hxxps://www[.]google[.]com/travel/clk?pc=AA80OsxOJqDJTtimFViThn67OQkloT30Ajm0l4ZvLJJer0pJHlDs6FtKUzjSNqFcVCDDRK9HbWM9J68g_B5lWBQlAc6FRf4zwpPAQbYRTV4byfvHC1SF4YRK3ax3ADGyZ2SM3lU&pcurl=hxxps://www[.]google[.]com%2Furl%3Fq%3Dhttps%3A%2F%2Fwww[.]google[.]com%2Furl%3Fq%253Dhttps%25253A%25252F%25252Flinkprotect[.]cudasvc[.]com%25252Furl%25253Fa%25253Dhttps%25253A%25252F%25252Fwtb-redirect[.]swaven[.]com%25252Foutbound_click%25253Fwtbid%2525253D60c775e445e449143acba972%25252526module%2525253Dwtb%25252526touchpoint%2525253DST%25252526lang%2525253Den%25252526sid%2525253D2095_WEB%25252526avpid%2525253D0041100002228%25252526prc%2525253D7[.]97%25252526prc_currency%2525253DUSD%25252526clkurlt%2525253D3%25252526clkurlaff%2525253D0%25252526url%2525253DaHR0cHM6Ly9nby5yZWRpcmVjdGluZ2F0LmNvbS8%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%2525253D%252526c%25253DE%25252C1%25252CDR46MsYBoqQYCIR265tDuHDy_G5rYCXcSJD3yqZE084XnwKAnmUdOkGTEGQQhlwGOYj_RpZJHPPpeiAVAfJ08NWAIzAZZeX1VKIwBKyDiJ-Dg8gikcGjT85owT4%25252C%252526sa%25253DD%252526sntz%25253D1%252526typo%25253D1%2526sa%253DD%2526sntz%253D1%2526usg%253DAOvVaw3SpPwkr0Yc9iUzwhAZX4qc%26sa%3DD%26source%3Deditors%26ust%3D1724078803364759%26usg%3DAOvVaw1LeNrsrSfcr7AhXG_sDVmp%23c3VzYW4udGhvbXBzb25AdGNlcS50ZXhhcy5nb3YN

Resubmissions

19/08/2024, 16:34

240819-t3gplsvcjc 1

19/08/2024, 16:32

240819-t19ydaybjq 1

19/08/2024, 16:31

240819-t1q59svbke 1

Sharing

Copy URL

Twitter E-mail

Behavioral task

behavioral1

Sample

https://www.google.com/travel/clk?pc=AA80OsxOJqDJTtimFViThn67OQkloT30Ajm0l4ZvLJJer0pJHlDs6FtKUzjSNqFcVCDDRK9HbWM9J68g_B5lWBQlAc6FRf4zwpPAQbYRTV4byfvHC1SF4YRK3ax3ADGyZ2SM3lU&pcurl=https://www.google.com%2Furl%3Fq%3Dhttps%3A%2F%2Fwww.google.com%2Furl%3Fq%253Dhttps%25253A%25252F%25252Flinkprotect.cudasvc.com%25252Furl%25253Fa%25253Dhttps%25253A%25252F%25252Fwtb-redirect.swaven.com%25252Foutbound_click%25253Fwtbid%2525253D60c775e445e449143acba972%25252526module%2525253Dwtb%25252526touchpoint%2525253DST%25252526lang%2525253Den%25252526sid%2525253D2095_WEB%25252526avpid%2525253D0041100002228%25252526prc%2525253D7.97%25252526prc_currency%2525253DUSD%25252526clkurlt%2525253D3%25252526clkurlaff%2525253D0%25252526url%2525253DaHR0cHM6Ly9nby5yZWRpcmVjdGluZ2F0LmNvbS8%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%2525253D%252526c%25253DE%25252C1%25252CDR46MsYBoqQYCIR265tDuHDy_G5rYCXcSJD3yqZE084XnwKAnmUdOkGTEGQQhlwGOYj_RpZJHPPpeiAVAfJ08NWAIzAZZeX1VKIwBKyDiJ-Dg8gikcGjT85owT4%25252C%252526sa%25253DD%252526sntz%25253D1%252526typo%25253D1%2526sa%253DD%2526sntz%253D1%2526usg%253DAOvVaw3SpPwkr0Yc9iUzwhAZX4qc%26sa%3DD%26source%3Deditors%26ust%3D1724078803364759%26usg%3DAOvVaw1LeNrsrSfcr7AhXG_sDVmp%23c3VzYW4udGhvbXBzb25AdGNlcS50ZXhhcy5nb3YN

Resource

win11-20240802-en

windows11-21h2-x64

8 signatures

300 seconds

General

Target

https://www.google.com/travel/clk?pc=AA80OsxOJqDJTtimFViThn67OQkloT30Ajm0l4ZvLJJer0pJHlDs6FtKUzjSNqFcVCDDRK9HbWM9J68g_B5lWBQlAc6FRf4zwpPAQbYRTV4byfvHC1SF4YRK3ax3ADGyZ2SM3lU&pcurl=https://www.google.com%2Furl%3Fq%3Dhttps%3A%2F%2Fwww.google.com%2Furl%3Fq%253Dhttps%25253A%25252F%25252Flinkprotect.cudasvc.com%25252Furl%25253Fa%25253Dhttps%25253A%25252F%25252Fwtb-redirect.swaven.com%25252Foutbound_click%25253Fwtbid%2525253D60c775e445e449143acba972%25252526module%2525253Dwtb%25252526touchpoint%2525253DST%25252526lang%2525253Den%25252526sid%2525253D2095_WEB%25252526avpid%2525253D0041100002228%25252526prc%2525253D7.97%25252526prc_currency%2525253DUSD%25252526clkurlt%2525253D3%25252526clkurlaff%2525253D0%25252526url%2525253DaHR0cHM6Ly9nby5yZWRpcmVjdGluZ2F0LmNvbS8%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%2525253D%252526c%25253DE%25252C1%25252CDR46MsYBoqQYCIR265tDuHDy_G5rYCXcSJD3yqZE084XnwKAnmUdOkGTEGQQhlwGOYj_RpZJHPPpeiAVAfJ08NWAIzAZZeX1VKIwBKyDiJ-Dg8gikcGjT85owT4%25252C%252526sa%25253DD%252526sntz%25253D1%252526typo%25253D1%2526sa%253DD%2526sntz%253D1%2526usg%253DAOvVaw3SpPwkr0Yc9iUzwhAZX4qc%26sa%3DD%26source%3Deditors%26ust%3D1724078803364759%26usg%3DAOvVaw1LeNrsrSfcr7AhXG_sDVmp%23c3VzYW4udGhvbXBzb25AdGNlcS50ZXhhcy5nb3YN

Resubmissions

Sharing

General

Malware Config

Signatures

Files