hxxps://l[.]facebook[.]com/l[.]php?u=https%3A%2F%2Fcutt[.]ly%2FDetbYc8g%3Fu%3Dhttps%253A%252F%252Fsales[.]automatemycashflow[.]com%252Flanding-page-h%253Ffbclid%253DIwZXh0bgNhZW0CMTAAAR3Vzd-ljOMDKWLCymszgw_Y4UdfyHFF9lzYT1XE7zmAgSVE_z8dX1OYYdw_aem_AX79WcSkiEnKgMIB422FVSBtAKiYnr2C8gfVkIBaykMOohZvQZcQm8wWUILs1rlNYqqGvAOR5t0g7KkfwvUypkq1%26h%3DAT1veVXNAcw2gNFoipYEdCKUeNj1fZ09coI-1tjOziL4PRR1XMB1TraTbDyI-jUJyE8gTksYeysGr7Gj3DVM06nDwVL01W3WZYwDmRfT20QvHJgmyMdXM-GWtIy54GYn4Rb25Q%26medium_source%3Dfacebook%26amp%253Bchannel_url%3Dhttps%253A%252F%252Fstaticxx[.]-[.]com%252Fconnect%252Fxd_arbiter%252Fr%252F__Bz3h5RzMx[.]js%253Fversion%253D43%2523cb%253Df2c4458ac9011a8%2526domain%253Dwww[.]-[.]com%2526origin%253Dhttps%25253A%25252F%25252Fwww[.]faceapp[.]com%25252Ff9e05c506536d8%2526relation%253Dopener%26amp%253Bdisplay%3Dpopup%26amp%253Be2e%3D%257B%257D%26fallback_redirect_uri%3Dhttps%253A%252F%252Fwww[.]-[.]com%252Frecording%252Fanne-marie-2002%252F769467295_2588586667%26amp%253Bhref%3D__xts__0%253D68[.]ARA_fKMo3PCf_itDVcXQhmoHtVpYrYJyDDs76y2dhfAsoU-58W9VS05DfwdiyHb-wOvGUvyctO00vhLED47VtVNb_vYcPCbYnhZCaL1Lwa2IHimHvSLtip8S8Jf7CJeijc8kHFZJWgOqAFKbVGzFiSdm5NLOBRLnjCcIwezvzH9cKKFDhwnUmp8U_VRDFy55LQhsAK9CV4oXqrNNMndbYTWxI7qzwY9pVp0uHU8dqdtXCiS9h7dcnW7ypQzvhGFSQhgbJomGSUNvSnLLt1jmrEXY1CHcFk1lreKv_YYNTDPgwKJnHJb9uGrUbVUi-17V2--IxFxf3ZPksX9yAtKJlfYX5UYXAug9JVu8cRrwPBXq2KYsvrz0%26amp%253B__tn__%3D-R%253Futm_medium%253Dweb%2526utm_campaign%253Dshare%2526utm_medium%253Dfacebook%26locale%3Den_US%26amp%253Bmobile_iframe%3Dfalse%26amp%253Bnext%3Dhttps%253A%252F%252Fstaticxx[.]-[.]com%252Fconnect%252Fxd_arbiter%252Fr%252F__Bz3h5RzMx[.]js%253Fversion%253D43%2523cb%253Dfbf82db659b47c%2526domain%253Dwww[.]-[.]com%2526origin%253Dhttps%25253A%25252F%25252Fwww[.]-[.]com%25252Ff9e05c506536d8%2526relation%253Dopener%2526frame%253Df12a89dbefb1ca%2526result%253D%252522xxRESULTTOKENxx%252522%26amp%253Bsdk%3Djoey%26amp%253Bversion%3Dv18[.]9%26amp%253Bfallback_redirect_uri%3Dhttps%253A%252F%252Fwww[.]-[.]com%252Frecording%252Fanne-marie-2002%252F769467295_2588586667%26amp%253Blocale%3Den_US%26fbclid%3DIwZXh0bgNhZW0CMTEAAR0ObqH7v7jWVjncpzOH-07qyLazfD2Fmp5HA5JobVX6rGdJ4Hk4xfYp1Nc_aem_ZmFrZWR1bW15MTZieXRlcw&h=AT2pHa0RldxZSJHH9e5plDH-2A5HJSkhFeuQrEWQiH7OR18spJSJ8UapvzJeDOzr-tBAF3oqwTOQedxvdDaGfwx6OtMMoh00y5pYyk9bXeqPT8m0gHFOoDSLGDLe0n2JwCmp&__tn__=%2CmH-y-R&c0=AT3txq-U4wIrQfAReQzCjhCHNsPGsvRLlSgosS2vKbry2ZF9OiQca39bHidojFwS__vR2A896V7t5jinEWA3O7_DfxeW-G8o2bXX3JRfs1i6NRn3tavghaH8uK28k0nq-v630xLqfgxC2_I8V5t1s97YUBT3sZMa8_n3BlUgZ2gfZC90tZK7EDULW5gIlTh2Oi7jnBiC5cvZlnOzC1Jdr3WjRd_ZOZXuMhSU_ArcsDnKlxyypN7P

