MB-8f8239a8b0e30eca06fce80fbf744a596d3a74bbe53f3a14d26e090bd4541397
high
📛 Threat Title
Unknown: d-56364130-1079Ef-f.ps1
Description
File type: ps1. Size: 68265 bytes. Tags: 178-104-144-200, Arechclient2, AsgardProtector, dropped-by-ACRStealer, ps1, SectopRAT. Reporter: iamaachum. First seen: 2026-09-25 23:20:41.
Indicators of Compromise (3)
Each indicator is enriched from the IOC database, threat-intel feed corroboration (Threat Hunt) and VirusTotal. Click one to expand.
hash_sha256
8f8239a8b0e30eca06fce80fbf744a596d3a74bbe53f3a14d26e090bd4541397
IOC database
- Type
- hash_sha256
- Value
8f8239a8b0e30eca06fce80fbf744a596d3a74bbe53f3a14d26e090bd4541397- First seen
- Last seen
- Attached to this threat
- Appears in
- 1 threat
- Description
- Unknown
Threat Hunt — feed corroboration
Not present in any configured threat-intel feed.
Details From VirusTotal
No VirusTotal details cached for this IOC. Open the IOC page to query VirusTotal.
hash_sha1
95cef82171b638074cf4bd0e8a3f875e55db9841
IOC database
- Type
- hash_sha1
- Value
95cef82171b638074cf4bd0e8a3f875e55db9841- First seen
- Last seen
- Attached to this threat
- Appears in
- 1 threat
Threat Hunt — feed corroboration
Not present in any configured threat-intel feed.
Details From VirusTotal
No VirusTotal details cached for this IOC. Open the IOC page to query VirusTotal.
hash_md5
4160223ab42e6c414c2387ff33173a30
IOC database
- Type
- hash_md5
- Value
4160223ab42e6c414c2387ff33173a30- First seen
- Last seen
- Attached to this threat
- Appears in
- 1 threat
Threat Hunt — feed corroboration
Not present in any configured threat-intel feed.
Details From VirusTotal
No VirusTotal details cached for this IOC. Open the IOC page to query VirusTotal.
References (1)
-
MalwareBazaar sample page
Abuse.ch
File type: ps1. Size: 68265 bytes. Tags: 178-104-144-200, Arechclient2, AsgardProtector, dropped-by-ACRStealer, ps1, SectopRAT. Reporter: iamaachum. First seen: 2026-09-25 23:20:41.
Remediations (10)
-
web:github.com
A comprehensive collection of Microsoft Intune remediation scripts and configurations designed for enterprise endpoint management, device compliance enforcement, and automated system fixes. This repository provides production-ready PowerShell scripts that integrate seamlessly with Intune's remediation framework.
-
web:github.com
Intune related scripts and tings. Contribute to jamesvincent/Intune development by creating an account on GitHub.
-
web:learn.microsoft.com
Learn more about Remediations in Microsoft Intune, including what Remediations are and view any prerequisites and licensing requirements. Also, learn how to deploy built-in and custom remediation scripts, and learn how to monitor your scripts.
-
web:learn.microsoft.com
This table shows the script names, descriptions, detections, remediations , and configurable items. Script files whose names start with Detect are detection scripts. Remediation scripts start with Remediate. These scripts can be copied from the next section in this article.
-
web:scloud.work
When a proactive remediation script fails to work as expected, it's much faster to test it locally than wait for the next sync from Intune. In this post, I'll show you how I troubleshoot Intune remediation scripts directly on a Windows device. This includes script locations, relevant logs, and registry entries that help verify what happened and why. For some samples and an introduction to ...
-
web:techcommunity.microsoft.com
If you encounter policy conflicts, use PowerShell scripts in Microsoft Intune to resolve them.
-
web:www.cloudcook.ch
A way to automate the pain away with custom detection and remediation scripts, all lovingly shoved down to the endpoints via Intune. Welcome to Proactive Remediations — Intune's built-in scripting voodoo that lets you find and fix problems on autopilot, before users even realize something's broken (or have the chance to hysterically call IT ...
-
web:www.doppel.com
ClickFix scams turn fake CAPTCHAs and browser errors into malware delivery. Learn how the attack works, what to watch for, and how to respond.
-
web:www.linkedin.com
Intune remediation refers to the process of using Microsoft Intune to automatically detect and fix common issues on managed devices. This is achieved through remediation scripts, which consist of ...
-
web:www.systemcenterdudes.com
In this post, we will describe how to use Intune Remediation script with an example to uninstall an application based on detection script.
AI Forensic Analysis
Only Available for Registered Users. Sign in to view.