hxxps://www[.]googleadservices[.]com/pagead/aclk?sa=L&ai=CWc1XFQlMaujCL7f5998Pyciw2ATquMG0hgHp2aD-ixbZzMKCkw4QASD0-cYlYMm--IbIo5AZoAG60YPXQcgBBuACAKgDAcgDCqoEoANP0NAteUoHBCTezNPOycg8JYYtyw67IvMFFhNPiMl01N5RBGrY83jwBYsspbz8jRrNPLdoWoRtskEvLi7jRh5yneoFUzoPNEPS1qTxleF8g8th57Z5rS3pilk5Of50DpX891tUuIJGt959vTrbaAdPvqzQci1Lq35a1bZKJ4g5jOqhWq9kY8FcUrA5RAimnJDjpSqY-hSC8U86zwpe9S9rhIxlDbhmDQqAdOI_UmcRFIE-ct9z3NwgKLmQuoFdQEdDEttqwnUpVnRm6IVX6Zj7UGZ_1BqIRLKPKn4ctPWVXnAMUrIxIj73evCNrevMRXR8F6Q4W3lbNDP77fWdRU5Rw3_qyCYu3nJ3fkdlpwzy1EDSLUeoMyt7fM-q2M8h28nK8JuxSLCHESeprBGRnfO-7BJ-d5zK_ItFhAqKekG6M0kpdA9w0_wcWAlIcPL3fJgAGcSdVtHXGYNAzs3mRVxbCb7uVOdtbWlEWpM-wq0xTl7hU0XxH_StHJ-FnfWJ-lTxNiX4tFGh0H1yR97wFY6-8vi7ULgshTJAuQuxlTpWbMAE7KPGudMF4AQBiAW9ia3qV6AGN4AHuonUthyoB6fMsQKoB6a-G6gHzM6xAqgH89EbqAeW2BuoB6qbsQKoB47OG6gHk9gbqAfw4BuoB-6WsQKoB_6esQKoB6--sQKoB9XJG6gH2baxAqgHmgaoB_-esQKoB9-fsQKoB_jCsQKoB_vCsQLYBwHSCDIIgGEQARgdMgiKgoCAgICACDoPgECAwICAgICogAKog5AQSL39wTpYm479rOu-lQNgAbEJ7e0OvO4HW5-ACgOYCwHICwGqDQJVU8gNAeINEwipw_2s676VAxW3_P0FHUkkDEvqDRMIzMr-rOu-lQMVt_z9BR1JJAxL8A0CiA7___________8BsA7fzuvvGNgTC9AVAcoWAgoA-BYBgBcBshcQGAEqCjMzNDUzODM3NzRQBroXAjgBqhgXCQAAAACSrTZBEgozMzQ1MzgzNzc0GAGyGAkSAuhYGDciAQDQGAHoGAHCGQIIAQ&ae=1&gclid=EAIaIQobChMIqKGCreu-lQMVt_z9BR1JJAxLEAEYASAAEgI2hPD_BwE&num=1&cid=CAQSnwIAEQoqgZvDLuR0i96fYHz9a76dwntYYjZpTSZxXVnUL9x4Fx6y3Ahe3EqdL4JUqsZbveftUNY-5LEsfpxIZWLVwUOft186waddA4bnOZJXZcAgbhjg-qwWzKFJLwAIunaNV79J82RXpptuRmuqSMj7HE32gdbwtgXDa5lLDkMlrndqQJSNNzZ5KYKOhms0s-JtDRy_b2LjpqYlrfiiJtmh4nEiooJT8dVurHJpnabkKiRrbZNnciBBV3IZMhLDdJfNCMfAU3avPzH-ManDw0OxNknIysY8U7xqP7uQBrSkBtgaSDZVsC_Q9KJmlzXl34eOY7hnNmK1D_Ru2iE7HeHzhhs-YUuGDzsgtSV5taH_qj0pCFKobi1D-7nrF5xyRBgB&sig=AOD64_3g99s5JalLDpK_VKlzpT3zyTF2sQ&client=ca-pub-6396844742497208&nx=CLICK_X&ny=CLICK_Y&uap=UACH(platform)&uapv=UACH(platformVersion)&uaa=UACH(architecture)&uam=UACH(model)&uafv=UACH(uaFullVersion)&uab=UACH(bitness)&uaw=UACH(wow64)&uafvl=UACH(fullVersionList)&nb=8&adurl=hxxps://pdf-docu[.]com/pdf/download%3Fcampaign_id%3D23586931114%26adgroup_id%3D6676997983%26placement_id%3D%26creative_id%3D%26spa%3DEAIaIQobChMIqKGCreu-lQMVt_z9BR1JJAxLEAEYASAAEgI2hPD_BwE%26gad_source%3D5%26gad_campaignid%3D23576921277%26gclid%3DEAIaIQobChMIqKGCreu-lQMVt_z9BR1JJAxLEAEYASAAEgI2hPD_BwE

