hxxps://modsfire[.]com/34L3181tj00cV84 | Triage™

Login
Reports

Overview

overview

6

Static

static

1

URLScan

urlscan

1

https://modsfire.com...

windows11-21h2-x64

6

Resubmissions

12/06/2026, 23:50

260612-3vv2pscz4x4

12/06/2026, 23:46

260612-3sddwaev6p6

Sharing

Copy URL Twitter E-mail

General

Target
https://modsfire.com/34L3181tj00cV84
Sample260612-3sddwaev6p

Score

6^/10

google motw persistence phishing

Static task

static1

URLScan task

urlscan1

Behavioral task

behavioral1

Sample

https://modsfire.com/34L3181tj00cV84

Resource

win11-20260513-en

windows11-21h2-x64

10 signatures

300 seconds

google motw persistence phishing

Malware Config

Targets

- Target
  https://modsfire.com/34L3181tj00cV84
Score

6^/10

google motw persistence phishing
- Drops desktop.ini file(s)
- Mark of the Web detected: This indicates that the page was originally saved or cloned.
  phishing motw
- Detected potential entity reuse from brand GOOGLE.
  phishing google
behavioral1

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

urlscan1

behavioral1

googlemotwpersistencephishing

© 2018-2026

Terms | Privacy