MB-6941fbafdf1c7e5ddd12b9050c27501aba8b0ab05e1916afffd21ba30257ebf8
high
📛 Threat Title
Unknown: pfbofa.zip
Description
File type: zip. Size: 64105 bytes. Tags: PureRAT, zgRAT, zip. Reporter: k3dg3. First seen: 2026-08-04 22:16:48.
Indicators of Compromise (3)
Each indicator is enriched from the IOC database, threat-intel feed corroboration (Threat Hunt) and VirusTotal. Click one to expand.
hash_sha256
6941fbafdf1c7e5ddd12b9050c27501aba8b0ab05e1916afffd21ba30257ebf8
IOC database
- Type
- hash_sha256
- Value
6941fbafdf1c7e5ddd12b9050c27501aba8b0ab05e1916afffd21ba30257ebf8- First seen
- Last seen
- Attached to this threat
- Appears in
- 1 threat
- Description
- Unknown
Threat Hunt — feed corroboration
Not present in any configured threat-intel feed.
Details From VirusTotal
No VirusTotal details cached for this IOC. Open the IOC page to query VirusTotal.
hash_sha1
0c4891b76bc605a064b84e1ae37c25c3f1bfb82e
IOC database
- Type
- hash_sha1
- Value
0c4891b76bc605a064b84e1ae37c25c3f1bfb82e- First seen
- Last seen
- Attached to this threat
- Appears in
- 1 threat
Threat Hunt — feed corroboration
Not present in any configured threat-intel feed.
Details From VirusTotal
No VirusTotal details cached for this IOC. Open the IOC page to query VirusTotal.
hash_md5
3206acc6fc88ef09cf845f65e9965484
IOC database
- Type
- hash_md5
- Value
3206acc6fc88ef09cf845f65e9965484- First seen
- Last seen
- Attached to this threat
- Appears in
- 1 threat
Threat Hunt — feed corroboration
Not present in any configured threat-intel feed.
Details From VirusTotal
No VirusTotal details cached for this IOC. Open the IOC page to query VirusTotal.
References (1)
-
MalwareBazaar sample page
Abuse.ch
File type: zip. Size: 64105 bytes. Tags: PureRAT, zgRAT, zip. Reporter: k3dg3. First seen: 2026-08-04 22:16:48.
Remediations (10)
-
web:cyberreplay.com
This guidance focuses on 7-zip rce mitigation and practical steps that reduce the attack surface quickly. For hands-on support to run a focused 24-72 hour remediation plan, choose a next step now: Book a free security assessment, Schedule a 15-minute intake, or Request managed response.
-
web:cybersecuritynews.com
A newly disclosed vulnerability in 7-Zip, one of the most widely used open-source file archiving tools, could allow remote attackers to execute arbitrary code on affected systems.
-
web:learn.microsoft.com
Learn how to deal with unwanted mitigations in Windows Security, including a process to remove all mitigations and import a baseline configuration file instead.
-
web:learn.microsoft.com
Remediate security weaknesses discovered through security recommendations, and create exceptions if needed, in Defender Vulnerability Management.
-
web:panorays.com
Discover the difference between remediation and mitigation in risk management and how each strategy impacts security and resilience.
-
web:www.cve.news
A critical vulnerability has recently been discovered in 7-Zip, a widely used open-source file archiver. This vulnerability, tracked as CVE-2025-0411 (also known as ZDI-CAN-25456), allows remote attackers to bypass the Mark-of-the-Web (MotW) security mechanism on Windows systems. This post will explain,
-
web:www.environmentenergyleader.com
PFAS contamination is now a regulated, litigated, and expensive problem for water systems, wastewater utilities, landfills, manufacturers, and property owners alike. Here's what makes these chemicals different, where liability comes from, what drives remediation cost, and which treatment technologies work — and which claims deserve skepticism.
-
web:www.microsoft.com
Microsoft Threat Intelligence identified an active multi-stage intrusion campaign targeting hospitality organizations in Europe and Asia. The campaign uses photo-themed ZIP archives and fake image shortcut files to deliver a persistent Node.js implant and evade detection.
-
web:www.sciencedirect.com
To address health and environmental impacts, effective management must strike a balance between cost-effectiveness and practicality. This review aims to address critical gaps in PFAS remediation technologies, particularly regarding environmental impact, scalability, and cost-effectiveness.
-
web:www.sentinelone.com
CVE-2026-58052 is an information disclosure vulnerability in 7-Zip. Learn about its impact, affected versions, and mitigation methods.
AI Forensic Analysis
Only Available for Registered Users. Sign in to view.