hxxps://www[.]google[.]com[.]hk/amp/s/www[.]googleadservices[.]com%2Fpagead%2Faclk%3Fnis%3D4%26sa%3DL%26ai%3DCsIQ8fN-mZrnKH9_ikPIPyf61kAfZz4y9eIqB6tTnEu2yyfjiCxABILXsx29gyb7JhsSjyBegAb782twDyAEJqAMByAPLBKoE1wFP0AxDzLJphEUPSIujkgl_YOc0cDSxDp8ber8wtsOlut-WKpzKWRomTKA6KNQAUXMEEs57erSb2d42wSkXj9rBCvZhI79K1EhndZGuKHL7DdjyTBlrPoXxeggFx2K3pwaMd0MkYrXh6ICImgwoQzSpDQ3gfvuoL98EcOks8IISxXW90chkHjv-GawGGQQp69WiMLUYc4RQH9Xg2Q6naZKr4t-8UWGP8IAreLIx0yTABQo_NjNFi_9CvMS0oMrfTBHtr980AeRp8UEUiHtUZIXld_GnXhDbM8AEj971wsYEiAWG26jlTcAFBfoFBgglEAEYAZAGAaAGLoAHqoOlI4gHAZAHAqgH2baxAqgHpr4bqAeOzhuoB5PYG6gH7paxAqgH_p6xAqgHr76xAqgHmgaoB_PRG6gHltgbqAeqm7ECqAeDrbECqAfgvbECqAf_nrECqAffn7ECqAfKqbECqAfrpbECqAfqsbECqAeZtbECqAe-t7ECqAf4wrEC2AcAwAgC0ggnCAAQAhgaMgEAOg6f0ICAgIAEkMCAgICgKEi9_cE6WJvMhr38yocDgAoBkAsDmAsByAsBgAwB2gwQCgoQgI_q9_qo07F2EgIBA6oNAlVTyA0B4BLxhb_nl5Xz2XLYEwvQFQGYFgH4FgGAFwG6FwI4AbIYCRICsFMYLiIBAdAYAQ%26ae%3D1%26ase%3D2%26gclid%3DCjwKCAjw2Je1BhAgEiwAp3KY7z7PdyEl4jUJ0cfYBG14XCZDFhEIMK_6utmVSSGOr1WMwFk95YUnrxoCHJUQAvD_BwE%26num%3D1%26cid%3DCAQSQgDaQooLSNWrJvloDZKkTv_h5xZAka5NHKcH-_uHOpus4WFOrYYJ-7d3y5hcfCPeKyQ1kcmCplRfHHoemga9JDWzsRgB%26sig%3DAOD64_1J7Y6-upYgBDRTWy2q4nCaCj8Acg%26ctype%3D5%26client%3Dca-pub-1687287790943251%26nb%3D9%26adurl%3Dhttps%3A%2F%2Fwww[.]google[.]com%252Furl%253Fq%253Dhttps%25253A%25252F%25252Flinkprotect[.]cudasvc[.]com%25252Furl%25253Fa%25253Dhttps%25253A%25252F%25252Fwtb-redirect[.]swaven[.]com%25252Foutbound_click%25253Fwtbid%2525253D60c775e445e449143acba972%25252526module%2525253Dwtb%25252526touchpoint%2525253DST%25252526lang%2525253Den%25252526sid%2525253D2095_WEB%25252526avpid%2525253D0041100002228%25252526prc%2525253D7[.]97%25252526prc_currency%2525253DUSD%25252526clkurlt%2525253D3%25252526clkurlaff%2525253D0%25252