hxxp://www[.]google[.]nl/amp/s/www[.]googleadservices[.]com/pagead/aclk%3Fnis%3D4%26sa%3DL%26ai%3DCsIQ8fN-mZrnKH9_ikPIPyf61kAfZz4y9eIqB6tTnEu2yyfjiCxABILXsx29gyb7JhsSjyBegAb782twDyAEJqAMByAPLBKoE1wFP0AxDzLJphEUPSIujkgl_YOc0cDSxDp8ber8wtsOlut-WKpzKWRomTKA6KNQAUXMEEs57erSb2d42wSkXj9rBCvZhI79K1EhndZGuKHL7DdjyTBlrPoXxeggFx2K3pwaMd0MkYrXh6ICImgwoQzSpDQ3gfvuoL98EcOks8IISxXW90chkHjv-GawGGQQp69WiMLUYc4RQH9Xg2Q6naZKr4t-8UWGP8IAreLIx0yTABQo_NjNFi_9CvMS0oMrfTBHtr980AeRp8UEUiHtUZIXld_GnXhDbM8AEj971wsYEiAWG26jlTcAFBfoFBgglEAEYAZAGAaAGLoAHqoOlI4gHAZAHAqgH2baxAqgHpr4bqAeOzhuoB5PYG6gH7paxAqgH_p6xAqgHr76xAqgHmgaoB_PRG6gHltgbqAeqm7ECqAeDrbECqAfgvbECqAf_nrECqAffn7ECqAfKqbECqAfrpbECqAfqsbECqAeZtbECqAe-t7ECqAf4wrEC2AcAwAgC0ggnCAAQAhgaMgEAOg6f0ICAgIAEkMCAgICgKEi9_cE6WJvMhr38yocDgAoBkAsDmAsByAsBgAwB2gwQCgoQgI_q9_qo07F2EgIBA6oNAlVTyA0B4BLxhb_nl5Xz2XLYEwvQFQGYFgH4FgGAFwG6FwI4AbIYCRICsFMYLiIBAdAYAQ%26ae%3D1%26ase%3D2%26gclid%3DCjwKCAjw2Je1BhAgEiwAp3KY7z7PdyEl4jUJ0cfYBG14XCZDFhEIMK_6utmVSSGOr1WMwFk95YUnrxoCHJUQAvD_BwE%26num%3D1%26cid%3DCAQSQgDaQooLSNWrJvloDZKkTv_h5xZAka5NHKcH-_uHOpus4WFOrYYJ-7d3y5hcfCPeKyQ1kcmCplRfHHoemga9JDWzsRgB%26sig%3DAOD64_1J7Y6-upYgBDRTWy2q4nCaCj8Acg%26ctype%3D5%26client%3Dca-pub-1687287790943251%26nb%3D9%26adurl%3Dhttps%3A[//]www[.]google[.]com%252Furl%253Fq%253Dhttps%25253A%25252F%25252Flinkprotect[.]cudasvc[.]com%25252Furl%25253Fa%25253Dhttps%25253A%25252F%25252Fwtb-redirect[.]swaven[.]com%25252Foutbound_click%25253Fwtbid%2525253D60c775e445e449143acba972%25252526module%2525253Dwtb%25252526touchpoint%2525253DST%25252526lang%2525253Den%25252526sid%2525253D2095_WEB%25252526avpid%2525253D0041100002228%25252526prc%2525253D7[.]97%25252526prc_currency%2525253DUSD%25252526clkurlt%2525253D3%25252526clkurlaff%2525253D0%25252526url%2525253DaHR0cHM6Ly9tLmV4YWN0YWcuY29tL2NsLmFzcHg%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%2525253D%252526c%25253DE%25252C1%25252CDR46MsYBoqQYCIR265tDuHDy_G5rYCXcSJD3yqZE084XnwKAnmUdOkGTEGQQhlwGOYj_RpZJHPPpeiAVAfJ08NWAIzAZZeX1VKIwBKyDiJ-Dg8gikcGjT85owT4%25252C%252526typo%25253D1%2526sa%253DD%2526sntz%253D1%2526usg%253DAOvVaw3Nw82RIQ2qBevbBJ3x20M_%23cGF1bC5wcmFrYXNoQG9wb3J0dW4uY29t

