s2
--:--:--UTC

Searching APEX

Starting…

  1. ○ Searching Threats, IOCs & Threat Intelligence locally
  2. ○ Querying external providers
  3. ○ Asking AI Forensic Validator
  4. ○ Creating new entry from validated hit

0s elapsed

MB-69f5515ff3f554233840ad2f2397b345f955013017a9ae14ed4e762f52d936af high

📛 Threat Title

Unknown: 2026420laclinicenc.exe

Category: Unknown Published: Source updated: First seen: Last updated: Source: Abuse.ch

Description

File type: exe. Size: 3295744 bytes. Tags: exe. Reporter: abuse_ch. First seen: 2026-05-14 15:07:09.

Indicators of Compromise (5)

Each indicator is enriched from the IOC database, threat-intel feed corroboration (Threat Hunt) and VirusTotal. Click one to expand.

domain 2026420laclinicenc.exe VT: VT base fetch failed: HTTPError: 429 Client Error: Too Many Requests for url: https://www.virustotal.com/api/v3/domains/2026420laclinicenc.exe

IOC database

Type
domain
Value
2026420laclinicenc.exe
First seen
Last seen
Attached to this threat
Appears in
1 threat
Description
Extracted from Threat MB-69f5515ff3f554233840ad2f2397b345f955013017a9ae14ed4e762f52d936af

Open the full IOC page →

Threat Hunt — feed corroboration

Not present in any configured threat-intel feed.

Details From VirusTotal

VirusTotal: VT base fetch failed: HTTPError: 429 Client Error: Too Many Requests for url: https://www.virustotal.com/api/v3/domains/2026420laclinicenc.exe

hash_imphash d42595b695fc008ef2c56aabd8efd68e

IOC database

Type
hash_imphash
Value
d42595b695fc008ef2c56aabd8efd68e
First seen
Last seen
Attached to this threat
Appears in
465 threats
Description
imphash of URLhaus payload a7b9f3dda435b7f2…

Open the full IOC page →

Threat Hunt — feed corroboration

Not present in any configured threat-intel feed.

Details From VirusTotal

No VirusTotal details cached for this IOC. Open the IOC page to query VirusTotal.

hash_sha256 69f5515ff3f554233840ad2f2397b345f955013017a9ae14ed4e762f52d936af VT 40 / 75 1 feed

IOC database

Type
hash_sha256
Value
69f5515ff3f554233840ad2f2397b345f955013017a9ae14ed4e762f52d936af
First seen
Last seen
Attached to this threat
Appears in
2 threats
Description
Unknown

Open the full IOC page →

Threat Hunt — feed corroboration

Listed by 1 threat-intel feed vendor: Abuse.ch. Open in Threat Hunt →

Flagged by 40 of 75 VirusTotal vendors

VendorVerdictDetection
AhnLab-V3 malicious Trojan/Win.Filecoder.C5850786
Alibaba malicious Ransom:Win64/NightSpire.4f4b7659
alibabacloud malicious Ransomware:Golang/Snatch.7o3a7bdD
ALYac malicious Generic.Ransom.Snatch.D60250B1
Antiy-AVL malicious HackTool[AVTool]/Win32.OnionMail.a
Arcabit malicious Generic.Ransom.Snatch.D60250B1
Avira malicious TR/W64.Evo
Bkav malicious W32.Malware.89027C44
CrowdStrike malicious win/malicious_confidence_100% (W)
CTX malicious exe.ransomware.snatch
Cylance malicious Unsafe
Cynet malicious Malicious (score: 99)
DrWeb malicious Trojan.Encoder.44953
Elastic malicious malicious (high confidence)
Emsisoft malicious Generic.Ransom.Snatch.D60250B1 (B)
ESET-NOD32 malicious WinGo/Filecoder.MK trojan
F-Secure malicious Trojan.TR/W64.Evo
Fortinet malicious W64/NSpire.BE4F!tr.ransom
GData malicious Generic.Ransom.Snatch.D60250B1
Google malicious Detected
Ikarus malicious Trojan-Ransom.FileCrypter
K7AntiVirus malicious Ransomware ( 005cdfa71 )
K7GW malicious Ransomware ( 005cdfa71 )
Kingsoft malicious Win32.Trojan-Ransom.Generic.a
Lionic malicious Trojan.Win32.Snatch.j!c
Malwarebytes malicious Malware.AI.2218816869
McAfeeD malicious ti!69F5515FF3F5
Microsoft malicious Ransom:Win64/NightSpire.A
MicroWorld-eScan malicious Generic.Ransom.Snatch.D60250B1
Paloalto malicious generic.ml
Rising malicious Ransom.Agent!8.6B7 (CLOUD)
Sophos malicious Mal/Generic-S
Symantec malicious ML.Attribute.HighConfidence
Tencent malicious Win32.Trojan-Ransom.Generic.Vgil
Trapmine malicious malicious.moderate.ml.score
TrendMicro-HouseCall malicious Ransom.Win64.SNATCH.TL0101EE26ZZ
Varist malicious W64/ABRansom.AKCK-1151
VBA32 malicious Trojan.Encoder
VIPRE malicious Generic.Ransom.Snatch.D60250B1
VirIT malicious Trojan.Win64.GenX.JQM

