hxxps://www[.]google[.]com/travel/clk?pc=AA80OsxOJqDJTtimFViThn67OQkloT30Ajm0l4ZvLJJer0pJHlDs6FtKUzjSNqFcVCDDRK9HbWM9J68g_B5lWBQlAc6FRf4zwpPAQbYRTV4byfvHC1SF4YRK3ax3ADGyZ2SM3lU&pcurl=hxxps://www[.]google[.]com%2Furl%3Fq%3Dhttps%3A%2F%2Fwww[.]google[.]com%2Furl%3Fq%253Dhttps%25253A%25252F%25252Flinkprotect[.]cudasvc[.]com%25252Furl%25253Fa%25253Dhttps%25253A%25252F%25252Fwtb-redirect[.]swaven[.]com%25252Foutbound_click%25253Fwtbid%2525253D60c775e445e449143acba972%25252526module%2525253Dwtb%25252526touchpoint%2525253DST%25252526lang%2525253Den%25252526sid%2525253D2095_WEB%25252526avpid%2525253D0041100002228%25252526prc%2525253D7[.]97%25252526prc_currency%2525253DUSD%25252526clkurlt%2525253D3%25252526clkurlaff%2525253D0%25252526url%2525253DaHR0cHM6Ly9nby5yZWRpcmVjdGluZ2F0LmNvbS8%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%2525253D%2525253D%252526c%25253DE%25252C1%25252CDR46MsYBoqQYCIR265tDuHDy_G5rYCXcSJD3yqZE084XnwKAnmUdOkGTEGQQhlwGOYj_RpZJHPPpeiAVAfJ08NWAIzAZZeX1VKIwBKyDiJ-Dg8gikcGjT85owT4%25252C%252526typo%25253D1%2526sa%253DD%2526sntz%253D1%2526usg%253DAOvVaw0bsfu0X3bIsXDSXfnFD2O3%26sa%3DD%26source%3Deditors%26ust%3D1723825580925759%26usg%3DAOvVaw1cf9Fjs47PH1afZ6r9aCTM%23bGRpY2tzb25AZXZvbGVudGhlYWx0aC5jb20=

Sharing

Behavioral task

behavioral1

Sample

https://www.google.com/travel/clk?pc=AA80OsxOJqDJTtimFViThn67OQkloT30Ajm0l4ZvLJJer0pJHlDs6FtKUzjSNqFcVCDDRK9HbWM9J68g_B5lWBQlAc6FRf4zwpPAQbYRTV4byfvHC1SF4YRK3ax3ADGyZ2SM3lU&pcurl=https://www.google.com%2Furl%3Fq%3Dhttps%3A%2F%2Fwww.google.com%2Furl%3Fq%253Dhttps%25253A%25252F%25252Flinkprotect.cudasvc.com%25252Furl%25253Fa%25253Dhttps%25253A%25252F%25252Fwtb-redirect.swaven.com%25252Foutbound_click%25253Fwtbid%2525253D60c775e445e449143acba972%25252526module%2525253Dwtb%25252526touchpoint%2525253DST%25252526lang%2525253Den%25252526sid%2525253D2095_WEB%25252526avpid%2525253D0041100002228%25252526prc%2525253D7.97%25252526prc_currency%2525253DUSD%25252526clkurlt%2525253D3%25252526clkurlaff%2525253D0%25252526url%2525253DaHR0cHM6Ly9nby5yZWRpcmVjdGluZ2F0LmNvbS8%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%2525253D%2525253D%252526c%25253DE%25252C1%25252CDR46MsYBoqQYCIR265tDuHDy_G5rYCXcSJD3yqZE084XnwKAnmUdOkGTEGQQhlwGOYj_RpZJHPPpeiAVAfJ08NWAIzAZZeX1VKIwBKyDiJ-Dg8gikcGjT85owT4%25252C%252526typo%25253D1%2526sa%253DD%2526sntz%253D1%2526usg%253DAOvVaw0bsfu0X3bIsXDSXfnFD2O3%26sa%3DD%26source%3Deditors%26ust%3D1723825580925759%26usg%3DAOvVaw1cf9Fjs47PH1afZ6r9aCTM%23bGRpY2tzb25AZXZvbGVudGhlYWx0aC5jb20=

Resource

win10v2004-20240802-en

discovery

windows10-2004-x64

10 signatures

150 seconds

General

Target

https://www.google.com/travel/clk?pc=AA80OsxOJqDJTtimFViThn67OQkloT30Ajm0l4ZvLJJer0pJHlDs6FtKUzjSNqFcVCDDRK9HbWM9J68g_B5lWBQlAc6FRf4zwpPAQbYRTV4byfvHC1SF4YRK3ax3ADGyZ2SM3lU&pcurl=https://www.google.com%2Furl%3Fq%3Dhttps%3A%2F%2Fwww.google.com%2Furl%3Fq%253Dhttps%25253A%25252F%25252Flinkprotect.cudasvc.com%25252Furl%25253Fa%25253Dhttps%25253A%25252F%25252Fwtb-redirect.swaven.com%25252Foutbound_click%25253Fwtbid%2525253D60c775e445e449143acba972%25252526module%2525253Dwtb%25252526touchpoint%2525253DST%25252526lang%2525253Den%25252526sid%2525253D2095_WEB%25252526avpid%2525253D0041100002228%25252526prc%2525253D7.97%25252526prc_currency%2525253DUSD%25252526clkurlt%2525253D3%25252526clkurlaff%2525253D0%25252526url%2525253DaHR0cHM6Ly9nby5yZWRpcmVjdGluZ2F0LmNvbS8%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%2525253D%2525253D%252526c%25253DE%25252C1%25252CDR46MsYBoqQYCIR265tDuHDy_G5rYCXcSJD3yqZE084XnwKAnmUdOkGTEGQQhlwGOYj_RpZJHPPpeiAVAfJ08NWAIzAZZeX1VKIwBKyDiJ-Dg8gikcGjT85owT4%25252C%252526typo%25253D1%2526sa%253DD%2526sntz%253D1%2526usg%253DAOvVaw0bsfu0X3bIsXDSXfnFD2O3%26sa%3DD%26source%3Deditors%26ust%3D1723825580925759%26usg%3DAOvVaw1cf9Fjs47PH1afZ6r9aCTM%23bGRpY2tzb25AZXZvbGVudGhlYWx0aC5jb20=

Sharing

General

Malware Config

Signatures

Files