Sharing

Behavioral task

behavioral1

Sample

https://l.facebook.com/l.php?u=https%3A%2F%2Fcutt.ly%2FDetbYc8g%3Fu%3Dhttps%253A%252F%252Fsales.automatemycashflow.com%252Flanding-page-h%253Ffbclid%253DIwZXh0bgNhZW0CMTAAAR3Vzd-ljOMDKWLCymszgw_Y4UdfyHFF9lzYT1XE7zmAgSVE_z8dX1OYYdw_aem_AX79WcSkiEnKgMIB422FVSBtAKiYnr2C8gfVkIBaykMOohZvQZcQm8wWUILs1rlNYqqGvAOR5t0g7KkfwvUypkq1%26h%3DAT1veVXNAcw2gNFoipYEdCKUeNj1fZ09coI-1tjOziL4PRR1XMB1TraTbDyI-jUJyE8gTksYeysGr7Gj3DVM06nDwVL01W3WZYwDmRfT20QvHJgmyMdXM-GWtIy54GYn4Rb25Q%26medium_source%3Dfacebook%26amp%253Bchannel_url%3Dhttps%253A%252F%252Fstaticxx.-.com%252Fconnect%252Fxd_arbiter%252Fr%252F__Bz3h5RzMx.js%253Fversion%253D43%2523cb%253Df2c4458ac9011a8%2526domain%253Dwww.-.com%2526origin%253Dhttps%25253A%25252F%25252Fwww.faceapp.com%25252Ff9e05c506536d8%2526relation%253Dopener%26amp%253Bdisplay%3Dpopup%26amp%253Be2e%3D%257B%257D%26fallback_redirect_uri%3Dhttps%253A%252F%252Fwww.-.com%252Frecording%252Fanne-marie-2002%252F769467295_2588586667%26amp%253Bhref%3D__xts__0%253D68.ARA_fKMo3PCf_itDVcXQhmoHtVpYrYJyDDs76y2dhfAsoU-58W9VS05DfwdiyHb-wOvGUvyctO00vhLED47VtVNb_vYcPCbYnhZCaL1Lwa2IHimHvSLtip8S8Jf7CJeijc8kHFZJWgOqAFKbVGzFiSdm5NLOBRLnjCcIwezvzH9cKKFDhwnUmp8U_VRDFy55LQhsAK9CV4oXqrNNMndbYTWxI7qzwY9pVp0uHU8dqdtXCiS9h7dcnW7ypQzvhGFSQhgbJomGSUNvSnLLt1jmrEXY1CHcFk1lreKv_YYNTDPgwKJnHJb9uGrUbVUi-17V2--IxFxf3ZPksX9yAtKJlfYX5UYXAug9JVu8cRrwPBXq2KYsvrz0%26amp%253B__tn__%3D-R%253Futm_medium%253Dweb%2526utm_campaign%253Dshare%2526utm_medium%253Dfacebook%26locale%3Den_US%26amp%253Bmobile_iframe%3Dfalse%26amp%253Bnext%3Dhttps%253A%252F%252Fstaticxx.-.com%252Fconnect%252Fxd_arbiter%252Fr%252F__Bz3h5RzMx.js%253Fversion%253D43%2523cb%253Dfbf82db659b47c%2526domain%253Dwww.-.com%2526origin%253Dhttps%25253A%25252F%25252Fwww.-.com%25252Ff9e05c506536d8%2526relation%253Dopener%2526frame%253Df12a89dbefb1ca%2526result%253D%252522xxRESULTTOKENxx%252522%26amp%253Bsdk%3Djoey%26amp%253Bversion%3Dv18.9%26amp%253Bfallback_redirect_uri%3Dhttps%253A%252F%252Fwww.-.com%252Frecording%252Fanne-marie-2002%252F769467295_2588586667%26amp%253Blocale%3Den_US%26fbclid%3DIwZXh0bgNhZW0CMTEAAR0ObqH7v7jWVjncpzOH-07qyLazfD2Fmp5HA5JobVX6rGdJ4Hk4xfYp1Nc_aem_ZmFrZWR1bW15MTZieXRlcw&h=AT2pHa0RldxZSJHH9e5plDH-2A5HJSkhFeuQrEWQiH7OR18spJSJ8UapvzJeDOzr-tBAF3oqwTOQedxvdDaGfwx6OtMMoh00y5pYyk9bXeqPT8m0gHFOoDSLGDLe0n2JwCmp&__tn__=%2CmH-y-R&c0=AT3txq-U4wIrQfAReQzCjhCHNsPGsvRLlSgosS2vKbry2ZF9OiQca39bHidojFwS__vR2A896V7t5jinEWA3O7_DfxeW-G8o2bXX3JRfs1i6NRn3tavghaH8uK28k0nq-v630xLqfgxC2_I8V5t1s97YUBT3sZMa8_n3BlUgZ2gfZC90tZK7EDULW5gIlTh2Oi7jnBiC5cvZlnOzC1Jdr3WjRd_ZOZXuMhSU_ArcsDnKlxyypN7P