Sharing

Behavioral task

behavioral1

Sample

http://www.google.nl/amp/s/www.googleadservices.com/pagead/aclk%3Fnis%3D4%26sa%3DL%26ai%3DCsIQ8fN-mZrnKH9_ikPIPyf61kAfZz4y9eIqB6tTnEu2yyfjiCxABILXsx29gyb7JhsSjyBegAb782twDyAEJqAMByAPLBKoE1wFP0AxDzLJphEUPSIujkgl_YOc0cDSxDp8ber8wtsOlut-WKpzKWRomTKA6KNQAUXMEEs57erSb2d42wSkXj9rBCvZhI79K1EhndZGuKHL7DdjyTBlrPoXxeggFx2K3pwaMd0MkYrXh6ICImgwoQzSpDQ3gfvuoL98EcOks8IISxXW90chkHjv-GawGGQQp69WiMLUYc4RQH9Xg2Q6naZKr4t-8UWGP8IAreLIx0yTABQo_NjNFi_9CvMS0oMrfTBHtr980AeRp8UEUiHtUZIXld_GnXhDbM8AEj971wsYEiAWG26jlTcAFBfoFBgglEAEYAZAGAaAGLoAHqoOlI4gHAZAHAqgH2baxAqgHpr4bqAeOzhuoB5PYG6gH7paxAqgH_p6xAqgHr76xAqgHmgaoB_PRG6gHltgbqAeqm7ECqAeDrbECqAfgvbECqAf_nrECqAffn7ECqAfKqbECqAfrpbECqAfqsbECqAeZtbECqAe-t7ECqAf4wrEC2AcAwAgC0ggnCAAQAhgaMgEAOg6f0ICAgIAEkMCAgICgKEi9_cE6WJvMhr38yocDgAoBkAsDmAsByAsBgAwB2gwQCgoQgI_q9_qo07F2EgIBA6oNAlVTyA0B4BLxhb_nl5Xz2XLYEwvQFQGYFgH4FgGAFwG6FwI4AbIYCRICsFMYLiIBAdAYAQ%26ae%3D1%26ase%3D2%26gclid%3DCjwKCAjw2Je1BhAgEiwAp3KY7z7PdyEl4jUJ0cfYBG14XCZDFhEIMK_6utmVSSGOr1WMwFk95YUnrxoCHJUQAvD_BwE%26num%3D1%26cid%3DCAQSQgDaQooLSNWrJvloDZKkTv_h5xZAka5NHKcH-_uHOpus4WFOrYYJ-7d3y5hcfCPeKyQ1kcmCplRfHHoemga9JDWzsRgB%26sig%3DAOD64_1J7Y6-upYgBDRTWy2q4nCaCj8Acg%26ctype%3D5%26client%3Dca-pub-1687287790943251%26nb%3D9%26adurl%3Dhttps%3A//www.google.com%252Furl%253Fq%253Dhttps%25253A%25252F%25252Flinkprotect.cudasvc.com%25252Furl%25253Fa%25253Dhttps%25253A%25252F%25252Fwtb-redirect.swaven.com%25252Foutbound_click%25253Fwtbid%2525253D60c775e445e449143acba972%25252526module%2525253Dwtb%25252526touchpoint%2525253DST%25252526lang%2525253Den%25252526sid%2525253D2095_WEB%25252526avpid%2525253D0041100002228%25252526prc%2525253D7.97%25252526prc_currency%2525253DUSD%25252526clkurlt%2525253D3%25252526clkurlaff%2525253D0%25252526url%2525253DaHR0cHM6Ly9tLmV4YWN0YWcuY29tL2NsLmFzcHg%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%2525253D%252526c%25253DE%25252C1%25252CDR46MsYBoqQYCIR265tDuHDy_G5rYCXcSJD3yqZE084XnwKAnmUdOkGTEGQQhlwGOYj_RpZJHPPpeiAVAfJ08NWAIzAZZeX1VKIwBKyDiJ-Dg8gikcGjT85owT4%25252C%252526typo%25253D1%2526sa%253DD%2526sntz%253D1%2526usg%253DAOvVaw3Nw82RIQ2qBevbBJ3x20M_%23cGF1bC5wcmFrYXNoQG9wb3J0dW4uY29t