526url%2525253DaHR0cHM6Ly9tLmV4YWN0YWcuY29tL2NsLmFzcHg%25252FZXh0UHJvdkFwaT1zaXh0LWNybV9uZXdzbGV0dGVyJmV4dFByb3ZJZD0zMTMmZXh0UHU9bmxfcmFjX2RlJmV4dExpPURFX0NPUl9SRU5UX0NSTV9CMkNfMjRfQ1czM19Gcm9tIEludGVybWVkaWF0ZSBQdXNoX09OVF9OTFdfZGVfREVfU3RyZWljaHByZWlzXzEzODQwMiZleHRDcj1Gb290ZXJfcmVudCZleHRTaT1ubF9yYWNfZGVfMjQwOF9ERSZ1cmw9aHR0cHM6Ly91NDY4NDMwMjAuY3Quc2VuZGdyaWQubmV0JTJGbHMlMkZjbGljayUzRnVwbiUzRHUwMDEuUkd2S2RtQWYtMkJkMlRGcUNPVVFmdDRQUVFwYlViS2VtLTJGUXVOaGJGcE52WlQ4WUliZk9OYnRsTkhXbDdrTmNqOE1mdmxENndqUHZqTWFscVF4Vm9QZ25xTkFNbGNvQml4ejAxMTJqSTJ0OGhRS3lhVUhTa2tCNUJFZGk3ZjZGVHJZOVJnd2hrRHNqenlJYlFwbTVqbkxtUmxBbVEzemY0OWo0T3VxLTJCMmF6Yy0yQkx5MVRGV0MzbXZyNEE5bzU2VDJxWWVZRkhmS2JzalN4cHRNLTJGRnA0cWEyM243bGRaMnZHczJyOTAwbWNhRGpmakpJQ0ctMkZrYWMtMkJQeVkyZ1ZvTm5lYlAtMkJ5N1o4cDB3clJDdWVTREl0Yk1MRENBLTNELTNENFlQaF9MeU93MldNa25MUHoxSWktMkJESjFyUnBxMXA4S285Ykc5QzU4emlwR21Bb1dsQi0yQnlPQTNqcS0yQkFPb2xLOWZXNlRPR3l1NVdkTVBXQXotMkZSem51T0h2UEhxMFoxNGtIMkJZUEF0Q2oyVTBCVGM2RzlwR3JFNEVqV2UzeUVOZmVXaDVyZk9CNWtBelo4MGlOSUtLSWN6TERlLTJCWDZDNkpHcGdYZzFUZE0xdG1NNWVjNG03NXFVZlc1WUYtMkJZUnctMkZXLTJCUmRRNUs2ZmZrOFZLbWR2QXlMOWV3cnduRnY0ejBxNUJ0TjBDLTJCcjN1Y3AyQUs5TndxT21VdEVraWNBNjFPN0NxOTBZQlEtMkZsaTBweUFrMmQyaUJWYWpaV0s4eTNzYUViVmZNUEtFTkRpdDVMTHAtMkJ2MnktMkZUdUFjUzhoR1ZqM2k2S2x6STVHOEcxVkNhc1RqNHB6SlRMc3dYLTJGVG5tNldrSlNQNWZTUE9oTVo1TnVCMmRwYThTc0lpUXpEZS0yRngzLTJCS1lJZnBOaEFqZi0yRmh5WnRpSDNOa0RUdXRhdGJHUXA1cWJWbGhXTThpZ2JBcFlxMjltcEJYTW84Y1V4TEZUcnpNWm84QlE%2525253D%252526c%25253DE%25252C1%25252CDR46MsYBoqQYCIR265tDuHDy_G5rYCXcSJD3yqZE084XnwKAnmUdOkGTEGQQhlwGOYj_RpZJHPPpeiAVAfJ08NWAIzAZZeX1VKIwBKyDiJ-Dg8gikcGjT85owT4%25252C%252526typo%25253D1%2526sa%253DD%2526sntz%253D1%2526usg%253DAOvVaw3qgjtaoQ6mwDv4qLu0b3n1%23amxvbmdvYmFyZGlAZGFzaGZpbmFuY2lhbC5jb20=

