hxxps://www[.]google[.]com[.]ph/amp/s/www[.]googleadservices[.]com%2Fpagead%2Faclk%3Fnis%3D4%26sa%3DL%26ai%3DCsIQ8fN-mZrnKH9_ikPIPyf61kAfZz4y9eIqB6tTnEu2yyfjiCxABILXsx29gyb7JhsSjyBegAb782twDyAEJqAMByAPLBKoE1wFP0AxDzLJphEUPSIujkgl_YOc0cDSxDp8ber8wtsOlut-WKpzKWRomTKA6KNQAUXMEEs57erSb2d42wSkXj9rBCvZhI79K1EhndZGuKHL7DdjyTBlrPoXxeggFx2K3pwaMd0MkYrXh6ICImgwoQzSpDQ3gfvuoL98EcOks8IISxXW90chkHjv-GawGGQQp69WiMLUYc4RQH9Xg2Q6naZKr4t-8UWGP8IAreLIx0yTABQo_NjNFi_9CvMS0oMrfTBHtr980AeRp8UEUiHtUZIXld_GnXhDbM8AEj971wsYEiAWG26jlTcAFBfoFBgglEAEYAZAGAaAGLoAHqoOlI4gHAZAHAqgH2baxAqgHpr4bqAeOzhuoB5PYG6gH7paxAqgH_p6xAqgHr76xAqgHmgaoB_PRG6gHltgbqAeqm7ECqAeDrbECqAfgvbECqAf_nrECqAffn7ECqAfKqbECqAfrpbECqAfqsbECqAeZtbECqAe-t7ECqAf4wrEC2AcAwAgC0ggnCAAQAhgaMgEAOg6f0ICAgIAEkMCAgICgKEi9_cE6WJvMhr38yocDgAoBkAsDmAsByAsBgAwB2gwQCgoQgI_q9_qo07F2EgIBA6oNAlVTyA0B4BLxhb_nl5Xz2XLYEwvQFQGYFgH4FgGAFwG6FwI4AbIYCRICsFMYLiIBAdAYAQ%26ae%3D1%26ase%3D2%26gclid%3DCjwKCAjw2Je1BhAgEiwAp3KY7z7PdyEl4jUJ0cfYBG14XCZDFhEIMK_6utmVSSGOr1WMwFk95YUnrxoCHJUQAvD_BwE%26num%3D1%26cid%3DCAQSQgDaQooLSNWrJvloDZKkTv_h5xZAka5NHKcH-_uHOpus4WFOrYYJ-7d3y5hcfCPeKyQ1kcmCplRfHHoemga9JDWzsRgB%26sig%3DAOD64_1J7Y6-upYgBDRTWy2q4nCaCj8Acg%26ctype%3D5%26client%3Dca-pub-1687287790943251%26nb%3D9%26adurl%3Dhttps%3A%2F%2Fwww[.]google[.]com%252Furl%253Fq%253Dhttps%253A%252F%252Fwww[.]google[.]com%252Furl%253Fq%25253Dhttps%2525253A%2525252F%2525252Flinkprotect[.]cudasvc[.]com%2525252Furl%2525253Fa%2525253Dhttps%2525253A%2525252F%2525252Fwww[.]buoyhealth[.]com%2525252Fbazaar%2525252Fredirect%2525252F%2525253FcareResourceURL%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%25252526c%2525253DE%2525252C1%2525252C0mhHQFs2jkJgMgvfVlPVJH7wA8qcmLISMboK1W5OV7sMG38Hy0XS5t74GF2mw1ibIDohCLGDcjdDPF-bH5wLzU6LBXE0mGPKLqWdZuhhKufc2N7G86Jd75T7nfXm%25252526typo%2525253D1%252526sa%25253DD%252526sntz%25253D1%252526usg%25253DAOvVaw1GDLJOvPchQhzBi8oz7F2w%2526sa%253DD%2526source%253Deditors%2526ust%253D1725474188435418%2526usg%253DAOvVaw1qXfmTwYknbMm3bY2zo-vL%23a3NvbG9yemFub0BqaGFuY29jay5jb20=