Resource

win10v2004-20240802-en

discovery

windows10-2004-x64

9 signatures

150 seconds

General

Target

http://www.google.nl/amp/s/www.googleadservices.com/pagead/aclk%3Fnis%3D4%26sa%3DL%26ai%3DCsIQ8fN-mZrnKH9_ikPIPyf61kAfZz4y9eIqB6tTnEu2yyfjiCxABILXsx29gyb7JhsSjyBegAb782twDyAEJqAMByAPLBKoE1wFP0AxDzLJphEUPSIujkgl_YOc0cDSxDp8ber8wtsOlut-WKpzKWRomTKA6KNQAUXMEEs57erSb2d42wSkXj9rBCvZhI79K1EhndZGuKHL7DdjyTBlrPoXxeggFx2K3pwaMd0MkYrXh6ICImgwoQzSpDQ3gfvuoL98EcOks8IISxXW90chkHjv-GawGGQQp69WiMLUYc4RQH9Xg2Q6naZKr4t-8UWGP8IAreLIx0yTABQo_NjNFi_9CvMS0oMrfTBHtr980AeRp8UEUiHtUZIXld_GnXhDbM8AEj971wsYEiAWG26jlTcAFBfoFBgglEAEYAZAGAaAGLoAHqoOlI4gHAZAHAqgH2baxAqgHpr4bqAeOzhuoB5PYG6gH7paxAqgH_p6xAqgHr76xAqgHmgaoB_PRG6gHltgbqAeqm7ECqAeDrbECqAfgvbECqAf_nrECqAffn7ECqAfKqbECqAfrpbECqAfqsbECqAeZtbECqAe-t7ECqAf4wrEC2AcAwAgC0ggnCAAQAhgaMgEAOg6f0ICAgIAEkMCAgICgKEi9_cE6WJvMhr38yocDgAoBkAsDmAsByAsBgAwB2gwQCgoQgI_q9_qo07F2EgIBA6oNAlVTyA0B4BLxhb_nl5Xz2XLYEwvQFQGYFgH4FgGAFwG6FwI4AbIYCRICsFMYLiIBAdAYAQ%26ae%3D1%26ase%3D2%26gclid%3DCjwKCAjw2Je1BhAgEiwAp3KY7z7PdyEl4jUJ0cfYBG14XCZDFhEIMK_6utmVSSGOr1WMwFk95YUnrxoCHJUQAvD_BwE%26num%3D1%26cid%3DCAQSQgDaQooLSNWrJvloDZKkTv_h5xZAka5NHKcH-_uHOpus4WFOrYYJ-7d3y5hcfCPeKyQ1kcmCplRfHHoemga9JDWzsRgB%26sig%3DAOD64_1J7Y6-upYgBDRTWy2q4nCaCj8Acg%26ctype%3D5%26client%3Dca-pub-1687287790943251%26nb%3D9%26adurl%3Dhttps%3A//www.google.com%252Furl%253Fq%253Dhttps%25253A%25252F%25252Flinkprotect.cudasvc.com%25252Furl%25253Fa%25253Dhttps%25253A%25252F%25252Fwtb-redirect.swaven.com%25252Foutbound_click%25253Fwtbid%2525253D60c775e445e449143acba972%25252526module%2525253Dwtb%25252526touchpoint%2525253DST%25252526lang%2525253Den%25252526sid%2525253D2095_WEB%25252526avpid%2525253D0041100002228%25252526prc%2525253D7.97%25252526prc_currency%2525253DUSD%25252526clkurlt%2525253D3%25252526clkurlaff%2525253D0%25252526url%2525253DaHR0cHM6Ly9tLmV4YWN0YWcuY29tL2NsLmFzcHg%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%2525253D%252526c%25253DE%25252C1%25252CDR46MsYBoqQYCIR265tDuHDy_G5rYCXcSJD3yqZE084XnwKAnmUdOkGTEGQQhlwGOYj_RpZJHPPpeiAVAfJ08NWAIzAZZeX1VKIwBKyDiJ-Dg8gikcGjT85owT4%25252C%252526typo%25253D1%2526sa%253DD%2526sntz%253D1%2526usg%253DAOvVaw3Nw82RIQ2qBevbBJ3x20M_%23cGF1bC5wcmFrYXNoQG9wb3J0dW4uY29t

Sharing

General

Malware Config

Signatures

Files