Sharing

Copy URL Twitter E-mail

General

Target
https://www.googleadservices.com/pagead/aclk?sa=L&ai=CWc1XFQlMaujCL7f5998Pyciw2ATquMG0hgHp2aD-ixbZzMKCkw4QASD0-cYlYMm--IbIo5AZoAG60YPXQcgBBuACAKgDAcgDCqoEoANP0NAteUoHBCTezNPOycg8JYYtyw67IvMFFhNPiMl01N5RBGrY83jwBYsspbz8jRrNPLdoWoRtskEvLi7jRh5yneoFUzoPNEPS1qTxleF8g8th57Z5rS3pilk5Of50DpX891tUuIJGt959vTrbaAdPvqzQci1Lq35a1bZKJ4g5jOqhWq9kY8FcUrA5RAimnJDjpSqY-hSC8U86zwpe9S9rhIxlDbhmDQqAdOI_UmcRFIE-ct9z3NwgKLmQuoFdQEdDEttqwnUpVnRm6IVX6Zj7UGZ_1BqIRLKPKn4ctPWVXnAMUrIxIj73evCNrevMRXR8F6Q4W3lbNDP77fWdRU5Rw3_qyCYu3nJ3fkdlpwzy1EDSLUeoMyt7fM-q2M8h28nK8JuxSLCHESeprBGRnfO-7BJ-d5zK_ItFhAqKekG6M0kpdA9w0_wcWAlIcPL3fJgAGcSdVtHXGYNAzs3mRVxbCb7uVOdtbWlEWpM-wq0xTl7hU0XxH_StHJ-FnfWJ-lTxNiX4tFGh0H1yR97wFY6-8vi7ULgshTJAuQuxlTpWbMAE7KPGudMF4AQBiAW9ia3qV6AGN4AHuonUthyoB6fMsQKoB6a-G6gHzM6xAqgH89EbqAeW2BuoB6qbsQKoB47OG6gHk9gbqAfw4BuoB-6WsQKoB_6esQKoB6--sQKoB9XJG6gH2baxAqgHmgaoB_-esQKoB9-fsQKoB_jCsQKoB_vCsQLYBwHSCDIIgGEQARgdMgiKgoCAgICACDoPgECAwICAgICogAKog5AQSL39wTpYm479rOu-lQNgAbEJ7e0OvO4HW5-ACgOYCwHICwGqDQJVU8gNAeINEwipw_2s676VAxW3_P0FHUkkDEvqDRMIzMr-rOu-lQMVt_z9BR1JJAxL8A0CiA7___________8BsA7fzuvvGNgTC9AVAcoWAgoA-BYBgBcBshcQGAEqCjMzNDUzODM3NzRQBroXAjgBqhgXCQAAAACSrTZBEgozMzQ1MzgzNzc0GAGyGAkSAuhYGDciAQDQGAHoGAHCGQIIAQ&ae=1&gclid=EAIaIQobChMIqKGCreu-lQMVt_z9BR1JJAxLEAEYASAAEgI2hPD_BwE&num=1&cid=CAQSnwIAEQoqgZvDLuR0i96fYHz9a76dwntYYjZpTSZxXVnUL9x4Fx6y3Ahe3EqdL4JUqsZbveftUNY-5LEsfpxIZWLVwUOft186waddA4bnOZJXZcAgbhjg-qwWzKFJLwAIunaNV79J82RXpptuRmuqSMj7HE32gdbwtgXDa5lLDkMlrndqQJSNNzZ5KYKOhms0s-JtDRy_b2LjpqYlrfiiJtmh4nEiooJT8dVurHJpnabkKiRrbZNnciBBV3IZMhLDdJfNCMfAU3avPzH-ManDw0OxNknIysY8U7xqP7uQBrSkBtgaSDZVsC_Q9KJmlzXl34eOY7hnNmK1D_Ru2iE7HeHzhhs-YUuGDzsgtSV5taH_qj0pCFKobi1D-7nrF5xyRBgB&sig=AOD64_3g99s5JalLDpK_VKlzpT3zyTF2sQ&client=ca-pub-6396844742497208&nx=CLICK_X&ny=CLICK_Y&uap=UACH(platform)&uapv=UACH(platformVersion)&uaa=UACH(architecture)&uam=UACH(model)&uafv=UACH(uaFullVersion)&uab=UACH(bitness)&uaw=UACH(wow64)&uafvl=UACH(fullVersionList)&nb=8&adurl=https://pdf-docu.com/pdf/download%3Fcampaign_id%3D23586931114%26adgroup_id%3D6676997983%26placement_id%3D%26creative_id%3D%26spa%3DEAIaIQobChMIqKGCreu-lQMVt_z9BR1JJAxLEAEYASAAEgI2hPD_BwE%26gad_source%3D5%26gad_campaignid%3D23576921277%26gclid%3DEAIaIQobChMIqKGCreu-lQMVt_z9BR1JJAxLEAEYASAAEgI2hPD_BwE
Sample260706-ytx3fsc12s