Sharing

Behavioral task

behavioral1

Sample

https://www.google.com.ph/amp/s/www.googleadservices.com%2Fpagead%2Faclk%3Fnis%3D4%26sa%3DL%26ai%3DCsIQ8fN-mZrnKH9_ikPIPyf61kAfZz4y9eIqB6tTnEu2yyfjiCxABILXsx29gyb7JhsSjyBegAb782twDyAEJqAMByAPLBKoE1wFP0AxDzLJphEUPSIujkgl_YOc0cDSxDp8ber8wtsOlut-WKpzKWRomTKA6KNQAUXMEEs57erSb2d42wSkXj9rBCvZhI79K1EhndZGuKHL7DdjyTBlrPoXxeggFx2K3pwaMd0MkYrXh6ICImgwoQzSpDQ3gfvuoL98EcOks8IISxXW90chkHjv-GawGGQQp69WiMLUYc4RQH9Xg2Q6naZKr4t-8UWGP8IAreLIx0yTABQo_NjNFi_9CvMS0oMrfTBHtr980AeRp8UEUiHtUZIXld_GnXhDbM8AEj971wsYEiAWG26jlTcAFBfoFBgglEAEYAZAGAaAGLoAHqoOlI4gHAZAHAqgH2baxAqgHpr4bqAeOzhuoB5PYG6gH7paxAqgH_p6xAqgHr76xAqgHmgaoB_PRG6gHltgbqAeqm7ECqAeDrbECqAfgvbECqAf_nrECqAffn7ECqAfKqbECqAfrpbECqAfqsbECqAeZtbECqAe-t7ECqAf4wrEC2AcAwAgC0ggnCAAQAhgaMgEAOg6f0ICAgIAEkMCAgICgKEi9_cE6WJvMhr38yocDgAoBkAsDmAsByAsBgAwB2gwQCgoQgI_q9_qo07F2EgIBA6oNAlVTyA0B4BLxhb_nl5Xz2XLYEwvQFQGYFgH4FgGAFwG6FwI4AbIYCRICsFMYLiIBAdAYAQ%26ae%3D1%26ase%3D2%26gclid%3DCjwKCAjw2Je1BhAgEiwAp3KY7z7PdyEl4jUJ0cfYBG14XCZDFhEIMK_6utmVSSGOr1WMwFk95YUnrxoCHJUQAvD_BwE%26num%3D1%26cid%3DCAQSQgDaQooLSNWrJvloDZKkTv_h5xZAka5NHKcH-_uHOpus4WFOrYYJ-7d3y5hcfCPeKyQ1kcmCplRfHHoemga9JDWzsRgB%26sig%3DAOD64_1J7Y6-upYgBDRTWy2q4nCaCj8Acg%26ctype%3D5%26client%3Dca-pub-1687287790943251%26nb%3D9%26adurl%3Dhttps%3A%2F%2Fwww.google.com%252Furl%253Fq%253Dhttps%253A%252F%252Fwww.google.com%252Furl%253Fq%25253Dhttps%2525253A%2525252F%2525252Flinkprotect.cudasvc.com%2525252Furl%2525253Fa%2525253Dhttps%2525253A%2525252F%2525252Fwww.buoyhealth.com%2525252Fbazaar%2525252Fredirect%2525252F%2525253FcareResourceURL%252525253DaHR0cHM6Ly9lbWFpbGluZy5taXJhYmF1ZC1hbS5jb20vdGwucGhwP3A9NXAwL3QyL3JzLzFlNi9yeS9ycy8vaHR0cHM6Ly91NDY2NzgyNDIuY3Quc2VuZGdyaWQubmV0JTJGbHMlMkZjbGljayUzRnVwbiUzRHUwMDEuUzVwam9HVjl5MjdKRFltNGpBS1FNbDFpemlHZWdnLTJGR0xsbjlmcVJWWEF5YkNGcnJkZDFEUk80STRTVXF0by0yQmRrRGtxY2ZZQXRXa3M2Z2c4b2U1dFM2WDRGMXUzQ3hGNzNaRTc1elU1My0yRk5QNFNnY2w5UHRtT0I0VkhVQ2IzQ21GQW5pLTJGbDluUHpKZEstMkJxR1Y3SmFMQWF4V2NSM255aVJGdGJTNEp4LTJGSXRVbm95eEEzVUxhcnpwU05ORDhZZUpHWW5YdS0yQlR5a0s3MWwzUWlrN3Q2Qy0yRmk1TnNxZTBjeWp3NDJvSUFEYklGUFA5U3ZIeXE0amlFTnZDSEd6ZjlieFh4UGVFQmhRbzJnMEpDRG1TT1JUV3hnLTNELTNEZ2V3cV8tMkZEM0I4R1hmLTJGLTJGOGZaMlg0YXFrOHVjeVRjYzBPRGZjVFotMkY2SExXdFFnOEw3M2MzSVRpUEc3WUpQdUJnOC0yQmlsaHRmbi0yQjVXZmpEbjNhd0dia2VJODNmS3VGOU44OTIwZ2N3NmpjUWE1eWx1d2IyaWI2bExEcUZHU1ZPR3dZdlhXYU5BRUJZOEY3MGR2UERXTWhKR213LTJCTWFHU1lFTXhjSWNINy0yRk9EVW1rcEpkcEEyTGh0bGtaTDNFQ2RPZEVPSE1PYngtMkJLQnFaanVTNFMwREY5LTJCRE9RWHJ5cTNvZ3ZFZFRwdHRHVlphOURSQUZmZVNoWVlGeS0yQlNhVkJOQm0tMkJid2ZYRVhELTJCQmVJeXgtMkJsTmhIdzgxUy0yRkh6M21CLTJCOFRTeE96RDJ3M0FFVHpBa3ZwdVEtMkZhcEwtMkZULTJCS1hUa1lNeG1lMmR2ZVBMOWpLSFJsSy0yQndBYmJQWnBhWWRuOVQ0eldPZXpvQVV6cy0yQnBzSzkxbW11ai0yRnh6cXZCZXd5VXJLbjMzdW50aHl4elVuTlo4RWJUY254U2hBdjI4bGdBZk9QeFZtWUkyR0JDeC0yRnk3WDdIRjd4MUQ1dU9TR24tMkJwVEFmY1RhVmtR%25252526c%2525253DE%2525252C1%2525252C0mhHQFs2jkJgMgvfVlPVJH7wA8qcmLISMboK1W5OV7sMG38Hy0XS5t74GF2mw1ibIDohCLGDcjdDPF-bH5wLzU6LBXE0mGPKLqWdZuhhKufc2N7G86Jd75T7nfXm%25252526typo%2525253D1%252526sa%25253DD%252526sntz%25253D1%252526usg%25253DAOvVaw1GDLJOvPchQhzBi8oz7F2w%2526sa%253DD%2526source%253Deditors%2526ust%253D1725474188435418%2526usg%253DAOvVaw1qXfmTwYknbMm3bY2zo-vL%23a3NvbG9yemFub0BqaGFuY29jay5jb20=

