7d728e3092520965203537354ccb0798292014885aecdefe1f22a988cb67661d

Classification: Malicious

7d728e3092520965203537354ccb0798292014885aecdefe1f22a988cb67661d is a malicious file sample. Reported by 2 threat sources, last seen 2026-09-02.

Detection summary

  • 0 antivirus detections
  • 7 IDS alerts
  • 8 processes observed
  • 9 contacted hosts
  • 20 DNS requests

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Generic Malware Hybrid-Analysis 2024-11-29 20:45:05 2026-09-02 11:45:07 malicious-activity
Socks5Systemz MalwareBazaar Abuse.ch 2024-11-30 01:31:49 2024-11-30 01:31:49 malicious-activity

Sample information

Filenames
7d728e3092520965203537354ccb0798292014885aecdefe1f22a988cb67661d, getlab.exe
File type
PE32 executable (GUI) Intel 80386, for MS Windows
Size
3599599 bytes
MD5
15bd54ed3324a464c1deb1a883e7649e
SHA-1
7a6853de5875b347fe48afb232d249e44efeb879
SHA-256
7d728e3092520965203537354ccb0798292014885aecdefe1f22a988cb67661d
First indexed
2024-11-29 20:25:44
Last updated
2026-09-02 11:45:07

Network contacts

141.98.234.31 185.196.9.67 173.208.215.98 192.187.101.234 152.89.198.214 91.211.247.248 209.99.187.121 45.155.250.90 109.230.199.109

DNS requests

bhndiqb.com bpxddsh.com ckbfruq.net dtyowbo.info fidduso.ru gvbmdbg.com hcobjqb.net hkvjyhi.net mmzpfnx.com mofnofa.com ncfyxxd.net prcexuz.ua rvlygzy.com rxcpkfw.com skyoahc.net tthbava.info vqkdrid.ru weqazdh.com wpompuc.com xecuoqp.net

Process list

NameCommand line
7d728e3092520965203537354ccb0798292014885aecdefe1f22a988cb67661d.exe
7d728e3092520965203537354ccb0798292014885aecdefe1f22a988cb67661d.tmp/SL5="$401BC,3351432,54272,C:\7d728e3092520965203537354ccb0798292014885aecdefe1f22a988cb67661d.exe"
net.exepause xl_gear_11293
net1.exe%WINDIR%\system32\net1 pause xl_gear_11293
xlgear32.exe-i
WerFault.exe-u -p 3164 -s 588
WerFault.exe-u -p 3164 -s 588
WerFault.exe-pss -s 440 -p 3164 -ip 3164