General
- Target https://www.google.co.zm/url?q=amp/adservice.google.com.ph%252Fddm%252Fclk%252F424929466%253B226923624%253Br%253Bu%253Dds%2526amp%253Bsv1%253D64195420186%2526amp%253Bsv2%253D3261659123742877%2526amp%253Bsv3%253D6702577448695742699%2526amp%253Bgclid%253DEAIaIQobChMIurHiwbHn8gIVBZ53Ch2TZAIsEAQYASABEgKAL_D_BwE%253B%253F%252F%252Fdatafibra.com/.cdm018363/h2043oq#?79273293=bmJpLnJtdXRoYW5nYUBjbWEtY2dtLmNvbQ==
- Sample260626-qdn6lsbw51
Score
6/10
Static task
static1
URLScan task
urlscan1
Behavioral task
behavioral1
Sample
https://www.google.co.zm/url?q=amp/adservice.google.com.ph%252Fddm%252Fclk%252F424929466%253B226923624%253Br%253Bu%253Dds%2526amp%253Bsv1%253D64195420186%2526amp%253Bsv2%253D3261659123742877%2526amp%253Bsv3%253D6702577448695742699%2526amp%253Bgclid%253DEAIaIQobChMIurHiwbHn8gIVBZ53Ch2TZAIsEAQYASABEgKAL_D_BwE%253B%253F%252F%252Fdatafibra.com/.cdm018363/h2043oq#?79273293=bmJpLnJtdXRoYW5nYUBjbWEtY2dtLmNvbQ==
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target https://www.google.co.zm/url?q=amp/adservice.google.com.ph%252Fddm%252Fclk%252F424929466%253B226923624%253Br%253Bu%253Dds%2526amp%253Bsv1%253D64195420186%2526amp%253Bsv2%253D3261659123742877%2526amp%253Bsv3%253D6702577448695742699%2526amp%253Bgclid%253DEAIaIQobChMIurHiwbHn8gIVBZ53Ch2TZAIsEAQYASABEgKAL_D_BwE%253B%253F%252F%252Fdatafibra.com/.cdm018363/h2043oq#?79273293=bmJpLnJtdXRoYW5nYUBjbWEtY2dtLmNvbQ==
Score6/10-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.