hxxps://www[.]mediafire[.]com/file/pfxpcqrssrvi4h4/file | Triage™

Login
Reports

Overview

overview

9

Static

static

1

URLScan

urlscan

1

https://www.mediafir...

windows11-21h2-x64

9

Sharing

Copy URL Twitter E-mail

General

Target
https://www.mediafire.com/file/pfxpcqrssrvi4h4/file
Sample260809-scy1jaba46

Score

9^/10

defense_evasion discovery execution

Static task

static1

URLScan task

urlscan1

Behavioral task

behavioral1

Sample

https://www.mediafire.com/file/pfxpcqrssrvi4h4/file

Resource

win11-20260513-en

windows11-21h2-x64

25 signatures

300 seconds

defense_evasion discovery execution

Malware Config

Targets

- Target
  https://www.mediafire.com/file/pfxpcqrssrvi4h4/file
Score

9^/10

defense_evasion discovery execution
- Enumerates VirtualBox registry keys
  defense_evasion
- Identifies VirtualBox via ACPI registry values (likely anti-VM)
  defense_evasion
- Looks for VirtualBox Guest Additions in registry
  defense_evasion
- Looks for VMWare Tools registry key
  defense_evasion
- Executes dropped EXE
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
- Executes a VBScript file via the Windows Script Host.
  execution
behavioral1

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

Visual Basic

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

Credential Access

Discovery

Browser Information Discovery

Peripheral Device Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

System Time Discovery

Virtualization/Sandbox Evasion

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

urlscan1

behavioral1

defense_evasiondiscoveryexecution

© 2018-2026

Terms | Privacy