hxxps://www[.]googleadservices[.]com/pagead/aclk?sa=L&ai=CFgwtFmr2as7-BaSJ-L4PpfydqQb68uPxigGHj4mEsRZkEAEgAGDJ3oWN5KTAE4IBF2NhLXB1Yi02MjE5ODExNzQ3MDQ5MzcxoAHW6sGWPqkCgZk-vQwcgT6oAwTIAwqqBLsDT9D0gagL_CM9GATBsRZeBY0OfPeA3aWegq6bQDiBB5xMlrJmeN-IXEWSyGIDrRDB4gk3PSI6dgdLAaY5Ej8TIpGrG-FG4lbjAPqh7fa6-iCXaPAS5erq6_OQ4JjAu6dVHwxXxZYSt6ikSvViM3eLLyNFbXOwVaKN6iKtbgMkk29hAcy0p00PzdDstgUySR7NeWbPd5-zXFxy6cGPRZ2D2K5r3kolGKmm_KTMxM48He4K7ECPeepM1k3ySHfse04JgdrcbKnMpQLX7t9jS905be_D6_vVdMpSfSbSQESW13_z68Kxc0nfGgGR7BiTFdeuay500W-m6ab06XIGsDcLDuxReyBKGZGfGIhTXeDC8W8hI8h-PyvG5pqMDnfzCEQ29WEwXSSNP8pbXEjSOnCWVSDa8s4e5Oke9Xp03Zi_bLlgFIafuKGgc8yIw9jFNujr2gmjOgk4y7Xc-gXDZW4uYzmX4ELnQiPZWw9ngmIVdE37jfWdMHAAwTFnqihtYMdSeTPik12uBNeuEgoF534nhnbofgyWO3LQqLIF2gxYnBA79G8ovfrPRn7aT5HhrPlbmTbcymDNb9uq8Z-IBaamvehakgUKCBNoAnirxf-BGaAGpAGAB9aikvYYiAcBkAcCqAfq7rECqAelz7ECqAfnnbECqAfonbECqAeD9rECqAf507ECqAfJ2rECqAep4LECqAeo0huoB7HcG6gHsJuxAqgH_bKxAqgHyM-xAqgHyc-xAqgH_NWxAqgH-9WxAqgHjNaxAqgHi9axAqgHmuKxAqgHm-KxAqgHnuqxAqgHn-qxAqgH-OuxAqgHvOqxAqgH_K-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_YmJjPWMwNTcyMyZnYWRfc291cmNlPTImZ2FkX2NhbXBhaWduaWQ9MjQzNzgyOTkxNzSwDreb45gZuBP___________8BsBQBwBWBgIBA0BUB2BUB4hYCCAGAFwGKFxgIAxgBIAEoATABOAFAAUgBUAFYAWACaAGgFwGpF8MYQH5puZIvuhcGKAAwADgB0BgB8BgBwhkCCAE&ase=2&gclid=Cj0KCQiA5NXXBhDEARIsABAJhdL4ICrxBzZ6xk-ZQZ32m0nKfviDFmNFgaPm1Heb4vAGcTMV0GVYdokaAu91EALw_wcB&num=1&cid=CAESpQHg9sTPH40sSji1g8NHAB8PnRkS1oXKrPWNxrXWZ-8nra-iYllidXk5R04x8haApT2CGIRLiQ6DAkTkWCMmkmQWWR0OdQMsMwoaGDdCoXXBPzPHXEJoTPpcAbNDgl0YVMqp-RKV3ln3EbdNK-nVDpXblBCgd0q9t9ct2fHwnZhz5n4AnyUWovmMysCgyl8EcToFTLXNmhDkbSefHKqb8sJmaEww8u0&sig=AOD64_1kguCYlC3TPBP-3YZUrhlufJCoWA&ms=%5BCLICK_MS%5D&nb=8&nx=%5BNX%5D&ny=%5BNY%5D&dim=%5BDIM%5D

