Overview

overview

8

Static

static

1

URLScan

urlscan

1

https://www.divinex....

windows11-ltsc_2024-x64

8

Resubmissions

30/10/2026, 16:22

261030-tvhxps1s2j3

29/10/2026, 20:18

261029-y3qdzasydw8

29/10/2026, 20:17

261029-y2qncasycz3

29/10/2026, 13:08

261029-qc774azw6r8

28/10/2026, 20:37

261028-zd66vstx3n8

28/10/2026, 18:58

261028-xmtwsas19l8

28/10/2026, 14:15

261028-rkpama11bs8

28/10/2026, 13:06

261028-qcbh5a1xex8

27/10/2026, 20:51

261027-znakmsvt8q8

26/10/2026, 20:19

261026-y33pasbh288

Sharing

Copy URL Twitter E-mail

General

  • Target
    https://www.divinex.to:443/get.php?id=16
  • Sample261026-y33pasbh28
Score
8/10
discoverypersistenceransomwarespyware

Malware Config

Targets

    • Target
      https://www.divinex.to:443/get.php?id=16
    Score
    8/10
    discoverypersistenceransomwarespyware

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Accesses cryptocurrency files/wallets, possible credential harvesting

      spyware

    • Adds Run key to start application

      persistence

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

      discovery
    behavioral1

MITRE ATT&CK Enterprise v16

Tasks