hxxps://www[.]google[.]com/travel/clk?pc=AA80OsxOJqDJTtimFViThn67OQkloT30Ajm0l4ZvLJJer0pJHlDs6FtKUzjSNqFcVCDDRK9HbWM9J68g_B5lWBQlAc6FRf4zwpPAQbYRTV4byfvHC1SF4YRK3ax3ADGyZ2SM3lU&pcurl=hxxps://www[.]google[.]com/url?q=hxxps://www[.]google[.]com/url?q=hxxps://linkprotect[.]cudasvc[.]com/url%3Fa%3Dhxxps://www[.]buoyhealth[.]com/bazaar/redirect/%3FcareResourceURL%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%253D%253D%26c%3DE%2C1%2CQuz_kC394O_slMTVhMRaXkAEH_GeneSxDM_5bxkXHs9SADSn6dpSaUOujHwsBfzhyN4qGMXTVq3vQt7_adv7MYirSRHgAFWrHLXCr6U6%26typo%3D1&sa=D&sntz=1&usg=AOvVaw1W-AZj2j_YhdjrDEUmeRJy&sa=D&source=editors&ust=1723126867596709&usg=AOvVaw3gzDfBJF-BmI1me7GlkfUF#YWRhbS5mbGludEB2b2x2by5jb20=

Sharing

Behavioral task

behavioral1

Sample

https://www.google.com/travel/clk?pc=AA80OsxOJqDJTtimFViThn67OQkloT30Ajm0l4ZvLJJer0pJHlDs6FtKUzjSNqFcVCDDRK9HbWM9J68g_B5lWBQlAc6FRf4zwpPAQbYRTV4byfvHC1SF4YRK3ax3ADGyZ2SM3lU&pcurl=https://www.google.com/url?q=https://www.google.com/url?q=https://linkprotect.cudasvc.com/url%3Fa%3Dhttps://www.buoyhealth.com/bazaar/redirect/%3FcareResourceURL%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%253D%253D%26c%3DE%2C1%2CQuz_kC394O_slMTVhMRaXkAEH_GeneSxDM_5bxkXHs9SADSn6dpSaUOujHwsBfzhyN4qGMXTVq3vQt7_adv7MYirSRHgAFWrHLXCr6U6%26typo%3D1&sa=D&sntz=1&usg=AOvVaw1W-AZj2j_YhdjrDEUmeRJy&sa=D&source=editors&ust=1723126867596709&usg=AOvVaw3gzDfBJF-BmI1me7GlkfUF#YWRhbS5mbGludEB2b2x2by5jb20=

Resource

win10v2004-20240802-en

discovery

windows10-2004-x64

7 signatures

150 seconds

General

Target

https://www.google.com/travel/clk?pc=AA80OsxOJqDJTtimFViThn67OQkloT30Ajm0l4ZvLJJer0pJHlDs6FtKUzjSNqFcVCDDRK9HbWM9J68g_B5lWBQlAc6FRf4zwpPAQbYRTV4byfvHC1SF4YRK3ax3ADGyZ2SM3lU&pcurl=https://www.google.com/url?q=https://www.google.com/url?q=https://linkprotect.cudasvc.com/url%3Fa%3Dhttps://www.buoyhealth.com/bazaar/redirect/%3FcareResourceURL%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%253D%253D%26c%3DE%2C1%2CQuz_kC394O_slMTVhMRaXkAEH_GeneSxDM_5bxkXHs9SADSn6dpSaUOujHwsBfzhyN4qGMXTVq3vQt7_adv7MYirSRHgAFWrHLXCr6U6%26typo%3D1&sa=D&sntz=1&usg=AOvVaw1W-AZj2j_YhdjrDEUmeRJy&sa=D&source=editors&ust=1723126867596709&usg=AOvVaw3gzDfBJF-BmI1me7GlkfUF#YWRhbS5mbGludEB2b2x2by5jb20=

Score

8^/10

phishing

Malware Config

Signatures

A potential corporate email address has been identified in the URL: [email protected]
phishing

Sharing

General

Malware Config

Signatures

Files