hxxps://www[.]google[.]com/travel/clk?pc=AA80OsxOJqDJTtimFViThn67OQkloT30Ajm0l4ZvLJJer0pJHlDs6FtKUzjSNqFcVCDDRK9HbWM9J68g_B5lWBQlAc6FRf4zwpPAQbYRTV4byfvHC1SF4YRK3ax3ADGyZ2SM3lU&pcurl=hxxps://www[.]google[.]com%2Furl%3Fq%3Dhttps%3A%2F%2Fwww[.]google[.]com%2Furl%3Fq%253Dhttps%25253A%25252F%25252Flinkprotect[.]cudasvc[.]com%25252Furl%25253Fa%25253Dhttps%25253A%25252F%25252Fwtb-redirect[.]swaven[.]com%25252Foutbound_click%25253Fwtbid%2525253D60c775e445e449143acba972%25252526module%2525253Dwtb%25252526touchpoint%2525253DST%25252526lang%2525253Den%25252526sid%2525253D2095_WEB%25252526avpid%2525253D0041100002228%25252526prc%2525253D7[.]97%25252526prc_currency%2525253DUSD%25252526clkurlt%2525253D3%25252526clkurlaff%2525253D0%25252526url%2525253DaHR0cHM6Ly9nby5yZWRpcmVjdGluZ2F0LmNvbS8%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%2525253D%252526c%25253DE%25252C1%25252CDR46MsYBoqQYCIR265tDuHDy_G5rYCXcSJD3yqZE084XnwKAnmUdOkGTEGQQhlwGOYj_RpZJHPPpeiAVAfJ08NWAIzAZZeX1VKIwBKyDiJ-Dg8gikcGjT85owT4%25252C%252526sa%25253DD%252526sntz%25253D1%252526typo%25253D1%2526sa%253DD%2526sntz%253D1%2526usg%253DAOvVaw0ZY0h4YWX6TAbValFiuVba%26sa%3DD%26source%3Deditors%26ust%3D1724086978443824%26usg%3DAOvVaw0_4k8LQCBnP2S3ZvtMnDXl%23YXJhY2VsaS5nb256YWxlekBrb2YuY29tLm14

Sharing

Behavioral task

behavioral1

Sample

https://www.google.com/travel/clk?pc=AA80OsxOJqDJTtimFViThn67OQkloT30Ajm0l4ZvLJJer0pJHlDs6FtKUzjSNqFcVCDDRK9HbWM9J68g_B5lWBQlAc6FRf4zwpPAQbYRTV4byfvHC1SF4YRK3ax3ADGyZ2SM3lU&pcurl=https://www.google.com%2Furl%3Fq%3Dhttps%3A%2F%2Fwww.google.com%2Furl%3Fq%253Dhttps%25253A%25252F%25252Flinkprotect.cudasvc.com%25252Furl%25253Fa%25253Dhttps%25253A%25252F%25252Fwtb-redirect.swaven.com%25252Foutbound_click%25253Fwtbid%2525253D60c775e445e449143acba972%25252526module%2525253Dwtb%25252526touchpoint%2525253DST%25252526lang%2525253Den%25252526sid%2525253D2095_WEB%25252526avpid%2525253D0041100002228%25252526prc%2525253D7.97%25252526prc_currency%2525253DUSD%25252526clkurlt%2525253D3%25252526clkurlaff%2525253D0%25252526url%2525253DaHR0cHM6Ly9nby5yZWRpcmVjdGluZ2F0LmNvbS8%25252FaWQ9OTJYMTU4NDQ5MyZ4Y3VzdD10b21zZ3VpZGVfdXNfMTMyODcyMTc1NjcyMTM1MjQwMCZ4cz0xJnVybD1odHRwOi8venRmem9hLmZqMDIuZmRza2UuY29tJTJGZWMlMkZnQUFBQUFCbXcyVy1aTGZUbkJCTG42dWt3emFDYzFydUFNRjRsOW5wVkJsak5jcmw2Z242ckt4dHU2a0k5TkJsc0NidVpkSDdPdmI4TU52UVd5WE83S0FGZEctNnJacXNiSHdacnhpMnVUdDZnM3pieXRhbzJGSnNGT0ZKTHhTQUp4VzlFM2dTOGtlRGNtZGkwSmsxN29QN3VCSHlXbC1UTkE3RmQ2STdUV01EMU5Oamd1LWpvdU5COHVBODgxY0xqVnpsUUc0VGdCb1U4b2RRN3prSEVuMGRac1JNSjVoX3gtOHNnTnJZdjQ1MEZxblBFMWZqUktackpPem40SDNGeEpoMnJwVUtYS3ppc3piZ3FIb3ZvQVNORDFIM0JaZ2ZCNEV0R3oxNDJyZTNScERPaGc5dERUNU9rcGljQ0RZZUF1UUN5bHlWcDFpZk5CTDFpWVVHQ1hzaXRUYzZqUndyZm5YdWVpbzNsd0JXS3BfN0taeURkWE8xUzJYSmU3eFpJT2Zfb0czbnNTdWsta25zYXg0OXdNd1hlZDdmZ2JqM3NBVWN1bUpFTGEtbUVlQXFJUnR2eUlsTGxNSXZWd2s2NjBubWQ5ZWJ5RGwyclI5eVozWjlTUnpWWlV6V0dpb2ZOOGxNWkpPSVNzMkVRQ0NzR3hWdDNDZ3pWR0lpSXMwZkQ4WE9CYUdraTdTSjFQRTY5QmxQSFM4Uk5CYzNqMkdGMlElM0QlM0Q%2525253D%252526c%25253DE%25252C1%25252CDR46MsYBoqQYCIR265tDuHDy_G5rYCXcSJD3yqZE084XnwKAnmUdOkGTEGQQhlwGOYj_RpZJHPPpeiAVAfJ08NWAIzAZZeX1VKIwBKyDiJ-Dg8gikcGjT85owT4%25252C%252526sa%25253DD%252526sntz%25253D1%252526typo%25253D1%2526sa%253DD%2526sntz%253D1%2526usg%253DAOvVaw0ZY0h4YWX6TAbValFiuVba%26sa%3DD%26source%3Deditors%26ust%3D1724086978443824%26usg%3DAOvVaw0_4k8LQCBnP2S3ZvtMnDXl%23YXJhY2VsaS5nb256YWxlekBrb2YuY29tLm14