Resource

win10v2004-20240802-en

windows10-2004-x64

8 signatures

150 seconds

General

Target

https://www.google.com.ph/amp/s/www.googleadservices.com%2Fpagead%2Faclk%3Fnis%3D4%26sa%3DL%26ai%3DCsIQ8fN-mZrnKH9_ikPIPyf61kAfZz4y9eIqB6tTnEu2yyfjiCxABILXsx29gyb7JhsSjyBegAb782twDyAEJqAMByAPLBKoE1wFP0AxDzLJphEUPSIujkgl_YOc0cDSxDp8ber8wtsOlut-WKpzKWRomTKA6KNQAUXMEEs57erSb2d42wSkXj9rBCvZhI79K1EhndZGuKHL7DdjyTBlrPoXxeggFx2K3pwaMd0MkYrXh6ICImgwoQzSpDQ3gfvuoL98EcOks8IISxXW90chkHjv-GawGGQQp69WiMLUYc4RQH9Xg2Q6naZKr4t-8UWGP8IAreLIx0yTABQo_NjNFi_9CvMS0oMrfTBHtr980AeRp8UEUiHtUZIXld_GnXhDbM8AEj971wsYEiAWG26jlTcAFBfoFBgglEAEYAZAGAaAGLoAHqoOlI4gHAZAHAqgH2baxAqgHpr4bqAeOzhuoB5PYG6gH7paxAqgH_p6xAqgHr76xAqgHmgaoB_PRG6gHltgbqAeqm7ECqAeDrbECqAfgvbECqAf_nrECqAffn7ECqAfKqbECqAfrpbECqAfqsbECqAeZtbECqAe-t7ECqAf4wrEC2AcAwAgC0ggnCAAQAhgaMgEAOg6f0ICAgIAEkMCAgICgKEi9_cE6WJvMhr38yocDgAoBkAsDmAsByAsBgAwB2gwQCgoQgI_q9_qo07F2EgIBA6oNAlVTyA0B4BLxhb_nl5Xz2XLYEwvQFQGYFgH4FgGAFwG6FwI4AbIYCRICsFMYLiIBAdAYAQ%26ae%3D1%26ase%3D2%26gclid%3DCjwKCAjw2Je1BhAgEiwAp3KY7z7PdyEl4jUJ0cfYBG14XCZDFhEIMK_6utmVSSGOr1WMwFk95YUnrxoCHJUQAvD_BwE%26num%3D1%26cid%3DCAQSQgDaQooLSNWrJvloDZKkTv_h5xZAka5NHKcH-_uHOpus4WFOrYYJ-7d3y5hcfCPeKyQ1kcmCplRfHHoemga9JDWzsRgB%26sig%3DAOD64_1J7Y6-upYgBDRTWy2q4nCaCj8Acg%26ctype%3D5%26client%3Dca-pub-1687287790943251%26nb%3D9%26adurl%3Dhttps%3A%2F%2Fwww.google.com%252Furl%253Fq%253Dhttps%253A%252F%252Fwww.google.com%252Furl%253Fq%25253Dhttps%2525253A%2525252F%2525252Flinkprotect.cudasvc.com%2525252Furl%2525253Fa%2525253Dhttps%2525253A%2525252F%2525252Fwww.buoyhealth.com%2525252Fbazaar%2525252Fredirect%2525252F%2525253FcareResourceURL%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%25252526c%2525253DE%2525252C1%2525252C0mhHQFs2jkJgMgvfVlPVJH7wA8qcmLISMboK1W5OV7sMG38Hy0XS5t74GF2mw1ibIDohCLGDcjdDPF-bH5wLzU6LBXE0mGPKLqWdZuhhKufc2N7G86Jd75T7nfXm%25252526typo%2525253D1%252526sa%25253DD%252526sntz%25253D1%252526usg%25253DAOvVaw1GDLJOvPchQhzBi8oz7F2w%2526sa%253DD%2526source%253Deditors%2526ust%253D1725474188435418%2526usg%253DAOvVaw1qXfmTwYknbMm3bY2zo-vL%23a3NvbG9yemFub0BqaGFuY29jay5jb20=

Sharing

General

Malware Config

Signatures

Files