MALICIOUS — virussign.com_9dcaf7dd694a01c1259dd9b8399fc230.vir

Verdict: malicious (100/100) · Family: Genpack

File type: pe · SHA-256: 698247e111a01bb31b64afc3e5fef2bd96a472bc62ca1c6b95afda6de4e4f780

Source: VirusSign · first seen 2026-07-24T00:00:00.000Z · SHA-256 verified

MITRE ATT&CK

• T1486
• T1543.003
• T1112
• T1105

YARA

Dynamic analysis (windows)

27630 behavior events · 2 ATT&CK techniques · 20 dropped files.

Runtime network

• ln-0007.ln-msedge.net
• mr-b02.tm-azurefd.net
• www.msftconnecttest.com
• svc.ms-acdc-teams.office.com
• edge.microsoft.com
• msedge.api.cdp.microsoft.com
• glb.api.prod.dcat.dsp.trafficmanager.net
• config.edge.skype.com
• aps.prod.windows.com
• www.bing.com
• a39.d.akamai.net
• desktop-hsgcbep
• ecs.office.com
• fs.microsoft.com
• e16604.dscf.akamaiedge.net
• dns.msftncsi.com
• www.msftncsi.com
• a1961.g2.akamai.net
• 192.168.122.1
• 192.168.122.108

Analyzed on MalwareAnalyzer by Cyble · Open interactive report