MALICIOUS — 35a13d030bfba6eefd0b668a818987345d9ad4ccf28027f4221ae7ebe30b0c83.exe

Verdict: malicious (98/100) · Family: capture

File type: pe · SHA-256: 35a13d030bfba6eefd0b668a818987345d9ad4ccf28027f4221ae7ebe30b0c83

Source: MalwareBazaar · first seen 2026-07-26T00:00:00.000Z · SHA-256 verified

MITRE ATT&CK

• T1056.001
• T1543.003
• T1112

YARA

Dynamic analysis (windows)

408 behavior events · 2 ATT&CK techniques · 2 dropped files.

Runtime network

• ln-0007.ln-msedge.net
• secure.globalsign.com
• cdn.globalsigncdn.com.cdn.cloudflare.net
• mr-b02.tm-azurefd.net
• milezcv.cyou
• www.msftconnecttest.com
• starzone.cyou
• svc.ms-acdc-teams.office.com
• mr-b01.tm-azurefd.net
• onedscolprdfrc10.francecentral.cloudapp.azure.com
• onedscolprdwus53.westus.cloudapp.azure.com
• creaflow.cyou
• onedscolprdcus73.centralus.cloudapp.azure.com
• onedscolprdcus59.centralus.cloudapp.azure.com
• trendion.cyou
• onedscolprdcus60.centralus.cloudapp.azure.com
• onedscolprdwus51.westus.cloudapp.azure.com
• businway.cyou
• onedscolprdwus55.westus.cloudapp.azure.com
• onedscolprdeus19.eastus.cloudapp.azure.com

Analyzed on MalwareAnalyzer by Cyble · Open interactive report