7fe2f1e2921c288ad28013dc88093fb145ea91b9e167321c78d53d8fdef0f6ab
Classification: Malicious
7fe2f1e2921c288ad28013dc88093fb145ea91b9e167321c78d53d8fdef0f6ab is a malicious file sample. Reported by 2 threat sources, last seen 2026-09-02.
Detection summary
- 0 antivirus detections (36% detection ratio)
- 0 IDS alerts
- 10 processes observed
- 0 contacted hosts
- 1 DNS requests
Blacklist sightings
| Description |
Source |
First seen |
Last seen |
Labels |
MITRE ATT&CK |
| Generic Malware |
Hybrid-Analysis |
2023-11-17 09:00:07 |
2026-09-02 14:45:04 |
malicious-activity
|
|
| Generic.Malware |
MalwareBazaar Abuse.ch |
2023-11-17 08:30:47 |
2023-11-17 08:30:47 |
malicious-activity
|
|
Sample information
- Filenames
- 7fe2f1e2921c288ad28013dc88093fb145ea91b9e167321c78d53d8fdef0f6ab, SecuriteInfo.com.Win32.PWSX-gen.26938.21674
- File type
- PE32 executable (GUI) Intel 80386 Mono/.Net assemb ...
- Size
- 1014272 bytes
- MD5
933906e31eed4d4ede37547d765992f2- SHA-1
5379553349aafcecf342c07be85094b3cbc3d3ed- SHA-256
7fe2f1e2921c288ad28013dc88093fb145ea91b9e167321c78d53d8fdef0f6ab- First indexed
- 2023-11-17 08:32:02
- Last updated
- 2026-09-02 14:45:04
Process list
| Name | Command line |
|---|
| SecuriteInfo.com.Win32.PWSX-gen.26938.21674.exe | |
| powershell.exe | Add-MpPreference -ExclusionPath "C:\SecuriteInfo.com.Win32.PWSX-gen.26938.21674.exe" |
| powershell.exe | Add-MpPreference -ExclusionPath "%APPDATA%\xzbmRUlvmESpp.exe" |
| schtasks.exe | /Create /TN "Updates\xzbmRUlvmESpp" /XML "%TEMP%\tmpB03C.tmp" |
| SecuriteInfo.com.Win32.PWSX-gen.26938.21674.exe | |
| xzbmRUlvmESpp.exe | |
| powershell.exe | Add-MpPreference -ExclusionPath "%APPDATA%\xzbmRUlvmESpp.exe" |
| powershell.exe | Add-MpPreference -ExclusionPath "%APPDATA%\xzbmRUlvmESpp.exe" |
| schtasks.exe | /Create /TN "Updates\xzbmRUlvmESpp" /XML "%TEMP%\tmpFFBA.tmp" |
| xzbmRUlvmESpp.exe | |