Sharing

Behavioral task

behavioral1

Sample

https://www.google.com.hk/amp/s/www.googleadservices.com%2Fpagead%2Faclk%3Fnis%3D4%26sa%3DL%26ai%3DCsIQ8fN-mZrnKH9_ikPIPyf61kAfZz4y9eIqB6tTnEu2yyfjiCxABILXsx29gyb7JhsSjyBegAb782twDyAEJqAMByAPLBKoE1wFP0AxDzLJphEUPSIujkgl_YOc0cDSxDp8ber8wtsOlut-WKpzKWRomTKA6KNQAUXMEEs57erSb2d42wSkXj9rBCvZhI79K1EhndZGuKHL7DdjyTBlrPoXxeggFx2K3pwaMd0MkYrXh6ICImgwoQzSpDQ3gfvuoL98EcOks8IISxXW90chkHjv-GawGGQQp69WiMLUYc4RQH9Xg2Q6naZKr4t-8UWGP8IAreLIx0yTABQo_NjNFi_9CvMS0oMrfTBHtr980AeRp8UEUiHtUZIXld_GnXhDbM8AEj971wsYEiAWG26jlTcAFBfoFBgglEAEYAZAGAaAGLoAHqoOlI4gHAZAHAqgH2baxAqgHpr4bqAeOzhuoB5PYG6gH7paxAqgH_p6xAqgHr76xAqgHmgaoB_PRG6gHltgbqAeqm7ECqAeDrbECqAfgvbECqAf_nrECqAffn7ECqAfKqbECqAfrpbECqAfqsbECqAeZtbECqAe-t7ECqAf4wrEC2AcAwAgC0ggnCAAQAhgaMgEAOg6f0ICAgIAEkMCAgICgKEi9_cE6WJvMhr38yocDgAoBkAsDmAsByAsBgAwB2gwQCgoQgI_q9_qo07F2EgIBA6oNAlVTyA0B4BLxhb_nl5Xz2XLYEwvQFQGYFgH4FgGAFwG6FwI4AbIYCRICsFMYLiIBAdAYAQ%26ae%3D1%26ase%3D2%26gclid%3DCjwKCAjw2Je1BhAgEiwAp3KY7z7PdyEl4jUJ0cfYBG14XCZDFhEIMK_6utmVSSGOr1WMwFk95YUnrxoCHJUQAvD_BwE%26num%3D1%26cid%3DCAQSQgDaQooLSNWrJvloDZKkTv_h5xZAka5NHKcH-_uHOpus4WFOrYYJ-7d3y5hcfCPeKyQ1kcmCplRfHHoemga9JDWzsRgB%26sig%3DAOD64_1J7Y6-upYgBDRTWy2q4nCaCj8Acg%26ctype%3D5%26client%3Dca-pub-1687287790943251%26nb%3D9%26adurl%3Dhttps%3A%2F%2Fwww.google.com%252Furl%253Fq%253Dhttps%25253A%25252F%25252Flinkprotect.cudasvc.com%25252Furl%25253Fa%25253Dhttps%25253A%25252F%25252Fwtb-redirect.swaven.com%25252Foutbound_click%25253Fwtbid%2525253D60c775e445e449143acba972%25252526module%2525253Dwtb%25252526touchpoint%2525253DST%25252526lang%2525253Den%25252526sid%2525253D2095_WEB%25252526avpid%2525253D0041100002228%25252526prc%2525253D7.97%25252526prc_currency%2525253DUSD%25252526clkurlt%2525253D3%25252526clkurlaff%2525253D0%25252526url%2525253DaHR0cHM6Ly9tLmV4YWN0YWcuY29tL2NsLmFzcHg%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%2525253D%252526c%25253DE%25252C1%25252CDR46MsYBoqQYCIR265tDuHDy_G5rYCXcSJD3yqZE084XnwKAnmUdOkGTEGQQhlwGOYj_RpZJHPPpeiAVAfJ08NWAIzAZZeX1VKIwBKyDiJ-Dg8gikcGjT85owT4%25252C%252526typo%25253D1%2526sa%253DD%2526sntz%253D1%2526usg%253DAOvVaw3qgjtaoQ6mwDv4qLu0b3n1%23amxvbmdvYmFyZGlAZGFzaGZpbmFuY2lhbC5jb20=

