Overview

overview

7

Static

static

1

URLScan

urlscan

https://www.google.c...

windows11-21h2-x64

7

Resubmissions

07/11/2026, 17:25

261107-vzc3pazxfs

07/11/2026, 17:19

261107-vv5bdazxdy10

07/11/2026, 15:44

261107-s6xdssdz5l10

07/11/2026, 15:38

261107-s3bb6acz5x7

07/11/2026, 15:28

261107-swqs9szsbw8

Sharing

Copy URL Twitter E-mail

General

  • Target
    https://www.google.com/search?q=scam+with+your+friends+torrent&client=firefox-b-d&hs=uSxq&sca_esv=56134f949e71eaf4&sxsrf=AKL5yDgtIZwXW5PkJtzWS8zp48MsYb_xbA%3A1794063802747&ei=uj3varqMLdnKwPAP8-TkyAg&biw=2560&bih=1355&uact=5&oq=scam+with+your+friends+torrent&gs_lp=Egxnd3Mtd2l6LXNlcnAiHnNjYW0gd2l0aCB5b3VyIGZyaWVuZHMgdG9ycmVudEjhMVANWI8XcAJ4AZABAJgBZaABkgaqAQM4LjGwAQC4AQPIAQD4AQGYAgWgApUCwgIHECMYsAMYJ8ICChAAGEcY1gQYsAPCAhcQLhjcBhi4BhjaBhjYAhjIAxiwA9gBAcICBBAjGCfCAgsQABiABBjLARi0B8ICCBAuGIAEGMsBwgIIEAAYgAQYywHCAgYQABgWGB7CAgUQABjvBZgDAOIDBBgAIF3iAwQYACBe4gMEGAAgX-IDBBgAIGDiAwQYACBh4gMEGAAgYogGAZAGDLoGBAgBGBmSBwE1oAfiFLIHATO4B40CwgcFMC4zLjLIBwyACAE&sclient=gws-wiz-serp
  • Sample261107-s3bb6acz5x
Score
7/10
defense_evasiondiscoveryexecution

Malware Config

Targets

    • Target
      https://www.google.com/search?q=scam+with+your+friends+torrent&client=firefox-b-d&hs=uSxq&sca_esv=56134f949e71eaf4&sxsrf=AKL5yDgtIZwXW5PkJtzWS8zp48MsYb_xbA%3A1794063802747&ei=uj3varqMLdnKwPAP8-TkyAg&biw=2560&bih=1355&uact=5&oq=scam+with+your+friends+torrent&gs_lp=Egxnd3Mtd2l6LXNlcnAiHnNjYW0gd2l0aCB5b3VyIGZyaWVuZHMgdG9ycmVudEjhMVANWI8XcAJ4AZABAJgBZaABkgaqAQM4LjGwAQC4AQPIAQD4AQGYAgWgApUCwgIHECMYsAMYJ8ICChAAGEcY1gQYsAPCAhcQLhjcBhi4BhjaBhjYAhjIAxiwA9gBAcICBBAjGCfCAgsQABiABBjLARi0B8ICCBAuGIAEGMsBwgIIEAAYgAQYywHCAgYQABgWGB7CAgUQABjvBZgDAOIDBBgAIF3iAwQYACBe4gMEGAAgX-IDBBgAIGDiAwQYACBh4gMEGAAgYogGAZAGDLoGBAgBGBmSBwE1oAfiFLIHATO4B40CwgcFMC4zLjLIBwyACAE&sclient=gws-wiz-serp
    Score
    7/10
    defense_evasiondiscoveryexecution

    • Executes dropped EXE

    • Indirect Command Execution

      Adversaries may abuse utilities that allow for command execution to bypass security restrictions that limit the use of command-line interpreters.

      defense_evasion

    • Loads dropped DLL

    • Drops file in System32 directory

    • Suspicious use of NtSetInformationThreadHideFromDebugger

      defense_evasion
    behavioral1

MITRE ATT&CK Enterprise v16

Tasks