Details From VirusTotal

Basic Properties
MD520cb8d8216061545b0b31ec8bd5f42de
SHA-1ce56ec0bea8f53b7cc7f938226e96d8668c66611
SHA-25669f5515ff3f554233840ad2f2397b345f955013017a9ae14ed4e762f52d936af
VHash036096655d55551d15541az2e!z
SSDEEP49152:n02p9mOsLxN6NBYjwzb4/E9VQe61KxK9KVc5E:nUMNrzgSOE
TLSHT1E6E54C13FC9669ABC1AAE23189329152BA717C487B3123D72B50F7382F77BD059B9710
File typeWin32 EXE
File type tagpeexe
File extensionexe
MagicPE32+ executable (console) x86-64, for MS Windows
File size3.1 MB
History
First seen on VirusTotal2026-05-12 22:51 UTC
Last submission2026-05-12 22:51 UTC
Last analysis2026-05-30 07:19 UTC
Last modified on VirusTotal2026-05-30 09:25 UTC
Known Names
  • 69f5515ff3f554233840ad2f2397b345f955013017a9ae14ed4e762f52d936af.exe
  • 2026420laclinicenc.exe
  • 8d1q6bzuw.exe
hash_sha1 ce56ec0bea8f53b7cc7f938226e96d8668c66611 VT: VT base fetch failed: HTTPError: 429 Client Error: Too Many Requests for url: https://www.virustotal.com/api/v3/files/ce56ec0bea8f53b7cc7f938226e96d8668c66611
2 feeds

IOC database

Type
hash_sha1
Value
ce56ec0bea8f53b7cc7f938226e96d8668c66611
First seen
Last seen
Attached to this threat
Appears in
2 threats

Open the full IOC page →

Threat Hunt — feed corroboration

Listed by 2 threat-intel feed vendors: Abuse.ch, threatview.io. Open in Threat Hunt →

Details From VirusTotal

VirusTotal: VT base fetch failed: HTTPError: 429 Client Error: Too Many Requests for url: https://www.virustotal.com/api/v3/files/ce56ec0bea8f53b7cc7f938226e96d8668c66611

hash_md5 20cb8d8216061545b0b31ec8bd5f42de VT: VT base fetch failed: HTTPError: 429 Client Error: Too Many Requests for url: https://www.virustotal.com/api/v3/files/20cb8d8216061545b0b31ec8bd5f42de
2 feeds

IOC database

Type
hash_md5
Value
20cb8d8216061545b0b31ec8bd5f42de
First seen
Last seen
Attached to this threat
Appears in
2 threats

Open the full IOC page →

Threat Hunt — feed corroboration

Listed by 2 threat-intel feed vendors: Abuse.ch, threatview.io. Open in Threat Hunt →

Details From VirusTotal

VirusTotal: VT base fetch failed: HTTPError: 429 Client Error: Too Many Requests for url: https://www.virustotal.com/api/v3/files/20cb8d8216061545b0b31ec8bd5f42de

References (1)

  • MalwareBazaar sample page Abuse.ch

    File type: exe. Size: 3295744 bytes. Tags: exe. Reporter: abuse_ch. First seen: 2026-05-14 15:07:09.

Remediations (9)

  • How To Remove Unknown.exe Trojan (Virus Removal Guide)
    web:malwaretips.com

    This guide teaches you how to remove Unknown .exe virus for free by following easy step-by-step instructions.

  • How to Troubleshoot Intune Remediation Scripts Locally
    web:scloud.work

    When a proactive remediation script fails to work as expected, it's much faster to test it locally than wait for the next sync from Intune. In this post, I'll show you how I troubleshoot Intune remediation scripts directly on a Windows device. This includes script locations, relevant logs, and registry entries that help verify what […]

  • Fix problems that block programs from being installed or removed ...
    web:support.microsoft.com

    The Program Install and Uninstall troubleshooter helps you automatically repair issues when you're blocked from installing or removing programs.

  • Microsoft Patch Tuesday Fixes Notepad Markdown RCE CVE-2026-20841
    web:windowsforum.com

    Microsoft's February Patch Tuesday closed a dangerous loophole in the modern Notepad app that could let an attacker turn a simple Markdown (.md) file into a remote code execution (RCE) trap — a single click on a crafted link inside Notepad's Markdown view could launch unverified protocols and...

  • Dell.Remediation.Agent.exe keeps crashing
    web:www.dell.com

    About once a day I see in the Windows 11 Diagnostic Data viewer that the Dell. Remediation .Agent.exe program has crashed. No other problems detected. Do I need to worry about this and is there a fix...

  • Automated Malware Analysis Report for 2026420laclinicenc.exe ...
    web:www.joesandbox.com

    Deep Malware Analysis - Joe Sandbox Analysis Report Loading Joe Sandbox Report ... Play interactive tourEdit tour Windows Analysis Report 2026420laclinicenc.exe

  • How to Fix Windows Defender Remediation Incomplete
    web:www.majorgeeks.com

    Windows Defender may try to remove a virus, trojan, or other malware and return a message stating Remediation incomplete. Remediation incomplete leads one to assume that a virus, trojan or malware was found, but not removed.

  • How Do I Fix "Remediation Incomplete"? : r/antivirus - Reddit
    web:www.reddit.com

    How Do I Fix " Remediation Incomplete"? I recently downloaded a trojan by accident a couple of days ago and when i ran window defender, this showed up. I did multiple quick scans on malwarebytes and 2 full scans (both i manually canceled because they were taking too long, 8 hours for one and 1 full day for the other) and nothing came up.

  • Full Malware Scan & Removal Guide to Clean Heavy Infected Computers
    web:www.wintips.org

    Full Malware Scan and Removal Guide to clean heavy infected Windows computers from viruses, malware, adware, etc. (Windows 10, 8, 7, Vista and XP).

AI Forensic Analysis

Only Available for Registered Users. Sign in to view.