MALICIOUS — 03dfc82a8c47cd17e2c443d5121b5a19c3355afd69ed08dee1210250f628282f.exe

Verdict: malicious (94/100) · Family: GenericKD

File type: pe · SHA-256: 03dfc82a8c47cd17e2c443d5121b5a19c3355afd69ed08dee1210250f628282f

Source: MalwareBazaar · first seen 2026-07-28T00:00:00.000Z · SHA-256 verified

MITRE ATT&CK

• T1057
• T1543.003
• T1112

YARA

Dynamic analysis (windows)

82937 behavior events · 2 ATT&CK techniques · 5 dropped files.

Runtime network

• onedsblobvmssprdcus03.centralus.cloudapp.azure.com
• onedsblobvmssprdeus02.eastus.cloudapp.azure.com
• searchapp.bundleassets.example
• www.msftconnecttest.com
• svc.ms-acdc-teams.office.com
• mr-b01.tm-azurefd.net
• onedscolprdcus69.centralus.cloudapp.azure.com
• onedscolprdeus04.eastus.cloudapp.azure.com
• onedscolprdwus66.westus.cloudapp.azure.com
• onedscolprdcus54.centralus.cloudapp.azure.com
• onedscolprdcus73.centralus.cloudapp.azure.com
• settings-prod-wus2-1-tagged.westus2.cloudapp.azure.com
• onedscolprdaus53.australiasoutheast.cloudapp.azure.com
• onedscolprdcus66.centralus.cloudapp.azure.com
• onedscolprdwus55.westus.cloudapp.azure.com
• www.bing.com
• config.edge.skype.com
• watson.events.data.microsoft.com
• desktop-hsgcbep
• aefd.nelreports.net

Analyzed on MalwareAnalyzer by Cyble · Open interactive report