Score

8^/10

Behavioral task

behavioral1

Sample

https://www.googleadservices.com/pagead/aclk?sa=L&ai=CWc1XFQlMaujCL7f5998Pyciw2ATquMG0hgHp2aD-ixbZzMKCkw4QASD0-cYlYMm--IbIo5AZoAG60YPXQcgBBuACAKgDAcgDCqoEoANP0NAteUoHBCTezNPOycg8JYYtyw67IvMFFhNPiMl01N5RBGrY83jwBYsspbz8jRrNPLdoWoRtskEvLi7jRh5yneoFUzoPNEPS1qTxleF8g8th57Z5rS3pilk5Of50DpX891tUuIJGt959vTrbaAdPvqzQci1Lq35a1bZKJ4g5jOqhWq9kY8FcUrA5RAimnJDjpSqY-hSC8U86zwpe9S9rhIxlDbhmDQqAdOI_UmcRFIE-ct9z3NwgKLmQuoFdQEdDEttqwnUpVnRm6IVX6Zj7UGZ_1BqIRLKPKn4ctPWVXnAMUrIxIj73evCNrevMRXR8F6Q4W3lbNDP77fWdRU5Rw3_qyCYu3nJ3fkdlpwzy1EDSLUeoMyt7fM-q2M8h28nK8JuxSLCHESeprBGRnfO-7BJ-d5zK_ItFhAqKekG6M0kpdA9w0_wcWAlIcPL3fJgAGcSdVtHXGYNAzs3mRVxbCb7uVOdtbWlEWpM-wq0xTl7hU0XxH_StHJ-FnfWJ-lTxNiX4tFGh0H1yR97wFY6-8vi7ULgshTJAuQuxlTpWbMAE7KPGudMF4AQBiAW9ia3qV6AGN4AHuonUthyoB6fMsQKoB6a-G6gHzM6xAqgH89EbqAeW2BuoB6qbsQKoB47OG6gHk9gbqAfw4BuoB-6WsQKoB_6esQKoB6--sQKoB9XJG6gH2baxAqgHmgaoB_-esQKoB9-fsQKoB_jCsQKoB_vCsQLYBwHSCDIIgGEQARgdMgiKgoCAgICACDoPgECAwICAgICogAKog5AQSL39wTpYm479rOu-lQNgAbEJ7e0OvO4HW5-ACgOYCwHICwGqDQJVU8gNAeINEwipw_2s676VAxW3_P0FHUkkDEvqDRMIzMr-rOu-lQMVt_z9BR1JJAxL8A0CiA7___________8BsA7fzuvvGNgTC9AVAcoWAgoA-BYBgBcBshcQGAEqCjMzNDUzODM3NzRQBroXAjgBqhgXCQAAAACSrTZBEgozMzQ1MzgzNzc0GAGyGAkSAuhYGDciAQDQGAHoGAHCGQIIAQ&ae=1&gclid=EAIaIQobChMIqKGCreu-lQMVt_z9BR1JJAxLEAEYASAAEgI2hPD_BwE&num=1&cid=CAQSnwIAEQoqgZvDLuR0i96fYHz9a76dwntYYjZpTSZxXVnUL9x4Fx6y3Ahe3EqdL4JUqsZbveftUNY-5LEsfpxIZWLVwUOft186waddA4bnOZJXZcAgbhjg-qwWzKFJLwAIunaNV79J82RXpptuRmuqSMj7HE32gdbwtgXDa5lLDkMlrndqQJSNNzZ5KYKOhms0s-JtDRy_b2LjpqYlrfiiJtmh4nEiooJT8dVurHJpnabkKiRrbZNnciBBV3IZMhLDdJfNCMfAU3avPzH-ManDw0OxNknIysY8U7xqP7uQBrSkBtgaSDZVsC_Q9KJmlzXl34eOY7hnNmK1D_Ru2iE7HeHzhhs-YUuGDzsgtSV5taH_qj0pCFKobi1D-7nrF5xyRBgB&sig=AOD64_3g99s5JalLDpK_VKlzpT3zyTF2sQ&client=ca-pub-6396844742497208&nx=CLICK_X&ny=CLICK_Y&uap=UACH(platform)&uapv=UACH(platformVersion)&uaa=UACH(architecture)&uam=UACH(model)&uafv=UACH(uaFullVersion)&uab=UACH(bitness)&uaw=UACH(wow64)&uafvl=UACH(fullVersionList)&nb=8&adurl=https://pdf-docu.com/pdf/download%3Fcampaign_id%3D23586931114%26adgroup_id%3D6676997983%26placement_id%3D%26creative_id%3D%26spa%3DEAIaIQobChMIqKGCreu-lQMVt_z9BR1JJAxLEAEYASAAEgI2hPD_BwE%26gad_source%3D5%26gad_campaignid%3D23576921277%26gclid%3DEAIaIQobChMIqKGCreu-lQMVt_z9BR1JJAxLEAEYASAAEgI2hPD_BwE

