVersion=1430&bdo=1&ismsd=1&fnv=3f5effc2f7a373fa140da6fc249b8652&supplyTrackID=6444528109&city=Silverton&iabbp=cd7d5750c86ece6d9717c071803ca324&rr=OR&mobileCarrier=&abt=A&dspm=0.4125&iabai=4ce45e00-8767-11ee-8da3-9b8db927e91f_2073655466&rati=2&sessionDepth=1&userApp=CDD445FB-EF66-48D8-8C22-05D007B062BC_770031&pf=1&sdt=b&dsOppPlumbus=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&adType=1&auff=32&deviceGroup=64&cld=a&deviceModel=iPad12%2C1&demandBundleEntityID=1224917&bds=3a18be03f5721306ff5e0d24d2b5a742&dpi=12&ppi=2.0&isp=Alyrica+Networks&ifer=778fd44de2786b07f4a05290d2ecaac3&supplyBundleId=com.atreus.ballsnropes&deviceLanguage=en&clickType=videoClick&rt=1700458823678&iabbt=hard&instanceID=11486559&country=US&rewardsHex=1&cr=KLUv_SAwgQEAIjK1-m1uDQHeE8yu1rmtqiBI7Sl0rYTewv2e9zf_swgyJFjAQonab3ZC2kCKtFG_&simp=On&uPlumbus=0CggIBRIEMTU4NwoHCAoSAzAwMAoFCBkSATEKCQg0EgU3LjIuNAoMCBQSCDUxNDkxMzc5CgwIFRIIOTQyOTY4NzcKBwgJEgMwMDAKBggiEgIxMAoJCCMSBWZhbHNlCg4IExIKMTcwMDM2NDU1NAooCD4SJDAwMDAwMDAwLTAwMDAtMDAwMC0wMDAwLTAwMDAwMDAwMDAwMAooCBYSJEM0RjUzOUZFLUVBMkEtNDc1Ri1BNzlGLTM3MzA0MDgwOTExNAoHCCwSAzIuMAooCGcSJDgxN0M0Mjg3LUMzOEUtNDQ2OC1CMzFELUM4QTU2Rjk4MjM4RQoICEISBHRydWUKBggaEgJlbgoXCBcSE0FtZXJpY2EvTG9zX0FuZ2VsZXM&displayWidth=405.0&browserName=Other&ipData=0&deviceOs=ios&dsicp=0.024019637371242696&clickCoords=466%2C949&gpf=0&auid=c4f539fe-ea2a-475f-a79f-373040809114&appOrientation=Portrait&deviceOEM=Apple&iphoneAppOnIpadDevice=&dsReqPlumbus=0CgsINxIHMC4wMTY4MgoHCGUSAzcxMw&dynamicParameter=0-770031-0-CDD445FB%7E*%7EEF66%7E*%7E48D8%7E*%7E8C22%7E*%7E05D007B062BC-be-8561895-8606089-0-2252076843404288-8-12628-US-1163-0-0--SVirtual+Item-0-3-0-0-0-0-0-0-267b9-655af147-0--0-0--0-5.104-4ce8f1e0g8767g11eeg80bega5b3fa4bdfb4-opp_101--737903ee&displayHeight=540.0&diskFreeSize=1587&creativeID=1169967&cot=3&segments=156&att=1&caf=0&ifb=3a18be03f5721306ff5e0d24d2b5a742&demandBundleID=com.tcg.fpsdungeonminer&idfv=CDD445FB-EF66-48D8-8C22-05D007B062BC&vuid=CDD445FB-EF66-48D8-8C22-05D007B062BC&rip=IUOSlQwZRth2fO1qugqjsA&ifprb=0.0018&sdp=0ChAITRIMbW1wX2FkanVzdGVkCgUIUxIBMQoICFcSBFJPQVMKBQhcEgE2&cf=true&bannerID=8606089&gsID=341993&petel=2&udbf=0&u2a=1&ubc=dKYA7ywTltcD3MbfBdejlBldztRDyHZEg7ZqV8hu2fY&deviceOSVersion=17.0&spp=0&cp=false&platform=3&urc=Iv-di1I_jYeCFPzIT9b9iw&accLang=en-US%2C+en%3Bq%3D0.9&endcardType=3&isLimitAdTrackingEnabled=true&sdkAbName=0&UII=57eaabe5-f5e2-4fcc-ba2e-ee205484a41d&landingID=12628&bdot=uar&SDKVersion=5.104&cvs=1&appID=770031&connectionType=2

Sharing

General

Malware Config

Signatures

Files