Resource

win10v2004-20240802-en

windows10-2004-x64

8 signatures

150 seconds

General

Target

https://www.google.com/travel/clk?pc=AA80OsxOJqDJTtimFViThn67OQkloT30Ajm0l4ZvLJJer0pJHlDs6FtKUzjSNqFcVCDDRK9HbWM9J68g_B5lWBQlAc6FRf4zwpPAQbYRTV4byfvHC1SF4YRK3ax3ADGyZ2SM3lU&pcurl=https://www.google.com%2Furl%3Fq%3Dhttps%3A%2F%2Fwww.google.com%2Furl%3Fq%253Dhttps%25253A%25252F%25252Flinkprotect.cudasvc.com%25252Furl%25253Fa%25253Dhttps%25253A%25252F%25252Fwtb-redirect.swaven.com%25252Foutbound_click%25253Fwtbid%2525253D60c775e445e449143acba972%25252526module%2525253Dwtb%25252526touchpoint%2525253DST%25252526lang%2525253Den%25252526sid%2525253D2095_WEB%25252526avpid%2525253D0041100002228%25252526prc%2525253D7.97%25252526prc_currency%2525253DUSD%25252526clkurlt%2525253D3%25252526clkurlaff%2525253D0%25252526url%2525253DaHR0cHM6Ly9nby5yZWRpcmVjdGluZ2F0LmNvbS8%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%2525253D%252526c%25253DE%25252C1%25252CDR46MsYBoqQYCIR265tDuHDy_G5rYCXcSJD3yqZE084XnwKAnmUdOkGTEGQQhlwGOYj_RpZJHPPpeiAVAfJ08NWAIzAZZeX1VKIwBKyDiJ-Dg8gikcGjT85owT4%25252C%252526sa%25253DD%252526sntz%25253D1%252526typo%25253D1%2526sa%253DD%2526sntz%253D1%2526usg%253DAOvVaw0ZY0h4YWX6TAbValFiuVba%26sa%3DD%26source%3Deditors%26ust%3D1724086978443824%26usg%3DAOvVaw0_4k8LQCBnP2S3ZvtMnDXl%23YXJhY2VsaS5nb256YWxlekBrb2YuY29tLm14

Sharing

General

Malware Config

Signatures

Files