Resource

win10v2004-20240508-en

windows10-2004-x64

6 signatures

150 seconds

General

Target

https://l.facebook.com/l.php?u=https%3A%2F%2Fcutt.ly%2FDetbYc8g%3Fu%3Dhttps%253A%252F%252Fsales.automatemycashflow.com%252Flanding-page-h%253Ffbclid%253DIwZXh0bgNhZW0CMTAAAR3Vzd-ljOMDKWLCymszgw_Y4UdfyHFF9lzYT1XE7zmAgSVE_z8dX1OYYdw_aem_AX79WcSkiEnKgMIB422FVSBtAKiYnr2C8gfVkIBaykMOohZvQZcQm8wWUILs1rlNYqqGvAOR5t0g7KkfwvUypkq1%26h%3DAT1veVXNAcw2gNFoipYEdCKUeNj1fZ09coI-1tjOziL4PRR1XMB1TraTbDyI-jUJyE8gTksYeysGr7Gj3DVM06nDwVL01W3WZYwDmRfT20QvHJgmyMdXM-GWtIy54GYn4Rb25Q%26medium_source%3Dfacebook%26amp%253Bchannel_url%3Dhttps%253A%252F%252Fstaticxx.-.com%252Fconnect%252Fxd_arbiter%252Fr%252F__Bz3h5RzMx.js%253Fversion%253D43%2523cb%253Df2c4458ac9011a8%2526domain%253Dwww.-.com%2526origin%253Dhttps%25253A%25252F%25252Fwww.faceapp.com%25252Ff9e05c506536d8%2526relation%253Dopener%26amp%253Bdisplay%3Dpopup%26amp%253Be2e%3D%257B%257D%26fallback_redirect_uri%3Dhttps%253A%252F%252Fwww.-.com%252Frecording%252Fanne-marie-2002%252F769467295_2588586667%26amp%253Bhref%3D__xts__0%253D68.ARA_fKMo3PCf_itDVcXQhmoHtVpYrYJyDDs76y2dhfAsoU-58W9VS05DfwdiyHb-wOvGUvyctO00vhLED47VtVNb_vYcPCbYnhZCaL1Lwa2IHimHvSLtip8S8Jf7CJeijc8kHFZJWgOqAFKbVGzFiSdm5NLOBRLnjCcIwezvzH9cKKFDhwnUmp8U_VRDFy55LQhsAK9CV4oXqrNNMndbYTWxI7qzwY9pVp0uHU8dqdtXCiS9h7dcnW7ypQzvhGFSQhgbJomGSUNvSnLLt1jmrEXY1CHcFk1lreKv_YYNTDPgwKJnHJb9uGrUbVUi-17V2--IxFxf3ZPksX9yAtKJlfYX5UYXAug9JVu8cRrwPBXq2KYsvrz0%26amp%253B__tn__%3D-R%253Futm_medium%253Dweb%2526utm_campaign%253Dshare%2526utm_medium%253Dfacebook%26locale%3Den_US%26amp%253Bmobile_iframe%3Dfalse%26amp%253Bnext%3Dhttps%253A%252F%252Fstaticxx.-.com%252Fconnect%252Fxd_arbiter%252Fr%252F__Bz3h5RzMx.js%253Fversion%253D43%2523cb%253Dfbf82db659b47c%2526domain%253Dwww.-.com%2526origin%253Dhttps%25253A%25252F%25252Fwww.-.com%25252Ff9e05c506536d8%2526relation%253Dopener%2526frame%253Df12a89dbefb1ca%2526result%253D%252522xxRESULTTOKENxx%252522%26amp%253Bsdk%3Djoey%26amp%253Bversion%3Dv18.9%26amp%253Bfallback_redirect_uri%3Dhttps%253A%252F%252Fwww.-.com%252Frecording%252Fanne-marie-2002%252F769467295_2588586667%26amp%253Blocale%3Den_US%26fbclid%3DIwZXh0bgNhZW0CMTEAAR0ObqH7v7jWVjncpzOH-07qyLazfD2Fmp5HA5JobVX6rGdJ4Hk4xfYp1Nc_aem_ZmFrZWR1bW15MTZieXRlcw&h=AT2pHa0RldxZSJHH9e5plDH-2A5HJSkhFeuQrEWQiH7OR18spJSJ8UapvzJeDOzr-tBAF3oqwTOQedxvdDaGfwx6OtMMoh00y5pYyk9bXeqPT8m0gHFOoDSLGDLe0n2JwCmp&__tn__=%2CmH-y-R&c0=AT3txq-U4wIrQfAReQzCjhCHNsPGsvRLlSgosS2vKbry2ZF9OiQca39bHidojFwS__vR2A896V7t5jinEWA3O7_DfxeW-G8o2bXX3JRfs1i6NRn3tavghaH8uK28k0nq-v630xLqfgxC2_I8V5t1s97YUBT3sZMa8_n3BlUgZ2gfZC90tZK7EDULW5gIlTh2Oi7jnBiC5cvZlnOzC1Jdr3WjRd_ZOZXuMhSU_ArcsDnKlxyypN7P

Sharing

General

Malware Config

Signatures

Files