7f0f2c04a5204bcb0314fe9fdf9a3369e516e19b0ead44c8f1d3319d59010e0d

Classification: Malicious

7f0f2c04a5204bcb0314fe9fdf9a3369e516e19b0ead44c8f1d3319d59010e0d is a malicious file sample. Reported by 3 threat sources, last seen 2026-09-02.

Detection summary

  • 0 antivirus detections
  • 4 IDS alerts
  • 5 processes observed
  • 3 contacted hosts
  • 2 DNS requests

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Generic Malware Hybrid-Analysis 2024-06-26 17:15:04 2026-09-02 13:45:05 malicious-activity
KrakenKeylogger ThreatFox Abuse.ch 2024-06-25 15:39:17 2024-06-27 15:22:19
SnakeKeylogger MalwareBazaar Abuse.ch 2024-06-25 08:19:37 2024-06-25 08:19:37 malicious-activity

Tags

win.krakenkeylogger windows-server-utility keylogger

Sample information

Filenames
7f0f2c04a5204bcb0314fe9fdf9a3369e516e19b0ead44c8f1d3319d59010e0d, 7f0f2. Spy.exe, SecuriteInfo.com.TrojanLoader.MSIL.DaVinci.Heur.23220.28486
File type
application/x-dosexec
Size
562688 bytes
MD5
22904e3e98cfffa5ab2d97946ed9a296
SHA-1
d26763273d5c6df29f8ca95b14c57edd1509a6e8
SHA-256
7f0f2c04a5204bcb0314fe9fdf9a3369e516e19b0ead44c8f1d3319d59010e0d
First indexed
2024-06-25 09:20:52
Last updated
2026-09-02 13:45:05

Network contacts

193.122.6.168 104.21.67.152 158.101.44.242

DNS requests

checkip.dyndns.org reallyfreegeoip.org

Process list

NameCommand line
7f0f2.Spy.exe
7f0f2.Spy.exe
WerFault.exe-u -p 4784 -s 1452
WerFault.exe-u -p 4784 -s 1452
WerFault.exe-pss -s 444 -p 4784 -ip 4784