hxxps://www[.]google[.]com/travel/clk?pc=AA80OsxOJqDJTtimFViThn67OQkloT30Ajm0l4ZvLJJer0pJHlDs6FtKUzjSNqFcVCDDRK9HbWM9J68g_B5lWBQlAc6FRf4zwpPAQbYRTV4byfvHC1SF4YRK3ax3ADGyZ2SM3lU&pcurl=hxxps://www[.]google[.]com%2Furl%3Fq%3Dhttps%3A%2F%2Fwww[.]google[.]com%2Furl%3Fq%253Dhttps%25253A%25252F%25252Flinkprotect[.]cudasvc[.]com%25252Furl%25253Fa%25253Dhttps%25253A%25252F%25252Fwtb-redirect[.]swaven[.]com%25252Foutbound_click%25253Fwtbid%2525253D60c775e445e449143acba972%25252526module%2525253Dwtb%25252526touchpoint%2525253DST%25252526lang%2525253Den%25252526sid%2525253D2095_WEB%25252526avpid%2525253D0041100002228%25252526prc%2525253D7[.]97%25252526prc_currency%2525253DUSD%25252526clkurlt%2525253D3%25252526clkurlaff%2525253D0%25252526url%2525253DaHR0cHM6Ly9nby5yZWRpcmVjdGluZ2F0LmNvbS8%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%2525253D%252526c%25253DE%25252C1%25252CDR46MsYBoqQYCIR265tDuHDy_G5rYCXcSJD3yqZE084XnwKAnmUdOkGTEGQQhlwGOYj_RpZJHPPpeiAVAfJ08NWAIzAZZeX1VKIwBKyDiJ-Dg8gikcGjT85owT4%25252C%252526sa%25253DD%252526sntz%25253D1%252526typo%25253D1%2526sa%253DD%2526sntz%253D1%2526usg%253DAOvVaw1mN4RjJ_52zWOnUWZJux2m%26sa%3DD%26source%3Deditors%26ust%3D1724069903488963%26usg%3DAOvVaw1Q3Yle9mLyDWHDCl1itWr7%23bmlkaGkuc3VydmVAaW9uZ3JvdXAuY29t

Sharing

Behavioral task

behavioral1

Sample

https://www.google.com/travel/clk?pc=AA80OsxOJqDJTtimFViThn67OQkloT30Ajm0l4ZvLJJer0pJHlDs6FtKUzjSNqFcVCDDRK9HbWM9J68g_B5lWBQlAc6FRf4zwpPAQbYRTV4byfvHC1SF4YRK3ax3ADGyZ2SM3lU&pcurl=https://www.google.com%2Furl%3Fq%3Dhttps%3A%2F%2Fwww.google.com%2Furl%3Fq%253Dhttps%25253A%25252F%25252Flinkprotect.cudasvc.com%25252Furl%25253Fa%25253Dhttps%25253A%25252F%25252Fwtb-redirect.swaven.com%25252Foutbound_click%25253Fwtbid%2525253D60c775e445e449143acba972%25252526module%2525253Dwtb%25252526touchpoint%2525253DST%25252526lang%2525253Den%25252526sid%2525253D2095_WEB%25252526avpid%2525253D0041100002228%25252526prc%2525253D7.97%25252526prc_currency%2525253DUSD%25252526clkurlt%2525253D3%25252526clkurlaff%2525253D0%25252526url%2525253DaHR0cHM6Ly9nby5yZWRpcmVjdGluZ2F0LmNvbS8%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%2525253D%252526c%25253DE%25252C1%25252CDR46MsYBoqQYCIR265tDuHDy_G5rYCXcSJD3yqZE084XnwKAnmUdOkGTEGQQhlwGOYj_RpZJHPPpeiAVAfJ08NWAIzAZZeX1VKIwBKyDiJ-Dg8gikcGjT85owT4%25252C%252526sa%25253DD%252526sntz%25253D1%252526typo%25253D1%2526sa%253DD%2526sntz%253D1%2526usg%253DAOvVaw1mN4RjJ_52zWOnUWZJux2m%26sa%3DD%26source%3Deditors%26ust%3D1724069903488963%26usg%3DAOvVaw1Q3Yle9mLyDWHDCl1itWr7%23bmlkaGkuc3VydmVAaW9uZ3JvdXAuY29t

Resource

win10v2004-20240802-en

discovery

windows10-2004-x64

9 signatures

150 seconds

General

Target

https://www.google.com/travel/clk?pc=AA80OsxOJqDJTtimFViThn67OQkloT30Ajm0l4ZvLJJer0pJHlDs6FtKUzjSNqFcVCDDRK9HbWM9J68g_B5lWBQlAc6FRf4zwpPAQbYRTV4byfvHC1SF4YRK3ax3ADGyZ2SM3lU&pcurl=https://www.google.com%2Furl%3Fq%3Dhttps%3A%2F%2Fwww.google.com%2Furl%3Fq%253Dhttps%25253A%25252F%25252Flinkprotect.cudasvc.com%25252Furl%25253Fa%25253Dhttps%25253A%25252F%25252Fwtb-redirect.swaven.com%25252Foutbound_click%25253Fwtbid%2525253D60c775e445e449143acba972%25252526module%2525253Dwtb%25252526touchpoint%2525253DST%25252526lang%2525253Den%25252526sid%2525253D2095_WEB%25252526avpid%2525253D0041100002228%25252526prc%2525253D7.97%25252526prc_currency%2525253DUSD%25252526clkurlt%2525253D3%25252526clkurlaff%2525253D0%25252526url%2525253DaHR0cHM6Ly9nby5yZWRpcmVjdGluZ2F0LmNvbS8%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%2525253D%252526c%25253DE%25252C1%25252CDR46MsYBoqQYCIR265tDuHDy_G5rYCXcSJD3yqZE084XnwKAnmUdOkGTEGQQhlwGOYj_RpZJHPPpeiAVAfJ08NWAIzAZZeX1VKIwBKyDiJ-Dg8gikcGjT85owT4%25252C%252526sa%25253DD%252526sntz%25253D1%252526typo%25253D1%2526sa%253DD%2526sntz%253D1%2526usg%253DAOvVaw1mN4RjJ_52zWOnUWZJux2m%26sa%3DD%26source%3Deditors%26ust%3D1724069903488963%26usg%3DAOvVaw1Q3Yle9mLyDWHDCl1itWr7%23bmlkaGkuc3VydmVAaW9uZ3JvdXAuY29t

Sharing

General

Malware Config

Signatures

Files