xoilacbongda-wc2026a.tv_chromes.exe

Classification: Malicious

xoilacbongda-wc2026a.tv_chromes.exe is a malicious file sample. Linked to Nanocore malware. Reported by 2 threat sources, last seen 2026-07-09.

Detection summary

  • 0 antivirus detections
  • 6 IDS alerts
  • 0 processes observed
  • 32 contacted hosts
  • 32 DNS requests

MITRE ATT&CK associations

Malware families: NANOCORE (S0336)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Generic Malware Hybrid-Analysis 2026-07-09 03:45:04 2026-07-09 03:45:04 malicious-activity
Nanocore Triage 2026-07-09 02:58:59 2026-07-09 02:58:59 malicious-activity S0336 NanoCore

Tags

evasion evasive malicious new_domain port_knocking ransomware suspicious windows-server-utility nanocore defense_evasion discovery execution impact keylogger persistence privilege_escalation spyware stealer trojan

Sample information

Filenames
xoilacbongda-wc2026a.tv_chromes.exe, 576e2c9bf8c9fd7942f1d017732ba660e5799d03c81bbb47d22a8e308aaf2fe3.bin
File type
PE32 executable for MS Windows 4.00 (GUI), Intel i ...
MD5
1f48da3f4867e8e3812c9dffa6812c7c
SHA-1
03a81b1ffca22dd2f9308fc32410e56ae515eb37
SHA-256
576e2c9bf8c9fd7942f1d017732ba660e5799d03c81bbb47d22a8e308aaf2fe3
First indexed
2026-07-09 02:58:59
Last updated
2026-09-02 11:52:24

Network contacts

142.251.151.119 142.251.219.174 142.251.218.206 216.239.34.223 104.21.58.206 142.251.218.131 142.250.114.84 142.251.219.138 35.190.80.1 104.18.1.22 8.25.82.226 172.67.164.169 104.18.21.227 104.21.43.112 104.21.25.72 172.67.194.125 104.16.79.73 142.251.218.170 104.21.89.131 216.239.36.223 142.251.214.42 142.250.101.188 94.102.61.78 185.130.5.253 172.67.150.58 208.94.116.246 104.21.31.74 43.175.171.83 104.16.0.0 85.17.56.34 43.174.143.228 142.251.219.14

DNS requests

a.nel.cloudflare.com accounts.google.com ajax.googleapis.com android.clients.google.com api.gvapi.cc cdn.imgts.com cdn.xoilacbongda-wc2026a.tv clients1.google.com clients2.google.com clientservices.googleapis.com fonts.googleapis.com fonts.gstatic.com img.gvapi.cc live.kinxie.com live1.kinxie.com malware.wicar.org mtalk.google.com optimizationguide-pa.googleapis.com panel.villawh.com s1.what-on.com safebrowsingohttpgateway.googleapis.com server.ws-xyz.com static.cloudflareinsights.com translate.googleapis.com unpkg.byted-static.com unpkg.com video-home.gvapi.cc wannacry-decryptor.com www.google.com www.zeltser.com xoilacbongda-wc2026a.tv zeltser.com