hxxps://3cwybss6[.]r[.]us-east-1[.]awstrack[.]me/L0/hxxps://www[.]google[.]com/travel/clk?pc=AA80OsxOJqDJTtimFViThn67OQkloT30Ajm0l4ZvLJJer0pJHlDs6FtKUzjSNqFcVCDDRK9HbWM9J68g_B5lWBQlAc6FRf4zwpPAQbYRTV4byfvHC1SF4YRK3ax3ADGyZ2SM3lU&pcurl=hxxps://www[.]google[.]com/url%3Fq%3Dhxxps://www[.]google[.]com/url%3Fq%253Dhttps%25253A%25252F%25252Flinkprotect[.]cudasvc[.]com%25252Furl%25253Fa%25253Dhttps%25253A%25252F%25252Fwtb-redirect[.]swaven[.]com%25252Foutbound_click%25253Fwtbid%2525253D5f7c25d3ec8d6069bb90e6a6%25252526module%2525253Dwtb%25252526touchpoint%2525253DST%25252526url%2525253DaHR0cHM6Ly9xZWJ1bGktY2xpbWF0ZS5nZS9iaXRyaXgvcmVkaXJlY3QucGhwP2dvdG89aHR0cDovL3U0NjIwNjQ5NS5jdC5zZW5kZ3JpZC5uZXQlMkZscyUyRmNsaWNrJTNGdXBuJTNEdTAwMS5RTFloZy0yQkt2VHNKNFhVZDJXODZCVVpsSnZxN253M0VQUHViemREWEFtQVBVOUpZLTJGNFpnWWUtMkZSbjRadm5Ob3E1U2R3c1hKeS0yQm05TkdxMTRFbXE4UHlyRHhUU3dobmNrUFRzOXEyc2JtSnVwV1p4cUVYVmVnWlR2QVJUQjBtUVlBRWhwbGVPbG9jTWlMNHVRSkdWU0EtMkYyOUhCNkV0SkE3QmNFSS0yRld1TndEdVoyZlgyc09yWWdBTjktMkJPSlhoV3h3RUYtMkJBeWpEcjRrQTFyQXhVQWJnNXJDN09BcXNlV0xQVnhNbUIyY0czcWNMemZSN29Uak5GR09SNS0yQjk3dWVhTUw4T2d6MXBmY3lyTUZRY2JHWkp3NnFQaThVN3hqVk50Si0yRmlUSnV3azd1NTZDZ3ZwcEpYLTJGNkdFTkxRYWlmc3dGVmdvSUVzTC0yRktTTy0yQjh1TFZTb3FobDJIQS0zRC0zRDlSUUNfcDZiOVBGLTJGUEJoQ1ZjSWFPLTJCVkEybnhzcjNBa0Zzdkxza1IwMDRwaXU2QmVyZ1ZiMFN3OE5YTzEyTE5lbUlnRzQzai0yRjBpSFFJWDVxNWFkSTI3RWhYRk0yUmpNWXVXWUNEVC0yRnJUVG9OV1E5T3RWaUlIRGh0WmpCLTJCR0RRalVoLTJCaEpkdFgyNG9KeG9HRzRScHdGbzd0SmYwLTJGSHQtMkZGLTJGTnBXRUFsTmtvei0yRmlPZDVkUk55VFUxaTdiWTZOLTJGdlFBY3JpcjVvSzQ0TDh1TnNIWlFBcXVndUVrdHk3c2ZlakVIRFY1cFNSdVJITW9oMm9qR1JueGtwLTJGb25FbjYxb2NabUJrUWE2NGNkc0NVU2traktULTJGd3dJT211R0M4WlEzVmN3U25aV1lPRmU5b1ZubFJTd0Q0bDZOV2l0UnNQMzNsV0Y4R3R1YUFWTWNGeEVtRHJVV3UwMUhnZEYtMkZsczBBT2xnQVFsUHpBYlBoZVBod291N3J6UVJkaUpIQVBTTzloQ3pOVDVFV09MdTNyb294bzBGUVBNTnJyNXVjaEk2U0pqLTJCVTlQcTJGa3NsQVEwUlVvY2xxN3pUODRwQ2tUVUdxdzdnYw%2525253D%2525253D%252526c%25253DE%25252C1%25252C5bEVim247z1fGhtUhmYwbNu1H8iIZr4NrgaCfUxKZdTyuUxW48gwPUfsoILDy-FCjYA5-2MCgtJlXy5N3PAFAD47XFHidB4K4cNJC7Z-FhFR1P96vPVq%252526typo%25253D1%2526sa%253DD%25

Sharing

Behavioral task

behavioral1

Sample

https://3cwybss6.r.us-east-1.awstrack.me/L0/https://www.google.com/travel/clk?pc=AA80OsxOJqDJTtimFViThn67OQkloT30Ajm0l4ZvLJJer0pJHlDs6FtKUzjSNqFcVCDDRK9HbWM9J68g_B5lWBQlAc6FRf4zwpPAQbYRTV4byfvHC1SF4YRK3ax3ADGyZ2SM3lU&pcurl=https://www.google.com/url%3Fq%3Dhttps://www.google.com/url%3Fq%253Dhttps%25253A%25252F%25252Flinkprotect.cudasvc.com%25252Furl%25253Fa%25253Dhttps%25253A%25252F%25252Fwtb-redirect.swaven.com%25252Foutbound_click%25253Fwtbid%2525253D5f7c25d3ec8d6069bb90e6a6%25252526module%2525253Dwtb%25252526touchpoint%2525253DST%25252526url%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%2525253D%2525253D%252526c%25253DE%25252C1%25252C5bEVim247z1fGhtUhmYwbNu1H8iIZr4NrgaCfUxKZdTyuUxW48gwPUfsoILDy-FCjYA5-2MCgtJlXy5N3PAFAD47XFHidB4K4cNJC7Z-FhFR1P96vPVq%252526typo%25253D1%2526sa%253DD%25