Sharing

Behavioral task

behavioral1

Sample

https://www.googleadservices.com/pagead/aclk?sa=L&ai=CFgwtFmr2as7-BaSJ-L4PpfydqQb68uPxigGHj4mEsRZkEAEgAGDJ3oWN5KTAE4IBF2NhLXB1Yi02MjE5ODExNzQ3MDQ5MzcxoAHW6sGWPqkCgZk-vQwcgT6oAwTIAwqqBLsDT9D0gagL_CM9GATBsRZeBY0OfPeA3aWegq6bQDiBB5xMlrJmeN-IXEWSyGIDrRDB4gk3PSI6dgdLAaY5Ej8TIpGrG-FG4lbjAPqh7fa6-iCXaPAS5erq6_OQ4JjAu6dVHwxXxZYSt6ikSvViM3eLLyNFbXOwVaKN6iKtbgMkk29hAcy0p00PzdDstgUySR7NeWbPd5-zXFxy6cGPRZ2D2K5r3kolGKmm_KTMxM48He4K7ECPeepM1k3ySHfse04JgdrcbKnMpQLX7t9jS905be_D6_vVdMpSfSbSQESW13_z68Kxc0nfGgGR7BiTFdeuay500W-m6ab06XIGsDcLDuxReyBKGZGfGIhTXeDC8W8hI8h-PyvG5pqMDnfzCEQ29WEwXSSNP8pbXEjSOnCWVSDa8s4e5Oke9Xp03Zi_bLlgFIafuKGgc8yIw9jFNujr2gmjOgk4y7Xc-gXDZW4uYzmX4ELnQiPZWw9ngmIVdE37jfWdMHAAwTFnqihtYMdSeTPik12uBNeuEgoF534nhnbofgyWO3LQqLIF2gxYnBA79G8ovfrPRn7aT5HhrPlbmTbcymDNb9uq8Z-IBaamvehakgUKCBNoAnirxf-BGaAGpAGAB9aikvYYiAcBkAcCqAfq7rECqAelz7ECqAfnnbECqAfonbECqAeD9rECqAf507ECqAfJ2rECqAep4LECqAeo0huoB7HcG6gHsJuxAqgH_bKxAqgHyM-xAqgHyc-xAqgH_NWxAqgH-9WxAqgHjNaxAqgHi9axAqgHmuKxAqgHm-KxAqgHnuqxAqgHn-qxAqgH-OuxAqgHvOqxAqgH_K-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_YmJjPWMwNTcyMyZnYWRfc291cmNlPTImZ2FkX2NhbXBhaWduaWQ9MjQzNzgyOTkxNzSwDreb45gZuBP___________8BsBQBwBWBgIBA0BUB2BUB4hYCCAGAFwGKFxgIAxgBIAEoATABOAFAAUgBUAFYAWACaAGgFwGpF8MYQH5puZIvuhcGKAAwADgB0BgB8BgBwhkCCAE&ase=2&gclid=Cj0KCQiA5NXXBhDEARIsABAJhdL4ICrxBzZ6xk-ZQZ32m0nKfviDFmNFgaPm1Heb4vAGcTMV0GVYdokaAu91EALw_wcB&num=1&cid=CAESpQHg9sTPH40sSji1g8NHAB8PnRkS1oXKrPWNxrXWZ-8nra-iYllidXk5R04x8haApT2CGIRLiQ6DAkTkWCMmkmQWWR0OdQMsMwoaGDdCoXXBPzPHXEJoTPpcAbNDgl0YVMqp-RKV3ln3EbdNK-nVDpXblBCgd0q9t9ct2fHwnZhz5n4AnyUWovmMysCgyl8EcToFTLXNmhDkbSefHKqb8sJmaEww8u0&sig=AOD64_1kguCYlC3TPBP-3YZUrhlufJCoWA&ms=%5BCLICK_MS%5D&nb=8&nx=%5BNX%5D&ny=%5BNY%5D&dim=%5BDIM%5D

