hxxps://mega[.]nz/file/xKtQQSya#LBQWJ_2telE1umgut0HGotroklD7UQ26UrLd2kYzUOM | Triage™

Login
Reports

Overview

overview

9

Static

static

1

URLScan

urlscan

https://mega.nz/file...

windows11-21h2-x64

9

Sharing

Copy URL Twitter E-mail

General

Target
https://mega.nz/file/xKtQQSya#LBQWJ_2telE1umgut0HGotroklD7UQ26UrLd2kYzUOM
Sample260708-x2eemsgv9w

Score

9^/10

defense_evasion discovery ransomware

Static task

static1

URLScan task

urlscan1

Behavioral task

behavioral1

Sample

https://mega.nz/file/xKtQQSya#LBQWJ_2telE1umgut0HGotroklD7UQ26UrLd2kYzUOM

Resource

win11-20260513-en

windows11-21h2-x64

20 signatures

900 seconds

defense_evasion discovery ransomware

Malware Config

Targets

- Target
  https://mega.nz/file/xKtQQSya#LBQWJ_2telE1umgut0HGotroklD7UQ26UrLd2kYzUOM
Score

9^/10

defense_evasion discovery ransomware
- Looks for VirtualBox Guest Additions in registry
  defense_evasion
- Looks for VMWare Tools registry key
  defense_evasion
- Executes dropped EXE
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral1

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Subvert Trust Controls

SIP and Trust Provider Hijacking

Virtualization/Sandbox Evasion

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Time Discovery

Virtualization/Sandbox Evasion

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

urlscan1

behavioral1

defense_evasiondiscoveryransomware

© 2018-2026

Terms | Privacy