MALICIOUS — virussign.com_724a0648743162ba377425b0d6d785f0.vir

Verdict: malicious (98/100) · Family: high

File type: pe · SHA-256: 6fd0251576bbcab67d7e20ae0751475fcf3fb68d5ffba6a94f6bf614139eef2b

Source: VirusSign · first seen 2026-07-24T00:00:00.000Z · SHA-256 verified

MITRE ATT&CK

• T1112

YARA

Dynamic analysis (windows)

31564 behavior events · 1 ATT&CK techniques · 0 dropped files.

Runtime network

• searchapp.bundleassets.example
• atm.office.mira.tm.svc.cloud.microsoft
• onedscolprdeus01.eastus.cloudapp.azure.com
• mr-b02.tm-azurefd.net
• staging.to-do.officeppe.com
• teams.cloud.microsoft
• s-0005.dual-s-msedge.net
• outlook.office.com
• atm.outlook.mira.tm.svc.cloud.microsoft
• outlook.office365.com
• outlook.cloud.microsoft
• settings-prod-uks-2-tagged.uksouth.cloudapp.azure.com
• onedscolprdeus04.eastus.cloudapp.azure.com
• www.msftconnecttest.com
• onedscolprdeus11.eastus.cloudapp.azure.com
• ln-0007.ln-msedge.net
• onedscolprdgwc05.germanywestcentral.cloudapp.azure.com
• onedsblobvmssprdcus03.centralus.cloudapp.azure.com
• onedsblobvmssprdeus03.eastus.cloudapp.azure.com
• svc.ms-acdc-teams.office.com

Analyzed on MalwareAnalyzer by Cyble · Open interactive report