Resource

win10v2004-20260911-en

windows10-2004-x64

10 signatures

150 seconds

discovery

General

Target
https://www.googleadservices.com/pagead/aclk?sa=L&ai=CFgwtFmr2as7-BaSJ-L4PpfydqQb68uPxigGHj4mEsRZkEAEgAGDJ3oWN5KTAE4IBF2NhLXB1Yi02MjE5ODExNzQ3MDQ5MzcxoAHW6sGWPqkCgZk-vQwcgT6oAwTIAwqqBLsDT9D0gagL_CM9GATBsRZeBY0OfPeA3aWegq6bQDiBB5xMlrJmeN-IXEWSyGIDrRDB4gk3PSI6dgdLAaY5Ej8TIpGrG-FG4lbjAPqh7fa6-iCXaPAS5erq6_OQ4JjAu6dVHwxXxZYSt6ikSvViM3eLLyNFbXOwVaKN6iKtbgMkk29hAcy0p00PzdDstgUySR7NeWbPd5-zXFxy6cGPRZ2D2K5r3kolGKmm_KTMxM48He4K7ECPeepM1k3ySHfse04JgdrcbKnMpQLX7t9jS905be_D6_vVdMpSfSbSQESW13_z68Kxc0nfGgGR7BiTFdeuay500W-m6ab06XIGsDcLDuxReyBKGZGfGIhTXeDC8W8hI8h-PyvG5pqMDnfzCEQ29WEwXSSNP8pbXEjSOnCWVSDa8s4e5Oke9Xp03Zi_bLlgFIafuKGgc8yIw9jFNujr2gmjOgk4y7Xc-gXDZW4uYzmX4ELnQiPZWw9ngmIVdE37jfWdMHAAwTFnqihtYMdSeTPik12uBNeuEgoF534nhnbofgyWO3LQqLIF2gxYnBA79G8ovfrPRn7aT5HhrPlbmTbcymDNb9uq8Z-IBaamvehakgUKCBNoAnirxf-BGaAGpAGAB9aikvYYiAcBkAcCqAfq7rECqAelz7ECqAfnnbECqAfonbECqAeD9rECqAf507ECqAfJ2rECqAep4LECqAeo0huoB7HcG6gHsJuxAqgH_bKxAqgHyM-xAqgHyc-xAqgH_NWxAqgH-9WxAqgHjNaxAqgHi9axAqgHmuKxAqgHm-KxAqgHnuqxAqgHn-qxAqgH-OuxAqgHvOqxAqgH_K-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_YmJjPWMwNTcyMyZnYWRfc291cmNlPTImZ2FkX2NhbXBhaWduaWQ9MjQzNzgyOTkxNzSwDreb45gZuBP___________8BsBQBwBWBgIBA0BUB2BUB4hYCCAGAFwGKFxgIAxgBIAEoATABOAFAAUgBUAFYAWACaAGgFwGpF8MYQH5puZIvuhcGKAAwADgB0BgB8BgBwhkCCAE&ase=2&gclid=Cj0KCQiA5NXXBhDEARIsABAJhdL4ICrxBzZ6xk-ZQZ32m0nKfviDFmNFgaPm1Heb4vAGcTMV0GVYdokaAu91EALw_wcB&num=1&cid=CAESpQHg9sTPH40sSji1g8NHAB8PnRkS1oXKrPWNxrXWZ-8nra-iYllidXk5R04x8haApT2CGIRLiQ6DAkTkWCMmkmQWWR0OdQMsMwoaGDdCoXXBPzPHXEJoTPpcAbNDgl0YVMqp-RKV3ln3EbdNK-nVDpXblBCgd0q9t9ct2fHwnZhz5n4AnyUWovmMysCgyl8EcToFTLXNmhDkbSefHKqb8sJmaEww8u0&sig=AOD64_1kguCYlC3TPBP-3YZUrhlufJCoWA&ms=%5BCLICK_MS%5D&nb=8&nx=%5BNX%5D&ny=%5BNY%5D&dim=%5BDIM%5D
Sample261113-b3lz8aev9x

Sharing

General

Malware Config

Signatures

File Explorer