hxxp://magnet?xt=urn[:]btih[:]5B3E623F443BB241FF978CD4F42418B20494CC01&dn=Spider-Man+Brand+New+Day+2026+CAM+H264-OnlyFlix&tr=http%3A%2F%2Fp4p[.]arenabg[.]com%3A1337%2Fannounce&tr=udp%3A%2F%2F47[.]ip-51-68-199[.]eu%3A6969%2Fannounce&tr=udp%3A%2F%2F9[.]rarbg[.]me%3A2780%2Fannounce&tr=udp%3A%2F%2F9[.]rarbg[.]to%3A2710%2Fannounce&tr=udp%3A%2F%2F9[.]rarbg[.]to%3A2730%2Fannounce&tr=udp%3A%2F%2F9[.]rarbg[.]to%3A2920%2Fannounce&tr=udp%3A%2F%2Fopen[.]stealth[.]si%3A80%2Fannounce&tr=udp%3A%2F%2Fopentracker[.]i2p[.]rocks%3A6969%2Fannounce&tr=udp%3A%2F%2Ftracker[.]coppersurfer[.]tk%3A6969%2Fannounce&tr=udp%3A%2F%2Ftracker[.]cyberia[.]is%3A6969%2Fannounce&tr=udp%3A%2F%2Ftracker[.]dler[.]org%3A6969%2Fannounce&tr=udp%3A%2F%2Ftracker[.]internetwarriors[.]net%3A1337%2Fannounce&tr=udp%3A%2F%2Ftracker[.]leechers-paradise[.]org%3A6969%2Fannounce&tr=udp%3A%2F%2Ftracker[.]openbittorrent[.]com%3A6969%2Fannounce&tr=udp%3A%2F%2Ftracker[.]opentrackr[.]org%3A1337&tr=udp%3A%2F%2Ftracker[.]pirateparty[.]gr%3A6969%2Fannounce&tr=udp%3A%2F%2Ftracker[.]tiny-vps[.]com%3A6969%2Fannounce&tr=udp%3A%2F%2Ftracker[.]torrent[.]eu[.]org%3A451%2Fannounce

General

Target
http://magnet?xt=urn:btih:5B3E623F443BB241FF978CD4F42418B20494CC01&dn=Spider-Man+Brand+New+Day+2026+CAM+H264-OnlyFlix&tr=http%3A%2F%2Fp4p.arenabg.com%3A1337%2Fannounce&tr=udp%3A%2F%2F47.ip-51-68-199.eu%3A6969%2Fannounce&tr=udp%3A%2F%2F9.rarbg.me%3A2780%2Fannounce&tr=udp%3A%2F%2F9.rarbg.to%3A2710%2Fannounce&tr=udp%3A%2F%2F9.rarbg.to%3A2730%2Fannounce&tr=udp%3A%2F%2F9.rarbg.to%3A2920%2Fannounce&tr=udp%3A%2F%2Fopen.stealth.si%3A80%2Fannounce&tr=udp%3A%2F%2Fopentracker.i2p.rocks%3A6969%2Fannounce&tr=udp%3A%2F%2Ftracker.coppersurfer.tk%3A6969%2Fannounce&tr=udp%3A%2F%2Ftracker.cyberia.is%3A6969%2Fannounce&tr=udp%3A%2F%2Ftracker.dler.org%3A6969%2Fannounce&tr=udp%3A%2F%2Ftracker.internetwarriors.net%3A1337%2Fannounce&tr=udp%3A%2F%2Ftracker.leechers-paradise.org%3A6969%2Fannounce&tr=udp%3A%2F%2Ftracker.openbittorrent.com%3A6969%2Fannounce&tr=udp%3A%2F%2Ftracker.opentrackr.org%3A1337&tr=udp%3A%2F%2Ftracker.pirateparty.gr%3A6969%2Fannounce&tr=udp%3A%2F%2Ftracker.tiny-vps.com%3A6969%2Fannounce&tr=udp%3A%2F%2Ftracker.torrent.eu.org%3A451%2Fannounce
Sample260804-bkyw3aek6v

Score

8^/10

Malware Config

Targets

- Target
  http://magnet?xt=urn:btih:5B3E623F443BB241FF978CD4F42418B20494CC01&dn=Spider-Man+Brand+New+Day+2026+CAM+H264-OnlyFlix&tr=http%3A%2F%2Fp4p.arenabg.com%3A1337%2Fannounce&tr=udp%3A%2F%2F47.ip-51-68-199.eu%3A6969%2Fannounce&tr=udp%3A%2F%2F9.rarbg.me%3A2780%2Fannounce&tr=udp%3A%2F%2F9.rarbg.to%3A2710%2Fannounce&tr=udp%3A%2F%2F9.rarbg.to%3A2730%2Fannounce&tr=udp%3A%2F%2F9.rarbg.to%3A2920%2Fannounce&tr=udp%3A%2F%2Fopen.stealth.si%3A80%2Fannounce&tr=udp%3A%2F%2Fopentracker.i2p.rocks%3A6969%2Fannounce&tr=udp%3A%2F%2Ftracker.coppersurfer.tk%3A6969%2Fannounce&tr=udp%3A%2F%2Ftracker.cyberia.is%3A6969%2Fannounce&tr=udp%3A%2F%2Ftracker.dler.org%3A6969%2Fannounce&tr=udp%3A%2F%2Ftracker.internetwarriors.net%3A1337%2Fannounce&tr=udp%3A%2F%2Ftracker.leechers-paradise.org%3A6969%2Fannounce&tr=udp%3A%2F%2Ftracker.openbittorrent.com%3A6969%2Fannounce&tr=udp%3A%2F%2Ftracker.opentrackr.org%3A1337&tr=udp%3A%2F%2Ftracker.pirateparty.gr%3A6969%2Fannounce&tr=udp%3A%2F%2Ftracker.tiny-vps.com%3A6969%2Fannounce&tr=udp%3A%2F%2Ftracker.torrent.eu.org%3A451%2Fannounce
Score

8^/10

defense_evasion discovery installer persistence privilege_escalation spyware stealer trojan
- Downloads MZ/PE file
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Event Triggered Execution: Component Object Model Hijacking
  Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
  persistence privilege_escalation
- Executes dropped EXE
- Loads dropped DLL
- Reads user/profile data of web browsers
  Infostealers often target stored browser data, which can include saved credentials etc.
  spyware stealer
- Checks for any installed AV software in registry
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
behavioral1