MALICIOUS — 4bc1bc072949437c41adf9203ba98595ebaeb1ee47d231fc9e59a16e697e336c.bin

Verdict: malicious (94/100) · Family: Wacatac

File type: pe · SHA-256: 4bc1bc072949437c41adf9203ba98595ebaeb1ee47d231fc9e59a16e697e336c

Source: MalShare · first seen 2026-07-30T06:24:44.271Z · SHA-256 verified

MITRE ATT&CK

• T1543.003
• T1112

YARA

Dynamic analysis (windows)

17457 behavior events · 2 ATT&CK techniques · 28 dropped files.

Runtime network

• searchapp.bundleassets.example
• onedsblobvmssprdeus02.eastus.cloudapp.azure.com
• www.msftconnecttest.com
• onedscolprdeus23.eastus.cloudapp.azure.com
• onedscolprdeus08.eastus.cloudapp.azure.com
• onedsblobvmssprdcus02.centralus.cloudapp.azure.com
• onedscolprdfrc02.francecentral.cloudapp.azure.com
• onedscolprdaue50.australiaeast.cloudapp.azure.com
• onedscolprdjpe52.japaneast.cloudapp.azure.com
• onedscolprdwus66.westus.cloudapp.azure.com
• onedscolprdcus61.centralus.cloudapp.azure.com
• onedscolprdeus09.eastus.cloudapp.azure.com
• onedscolprdaue51.australiaeast.cloudapp.azure.com
• onedscolprdfrc01.francecentral.cloudapp.azure.com
• onedscolprdjpe54.japaneast.cloudapp.azure.com
• settings-prod-scus-1-tagged.southcentralus.cloudapp.azure.com
• onedscolprdneu69.northeurope.cloudapp.azure.com
• settings-prod-wus3-1-tagged.westus3.cloudapp.azure.com
• settings-prod-eus-1-tagged.eastus.cloudapp.azure.com
• onedscolprdcus62.centralus.cloudapp.azure.com

Analyzed on MalwareAnalyzer by Cyble · Open interactive report