hxxps://www[.]google[.]com/travel/clk?pc=AA80OsxOJqDJTtimFViThn67OQkloT30Ajm0l4ZvLJJer0pJHlDs6FtKUzjSNqFcVCDDRK9HbWM9J68g_B5lWBQlAc6FRf4zwpPAQbYRTV4byfvHC1SF4YRK3ax3ADGyZ2SM3lU&pcurl=hxxps://www[.]google[.]com/url?q=hxxps://www[.]google[.]com/url?q%3Dhttps%253A%252F%252Flinkprotect[.]cudasvc[.]com%252Furl%253Fa%253Dhttps%253A%252F%252Fwtb-redirect[.]swaven[.]com%252Foutbound_click%253Fwtbid%25253D5f7c25d3ec8d6069bb90e6a6%252526module%25253Dwtb%252526touchpoint%25253DST%252526url%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%25253D%25253D%2526c%253DE%252C1%252C5bEVim247z1fGhtUhmYwbNu1H8iIZr4NrgaCfUxKZdTyuUxW48gwPUfsoILDy-FCjYA5-2MCgtJlXy5N3PAFAD47XFHidB4K4cNJC7Z-FhFR1P96vPVq%2526typo%253D1%26sa%3DD%26sntz%3D1%26usg%3DAOvVaw0J6LlcZ_NU0Fh6jHTIRp_1&sa=D&source=editors&ust=1723214448768446&usg=AOvVaw1GX3vFZ3h3W

Sharing

Behavioral task

behavioral1

Sample

https://www.google.com/travel/clk?pc=AA80OsxOJqDJTtimFViThn67OQkloT30Ajm0l4ZvLJJer0pJHlDs6FtKUzjSNqFcVCDDRK9HbWM9J68g_B5lWBQlAc6FRf4zwpPAQbYRTV4byfvHC1SF4YRK3ax3ADGyZ2SM3lU&pcurl=https://www.google.com/url?q=https://www.google.com/url?q%3Dhttps%253A%252F%252Flinkprotect.cudasvc.com%252Furl%253Fa%253Dhttps%253A%252F%252Fwtb-redirect.swaven.com%252Foutbound_click%253Fwtbid%25253D5f7c25d3ec8d6069bb90e6a6%252526module%25253Dwtb%252526touchpoint%25253DST%252526url%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%25253D%25253D%2526c%253DE%252C1%252C5bEVim247z1fGhtUhmYwbNu1H8iIZr4NrgaCfUxKZdTyuUxW48gwPUfsoILDy-FCjYA5-2MCgtJlXy5N3PAFAD47XFHidB4K4cNJC7Z-FhFR1P96vPVq%2526typo%253D1%26sa%3DD%26sntz%3D1%26usg%3DAOvVaw0J6LlcZ_NU0Fh6jHTIRp_1&sa=D&source=editors&ust=1723214448768446&usg=AOvVaw1GX3vFZ3h3W

Resource

win10v2004-20240802-en

discovery

windows10-2004-x64

10 signatures

150 seconds

General

Target

https://www.google.com/travel/clk?pc=AA80OsxOJqDJTtimFViThn67OQkloT30Ajm0l4ZvLJJer0pJHlDs6FtKUzjSNqFcVCDDRK9HbWM9J68g_B5lWBQlAc6FRf4zwpPAQbYRTV4byfvHC1SF4YRK3ax3ADGyZ2SM3lU&pcurl=https://www.google.com/url?q=https://www.google.com/url?q%3Dhttps%253A%252F%252Flinkprotect.cudasvc.com%252Furl%253Fa%253Dhttps%253A%252F%252Fwtb-redirect.swaven.com%252Foutbound_click%253Fwtbid%25253D5f7c25d3ec8d6069bb90e6a6%252526module%25253Dwtb%252526touchpoint%25253DST%252526url%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%25253D%25253D%2526c%253DE%252C1%252C5bEVim247z1fGhtUhmYwbNu1H8iIZr4NrgaCfUxKZdTyuUxW48gwPUfsoILDy-FCjYA5-2MCgtJlXy5N3PAFAD47XFHidB4K4cNJC7Z-FhFR1P96vPVq%2526typo%253D1%26sa%3DD%26sntz%3D1%26usg%3DAOvVaw0J6LlcZ_NU0Fh6jHTIRp_1&sa=D&source=editors&ust=1723214448768446&usg=AOvVaw1GX3vFZ3h3W

Sharing

General

Malware Config

Signatures

Files