Resource

win10v2004-20240802-en

discovery

windows10-2004-x64

10 signatures

150 seconds

General

Target

https://3cwybss6.r.us-east-1.awstrack.me/L0/https://www.google.com/travel/clk?pc=AA80OsxOJqDJTtimFViThn67OQkloT30Ajm0l4ZvLJJer0pJHlDs6FtKUzjSNqFcVCDDRK9HbWM9J68g_B5lWBQlAc6FRf4zwpPAQbYRTV4byfvHC1SF4YRK3ax3ADGyZ2SM3lU&pcurl=https://www.google.com/url%3Fq%3Dhttps://www.google.com/url%3Fq%253Dhttps%25253A%25252F%25252Flinkprotect.cudasvc.com%25252Furl%25253Fa%25253Dhttps%25253A%25252F%25252Fwtb-redirect.swaven.com%25252Foutbound_click%25253Fwtbid%2525253D5f7c25d3ec8d6069bb90e6a6%25252526module%2525253Dwtb%25252526touchpoint%2525253DST%25252526url%2525253DaHR0cHM6Ly9xZWJ1bGktY2xpbWF0ZS5nZS9iaXRyaXgvcmVkaXJlY3QucGhwP2dvdG89aHR0cDovL3U0NjIwNjQ5NS5jdC5zZW5kZ3JpZC5uZXQlMkZscyUyRmNsaWNrJTNGdXBuJTNEdTAwMS5RTFloZy0yQkt2VHNKNFhVZDJXODZCVVpsSnZxN253M0VQUHViemREWEFtQVBVOUpZLTJGNFpnWWUtMkZSbjRadm5Ob3E1U2R3c1hKeS0yQm05TkdxMTRFbXE4UHlyRHhUU3dobmNrUFRzOXEyc2JtSnVwV1p4cUVYVmVnWlR2QVJUQjBtUVlBRWhwbGVPbG9jTWlMNHVRSkdWU0EtMkYyOUhCNkV0SkE3QmNFSS0yRld1TndEdVoyZlgyc09yWWdBTjktMkJPSlhoV3h3RUYtMkJBeWpEcjRrQTFyQXhVQWJnNXJDN09BcXNlV0xQVnhNbUIyY0czcWNMemZSN29Uak5GR09SNS0yQjk3dWVhTUw4T2d6MXBmY3lyTUZRY2JHWkp3NnFQaThVN3hqVk50Si0yRmlUSnV3azd1NTZDZ3ZwcEpYLTJGNkdFTkxRYWlmc3dGVmdvSUVzTC0yRktTTy0yQjh1TFZTb3FobDJIQS0zRC0zRDlSUUNfcDZiOVBGLTJGUEJoQ1ZjSWFPLTJCVkEybnhzcjNBa0Zzdkxza1IwMDRwaXU2QmVyZ1ZiMFN3OE5YTzEyTE5lbUlnRzQzai0yRjBpSFFJWDVxNWFkSTI3RWhYRk0yUmpNWXVXWUNEVC0yRnJUVG9OV1E5T3RWaUlIRGh0WmpCLTJCR0RRalVoLTJCaEpkdFgyNG9KeG9HRzRScHdGbzd0SmYwLTJGSHQtMkZGLTJGTnBXRUFsTmtvei0yRmlPZDVkUk55VFUxaTdiWTZOLTJGdlFBY3JpcjVvSzQ0TDh1TnNIWlFBcXVndUVrdHk3c2ZlakVIRFY1cFNSdVJITW9oMm9qR1JueGtwLTJGb25FbjYxb2NabUJrUWE2NGNkc0NVU2traktULTJGd3dJT211R0M4WlEzVmN3U25aV1lPRmU5b1ZubFJTd0Q0bDZOV2l0UnNQMzNsV0Y4R3R1YUFWTWNGeEVtRHJVV3UwMUhnZEYtMkZsczBBT2xnQVFsUHpBYlBoZVBod291N3J6UVJkaUpIQVBTTzloQ3pOVDVFV09MdTNyb294bzBGUVBNTnJyNXVjaEk2U0pqLTJCVTlQcTJGa3NsQVEwUlVvY2xxN3pUODRwQ2tUVUdxdzdnYw%2525253D%2525253D%252526c%25253DE%25252C1%25252C5bEVim247z1fGhtUhmYwbNu1H8iIZr4NrgaCfUxKZdTyuUxW48gwPUfsoILDy-FCjYA5-2MCgtJlXy5N3PAFAD47XFHidB4K4cNJC7Z-FhFR1P96vPVq%252526typo%25253D1%2526sa%253DD%25

Sharing

General

Malware Config

Signatures

Files