MB-2f5ba2bc8b14a1d079562a15eb49011bb30c81d504116a4609b988902c3f75a6
high
📛 Threat Title
Unknown: dfa49d8d4dcf8c59e923badb63607636.exe
Description
File type: exe. Size: 817664 bytes. Tags: exe. Reporter: abuse_ch. First seen: 2026-11-08 11:00:11.
Indicators of Compromise (4)
Each indicator is enriched from the IOC database, threat-intel feed corroboration (Threat Hunt) and VirusTotal. Click one to expand.
hash_imphash
f34d5f2d4577ed6d9ceec516c1f5a744
IOC database
- Type
- hash_imphash
- Value
f34d5f2d4577ed6d9ceec516c1f5a744- First seen
- Last seen
- Attached to this threat
- Appears in
- 1382 threats
- Description
- imphash of URLhaus payload 61d424c2e3c5d8db…
Threat Hunt — feed corroboration
Not present in any configured threat-intel feed.
Details From VirusTotal
No VirusTotal details cached for this IOC. Open the IOC page to query VirusTotal.
hash_sha256
2f5ba2bc8b14a1d079562a15eb49011bb30c81d504116a4609b988902c3f75a6
IOC database
- Type
- hash_sha256
- Value
2f5ba2bc8b14a1d079562a15eb49011bb30c81d504116a4609b988902c3f75a6- First seen
- Last seen
- Attached to this threat
- Appears in
- 1 threat
- Description
- Unknown
Threat Hunt — feed corroboration
Not present in any configured threat-intel feed.
Details From VirusTotal
No VirusTotal details cached for this IOC. Open the IOC page to query VirusTotal.
hash_sha1
750cdedcc063d510611ef2199e05b4e142351b3c
IOC database
- Type
- hash_sha1
- Value
750cdedcc063d510611ef2199e05b4e142351b3c- First seen
- Last seen
- Attached to this threat
- Appears in
- 1 threat
Threat Hunt — feed corroboration
Not present in any configured threat-intel feed.
Details From VirusTotal
No VirusTotal details cached for this IOC. Open the IOC page to query VirusTotal.
hash_md5
dfa49d8d4dcf8c59e923badb63607636
IOC database
- Type
- hash_md5
- Value
dfa49d8d4dcf8c59e923badb63607636- First seen
- Last seen
- Attached to this threat
- Appears in
- 1 threat
Threat Hunt — feed corroboration
Not present in any configured threat-intel feed.
Details From VirusTotal
No VirusTotal details cached for this IOC. Open the IOC page to query VirusTotal.
References (1)
-
MalwareBazaar sample page
Abuse.ch
File type: exe. Size: 817664 bytes. Tags: exe. Reporter: abuse_ch. First seen: 2026-11-08 11:00:11.
Remediations (10)
-
web:learn.microsoft.com
Here are a few steps you can take to try to identify and deal with the unknown app in Windows 11: Check Task Manager: Right-click on the taskbar and select Task Manager. Look for any unfamiliar processes in the Processes tab. Right-click on these processes and select Open File Location to determine their source. Scan for malware:
-
web:learn.microsoft.com
I'm running into a problem with securing windows 11 23r2 systems and wanted to know if there is a workaround for the following issue: Security Context: CVE-2013-1609 CVE-2014-0759 CVE-2014-5455 Nessus found the following service with an untrusted…
-
web:malwaretips.com
This guide teaches you how to remove Unknown .exe virus for free by following easy step-by-step instructions.
-
web:malwaretips.com
This guide teaches you how to remove Unknown ransomware virus for free by following easy step-by-step instructions.
-
web:superuser.com
The CDPUserSvc is a legitimate MS Windows Service. As for the random code appended, e.g. _405bc, this is a copy of the same Windows Service without the suffix. MS has added these "shadow" copies as a "security" measure (and incidentally to make user management of these services more difficult). An example, the shadow of Windows OneSyncSvc, is shown below. Since the suffix may change on reboot ...
-
web:support.microsoft.com
Solve problems with detecting and removing malware with Windows Security, including incomplete scans, detection errors, and persistent malware.
-
web:www.microsoft.com
The ClickFix social engineering technique has been growing in popularity, with campaigns targeting thousands of enterprise and end-user devices daily. This technique exploits users' tendency to resolve technical issues by tricking them into running malicious commands. These commands, in turn, deliver payloads that ultimately lead to information theft and exfiltration.
-
web:www.microsoft.com
An active campaign is impersonating legitimate software vendors to deliver malware through look-alike download pages and regenerated installer archives. Microsoft Defender Experts shares observed attack techniques, Defender XDR detections, indicators of compromise, and practical mitigations to help organizations identify, block, and respond to this threat.
-
web:www.reddit.com
When SentinelOne mitigated a threat, but you don't understand if it is an ongoing concern, then what?
-
web:www.virustotal.com
VirusTotal Assistant Bot offers a platform for users to interact with VirusTotal's threat intelligence suite and explore artifact-related information effectively.
AI Forensic Analysis
Only Available for Registered Users. Sign in to view.