MB-e3bc0a8afab7b840f83795ad6c5fa64740c7a6bfc96603f9f60cf03cdbde5086
high
📛 Threat Title
Unknown: file
Description
File type: exe. Size: 2995712 bytes. Tags: 81a64890ca97bd87f0c9d35bc6501f4d, dropped-by-remus, exe. Reporter: Bitsight. First seen: 2026-08-04 20:12:40.
Indicators of Compromise (4)
Each indicator is enriched from the IOC database, threat-intel feed corroboration (Threat Hunt) and VirusTotal. Click one to expand.
hash_imphash
1799eb3c1092391ae174afa4eee4cba2
IOC database
- Type
- hash_imphash
- Value
1799eb3c1092391ae174afa4eee4cba2- First seen
- Last seen
- Attached to this threat
- Appears in
- 16 threats
- Description
- imphash of URLhaus payload 69fe1a8cedbbab36…
Threat Hunt — feed corroboration
Not present in any configured threat-intel feed.
Details From VirusTotal
No VirusTotal details cached for this IOC. Open the IOC page to query VirusTotal.
hash_sha256
e3bc0a8afab7b840f83795ad6c5fa64740c7a6bfc96603f9f60cf03cdbde5086
IOC database
- Type
- hash_sha256
- Value
e3bc0a8afab7b840f83795ad6c5fa64740c7a6bfc96603f9f60cf03cdbde5086- First seen
- Last seen
- Attached to this threat
- Appears in
- 1 threat
- Description
- Unknown
Threat Hunt — feed corroboration
Not present in any configured threat-intel feed.
Details From VirusTotal
No VirusTotal details cached for this IOC. Open the IOC page to query VirusTotal.
hash_sha1
39722cd4bc4bdb1b272355828bbd6386ef33dc72
IOC database
- Type
- hash_sha1
- Value
39722cd4bc4bdb1b272355828bbd6386ef33dc72- First seen
- Last seen
- Attached to this threat
- Appears in
- 1 threat
Threat Hunt — feed corroboration
Not present in any configured threat-intel feed.
Details From VirusTotal
No VirusTotal details cached for this IOC. Open the IOC page to query VirusTotal.
hash_md5
38df2c5ff5f25d476f3f06db9127ee16
IOC database
- Type
- hash_md5
- Value
38df2c5ff5f25d476f3f06db9127ee16- First seen
- Last seen
- Attached to this threat
- Appears in
- 1 threat
Threat Hunt — feed corroboration
Not present in any configured threat-intel feed.
Details From VirusTotal
No VirusTotal details cached for this IOC. Open the IOC page to query VirusTotal.
References (1)
-
MalwareBazaar sample page
Abuse.ch
File type: exe. Size: 2995712 bytes. Tags: 81a64890ca97bd87f0c9d35bc6501f4d, dropped-by-remus, exe. Reporter: Bitsight. First seen: 2026-08-04 20:12:40.
Remediations (9)
-
web:github.com
Configure remediation for Microsoft Defender Antivirus detections When Microsoft Defender Antivirus runs a scan, it attempts to remediate or remove threats that are detected. Remediation actions can include removing a file , sending it to quarantine, or allowing it to remain.
-
web:learn.microsoft.com
Remediation actions can include removing a file , sending it to quarantine, or allowing it to remain. This article includes information and links to resources about specifying what actions should be taken when threats are detected on devices. You can choose from several methods, such as: Configure remediation for Microsoft Defender Antivirus ...
-
web:learn.microsoft.com
Microsoft Defender Vulnerability Management allows you to remediate vulnerabilities discovered in your environment through actionable security recommendations. You can create remediation requests that your IT administrator team can use to remediate vulnerabilities using Microsoft Intune.
-
web:panorays.com
Discover the difference between remediation and mitigation in risk management and how each strategy impacts security and resilience.
-
web:www.bugcrowd.com
Mitigation solutions include isolating a set of vulnerable resources from the rest of the network with segmentation, temporarily disabling an application, or blocking a port that could provide access to a vulnerable resource. Your choice usually isn't a straightforward either/or decision between vulnerability remediation and mitigation .
-
web:www.cisa.gov
General Mitigation Guidance Restrict or Discontinue Use of FTP and Telnet Services The FTP and Telnet protocols transmit credentials in cleartext, which are susceptible to being intercepted. To mitigate this risk, discontinue FTP and Telnet services by moving to more secure file storage/ file transfer and remote access services.
-
web:www.crowdstrike.com
Here, we can see the details of the remediation actions, such as any files quarantined, processes killed, and registry values deleted. We can also release any quarantined files as well. When we navigate to remediation , a list of all the remediation activities across the entire organization is available.
-
web:www.isdecisions.com
FileAudit automates remediation and response to file access events. Run automated scripts to shut down a machine, log off a user, and more.
-
web:www.majorgeeks.com
How to Fix Windows Defender Remediation Incomplete From an Application If the file in question is from an installed program, you can allow it, as mentioned above, or uninstall the application if you don't need it.
AI Forensic Analysis
Only Available for Registered Users. Sign in to view.