Resource

win11ltsc2024-20260706-en

windows11-ltsc_2024-x64

15 signatures

900 seconds

discovery persistence ransomware

Malware Config

Targets

- Target
  https://www.googleadservices.com/pagead/aclk?sa=L&ai=CWc1XFQlMaujCL7f5998Pyciw2ATquMG0hgHp2aD-ixbZzMKCkw4QASD0-cYlYMm--IbIo5AZoAG60YPXQcgBBuACAKgDAcgDCqoEoANP0NAteUoHBCTezNPOycg8JYYtyw67IvMFFhNPiMl01N5RBGrY83jwBYsspbz8jRrNPLdoWoRtskEvLi7jRh5yneoFUzoPNEPS1qTxleF8g8th57Z5rS3pilk5Of50DpX891tUuIJGt959vTrbaAdPvqzQci1Lq35a1bZKJ4g5jOqhWq9kY8FcUrA5RAimnJDjpSqY-hSC8U86zwpe9S9rhIxlDbhmDQqAdOI_UmcRFIE-ct9z3NwgKLmQuoFdQEdDEttqwnUpVnRm6IVX6Zj7UGZ_1BqIRLKPKn4ctPWVXnAMUrIxIj73evCNrevMRXR8F6Q4W3lbNDP77fWdRU5Rw3_qyCYu3nJ3fkdlpwzy1EDSLUeoMyt7fM-q2M8h28nK8JuxSLCHESeprBGRnfO-7BJ-d5zK_ItFhAqKekG6M0kpdA9w0_wcWAlIcPL3fJgAGcSdVtHXGYNAzs3mRVxbCb7uVOdtbWlEWpM-wq0xTl7hU0XxH_StHJ-FnfWJ-lTxNiX4tFGh0H1yR97wFY6-8vi7ULgshTJAuQuxlTpWbMAE7KPGudMF4AQBiAW9ia3qV6AGN4AHuonUthyoB6fMsQKoB6a-G6gHzM6xAqgH89EbqAeW2BuoB6qbsQKoB47OG6gHk9gbqAfw4BuoB-6WsQKoB_6esQKoB6--sQKoB9XJG6gH2baxAqgHmgaoB_-esQKoB9-fsQKoB_jCsQKoB_vCsQLYBwHSCDIIgGEQARgdMgiKgoCAgICACDoPgECAwICAgICogAKog5AQSL39wTpYm479rOu-lQNgAbEJ7e0OvO4HW5-ACgOYCwHICwGqDQJVU8gNAeINEwipw_2s676VAxW3_P0FHUkkDEvqDRMIzMr-rOu-lQMVt_z9BR1JJAxL8A0CiA7___________8BsA7fzuvvGNgTC9AVAcoWAgoA-BYBgBcBshcQGAEqCjMzNDUzODM3NzRQBroXAjgBqhgXCQAAAACSrTZBEgozMzQ1MzgzNzc0GAGyGAkSAuhYGDciAQDQGAHoGAHCGQIIAQ&ae=1&gclid=EAIaIQobChMIqKGCreu-lQMVt_z9BR1JJAxLEAEYASAAEgI2hPD_BwE&num=1&cid=CAQSnwIAEQoqgZvDLuR0i96fYHz9a76dwntYYjZpTSZxXVnUL9x4Fx6y3Ahe3EqdL4JUqsZbveftUNY-5LEsfpxIZWLVwUOft186waddA4bnOZJXZcAgbhjg-qwWzKFJLwAIunaNV79J82RXpptuRmuqSMj7HE32gdbwtgXDa5lLDkMlrndqQJSNNzZ5KYKOhms0s-JtDRy_b2LjpqYlrfiiJtmh4nEiooJT8dVurHJpnabkKiRrbZNnciBBV3IZMhLDdJfNCMfAU3avPzH-ManDw0OxNknIysY8U7xqP7uQBrSkBtgaSDZVsC_Q9KJmlzXl34eOY7hnNmK1D_Ru2iE7HeHzhhs-YUuGDzsgtSV5taH_qj0pCFKobi1D-7nrF5xyRBgB&sig=AOD64_3g99s5JalLDpK_VKlzpT3zyTF2sQ&client=ca-pub-6396844742497208&nx=CLICK_X&ny=CLICK_Y&uap=UACH(platform)&uapv=UACH(platformVersion)&uaa=UACH(architecture)&uam=UACH(model)&uafv=UACH(uaFullVersion)&uab=UACH(bitness)&uaw=UACH(wow64)&uafvl=UACH(fullVersionList)&nb=8&adurl=https://pdf-docu.com/pdf/download%3Fcampaign_id%3D23586931114%26adgroup_id%3D6676997983%26placement_id%3D%26creative_id%3D%26spa%3DEAIaIQobChMIqKGCreu-lQMVt_z9BR1JJAxLEAEYASAAEgI2hPD_BwE%26gad_source%3D5%26gad_campaignid%3D23576921277%26gclid%3DEAIaIQobChMIqKGCreu-lQMVt_z9BR1JJAxLEAEYASAAEgI2hPD_BwE
Score

8^/10

discovery persistence ransomware
- Downloads MZ/PE file
behavioral1

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

8^/10

Sharing

General

Malware Config

Targets

Downloads MZ/PE file

MITRE ATT&CK Enterprise v16

Tasks

static1

urlscan1

behavioral1