MB-b4647c8851c316988984a6c6d534f103a0cd65e5f165f8aaaa9da8b0a7f28854
high
📛 Threat Title
Unknown: file
Description
File type: exe. Size: 38630400 bytes. Tags: 54e64e, dropped-by-Amadey, exe. Reporter: Bitsight. First seen: 2026-08-04 23:41:30.
Indicators of Compromise (4)
Each indicator is enriched from the IOC database, threat-intel feed corroboration (Threat Hunt) and VirusTotal. Click one to expand.
hash_sha256
b4647c8851c316988984a6c6d534f103a0cd65e5f165f8aaaa9da8b0a7f28854
IOC database
- Type
- hash_sha256
- Value
b4647c8851c316988984a6c6d534f103a0cd65e5f165f8aaaa9da8b0a7f28854- First seen
- Last seen
- Attached to this threat
- Appears in
- 1 threat
- Description
- Unknown
Threat Hunt — feed corroboration
Not present in any configured threat-intel feed.
Details From VirusTotal
No VirusTotal details cached for this IOC. Open the IOC page to query VirusTotal.
hash_sha1
3fe31d67c6c22ae20abc32237697fcb6f9bf122e
IOC database
- Type
- hash_sha1
- Value
3fe31d67c6c22ae20abc32237697fcb6f9bf122e- First seen
- Last seen
- Attached to this threat
- Appears in
- 1 threat
Threat Hunt — feed corroboration
Not present in any configured threat-intel feed.
Details From VirusTotal
No VirusTotal details cached for this IOC. Open the IOC page to query VirusTotal.
hash_md5
0a537502a50dc17582ca318676f5e7f0
IOC database
- Type
- hash_md5
- Value
0a537502a50dc17582ca318676f5e7f0- First seen
- Last seen
- Attached to this threat
- Appears in
- 1 threat
Threat Hunt — feed corroboration
Not present in any configured threat-intel feed.
Details From VirusTotal
No VirusTotal details cached for this IOC. Open the IOC page to query VirusTotal.
hash_imphash
e2bf3ea500ed6add4b896d96c842dc0a
IOC database
- Type
- hash_imphash
- Value
e2bf3ea500ed6add4b896d96c842dc0a- First seen
- Last seen
- Attached to this threat
- Appears in
- 1 threat
Threat Hunt — feed corroboration
Not present in any configured threat-intel feed.
Details From VirusTotal
No VirusTotal details cached for this IOC. Open the IOC page to query VirusTotal.
References (1)
-
MalwareBazaar sample page
Abuse.ch
File type: exe. Size: 38630400 bytes. Tags: 54e64e, dropped-by-Amadey, exe. Reporter: Bitsight. First seen: 2026-08-04 23:41:30.
Remediations (9)
-
web:learn.microsoft.com
Remediation actions can include removing a file , sending it to quarantine, or allowing it to remain. This article includes information and links to resources about specifying what actions should be taken when threats are detected on devices. You can choose from several methods, such as: Configure remediation for Microsoft Defender Antivirus ...
-
web:learn.microsoft.com
Microsoft Defender Vulnerability Management allows you to remediate vulnerabilities discovered in your environment through actionable security recommendations. You can create remediation requests that your IT administrator team can use to remediate vulnerabilities using Microsoft Intune.
-
web:panorays.com
Discover the difference between remediation and mitigation in risk management and how each strategy impacts security and resilience.
-
web:www.bugcrowd.com
Mitigation solutions include isolating a set of vulnerable resources from the rest of the network with segmentation, temporarily disabling an application, or blocking a port that could provide access to a vulnerable resource. Your choice usually isn't a straightforward either/or decision between vulnerability remediation and mitigation .
-
web:www.cisa.gov
General Mitigation Guidance Restrict or Discontinue Use of FTP and Telnet Services The FTP and Telnet protocols transmit credentials in cleartext, which are susceptible to being intercepted. To mitigate this risk, discontinue FTP and Telnet services by moving to more secure file storage/ file transfer and remote access services.
-
web:www.crowdstrike.com
Here, we can see the details of the remediation actions, such as any files quarantined, processes killed, and registry values deleted. We can also release any quarantined files as well. When we navigate to remediation , a list of all the remediation activities across the entire organization is available.
-
web:www.majorgeeks.com
How to Fix Windows Defender Remediation Incomplete From an Application If the file in question is from an installed program, you can allow it, as mentioned above, or uninstall the application if you don't need it.
-
web:www.rapid7.com
Automation can be a big help in effective vulnerability management, both when it comes to remediation and mitigation . For remediation , you'll want to adopt a vulnerability management solution, like Rapid7's InsightVM, that eliminates the need for manual reporting, complex spreadsheets, and confusing back-and-forth email tags.
-
web:www.sonicwall.com
NOTE: The "Last Download Date" indicates when the preferences file was last downloaded (via MySonicWall or firewall UI) or is blank if the date is unknown . If the file was not downloaded on any specified date by the administrator, please take immediate action and follow the remediation steps outlined in the articles.
AI Forensic Analysis
Only Available for Registered Users. Sign in to view.