Resource

win10v2004-20240802-en

discovery

windows10-2004-x64

9 signatures

150 seconds

General

Target

https://www.google.com.hk/amp/s/www.googleadservices.com%2Fpagead%2Faclk%3Fnis%3D4%26sa%3DL%26ai%3DCsIQ8fN-mZrnKH9_ikPIPyf61kAfZz4y9eIqB6tTnEu2yyfjiCxABILXsx29gyb7JhsSjyBegAb782twDyAEJqAMByAPLBKoE1wFP0AxDzLJphEUPSIujkgl_YOc0cDSxDp8ber8wtsOlut-WKpzKWRomTKA6KNQAUXMEEs57erSb2d42wSkXj9rBCvZhI79K1EhndZGuKHL7DdjyTBlrPoXxeggFx2K3pwaMd0MkYrXh6ICImgwoQzSpDQ3gfvuoL98EcOks8IISxXW90chkHjv-GawGGQQp69WiMLUYc4RQH9Xg2Q6naZKr4t-8UWGP8IAreLIx0yTABQo_NjNFi_9CvMS0oMrfTBHtr980AeRp8UEUiHtUZIXld_GnXhDbM8AEj971wsYEiAWG26jlTcAFBfoFBgglEAEYAZAGAaAGLoAHqoOlI4gHAZAHAqgH2baxAqgHpr4bqAeOzhuoB5PYG6gH7paxAqgH_p6xAqgHr76xAqgHmgaoB_PRG6gHltgbqAeqm7ECqAeDrbECqAfgvbECqAf_nrECqAffn7ECqAfKqbECqAfrpbECqAfqsbECqAeZtbECqAe-t7ECqAf4wrEC2AcAwAgC0ggnCAAQAhgaMgEAOg6f0ICAgIAEkMCAgICgKEi9_cE6WJvMhr38yocDgAoBkAsDmAsByAsBgAwB2gwQCgoQgI_q9_qo07F2EgIBA6oNAlVTyA0B4BLxhb_nl5Xz2XLYEwvQFQGYFgH4FgGAFwG6FwI4AbIYCRICsFMYLiIBAdAYAQ%26ae%3D1%26ase%3D2%26gclid%3DCjwKCAjw2Je1BhAgEiwAp3KY7z7PdyEl4jUJ0cfYBG14XCZDFhEIMK_6utmVSSGOr1WMwFk95YUnrxoCHJUQAvD_BwE%26num%3D1%26cid%3DCAQSQgDaQooLSNWrJvloDZKkTv_h5xZAka5NHKcH-_uHOpus4WFOrYYJ-7d3y5hcfCPeKyQ1kcmCplRfHHoemga9JDWzsRgB%26sig%3DAOD64_1J7Y6-upYgBDRTWy2q4nCaCj8Acg%26ctype%3D5%26client%3Dca-pub-1687287790943251%26nb%3D9%26adurl%3Dhttps%3A%2F%2Fwww.google.com%252Furl%253Fq%253Dhttps%25253A%25252F%25252Flinkprotect.cudasvc.com%25252Furl%25253Fa%25253Dhttps%25253A%25252F%25252Fwtb-redirect.swaven.com%25252Foutbound_click%25253Fwtbid%2525253D60c775e445e449143acba972%25252526module%2525253Dwtb%25252526touchpoint%2525253DST%25252526lang%2525253Den%25252526sid%2525253D2095_WEB%25252526avpid%2525253D0041100002228%25252526prc%2525253D7.97%25252526prc_currency%2525253DUSD%25252526clkurlt%2525253D3%25252526clkurlaff%2525253D0%25252526url%2525253DaHR0cHM6Ly9tLmV4YWN0YWcuY29tL2NsLmFzcHg%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%2525253D%252526c%25253DE%25252C1%25252CDR46MsYBoqQYCIR265tDuHDy_G5rYCXcSJD3yqZE084XnwKAnmUdOkGTEGQQhlwGOYj_RpZJHPPpeiAVAfJ08NWAIzAZZeX1VKIwBKyDiJ-Dg8gikcGjT85owT4%25252C%252526typo%25253D1%2526sa%253DD%2526sntz%253D1%2526usg%253DAOvVaw3qgjtaoQ6mwDv4qLu0b3n1%23amxvbmdvYmFyZGlAZGFzaGZpbmFuY2lhbC5jb20=

Sharing

General

Malware Config

Signatures

Files