f8a1d78eb7691f90053a5d7ad70588bed4c4a5cdd7bc949c368d8c2bc62f95c4

Classification: Malicious

f8a1d78eb7691f90053a5d7ad70588bed4c4a5cdd7bc949c368d8c2bc62f95c4 is a malicious file sample (Windows executable, 802.0 KB). Linked to Ursnif malware.

Detection summary

  • 0 antivirus detections (22% detection ratio)
  • 0 IDS alerts
  • 4 processes observed
  • 0 contacted hosts
  • 0 DNS requests

MITRE ATT&CK associations

Malware families: URSNIF (S0386)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Generic Malware Hybrid-Analysis 2023-07-18 17:45:03 2023-07-18 17:45:03
Gozi MalwareBazaar Abuse.ch 2023-07-18 15:47:09 2023-07-18 15:47:09 malicious-activity S0386 Ursnif

Sample information

Filenames
f8a1d78eb7691f90053a5d7ad70588bed4c4a5cdd7bc949c368d8c2bc62f95c4.bin, f8a1d78eb7691f90053a5d7ad70588bed4c4a5cdd7bc949c368d8c2bc62f95c4.dll
File type
PE32 executable (DLL) (GUI) Intel 80386, for MS Wi ...
Size
821248 bytes
MD5
1ff3761d62cc5ee7c888a8c1bdd9d1ac
SHA-1
093cb13d256ff3e367cc8c60fe68f96582a35f29
SHA-256
f8a1d78eb7691f90053a5d7ad70588bed4c4a5cdd7bc949c368d8c2bc62f95c4
First indexed
2023-07-18 17:18:11
Last updated
2026-10-17 05:17:25

Process list

NameCommand line
<Ignored Process>
rundll32.exe"C:\f8a1d78eb7691f90053a5d7ad70588bed4c4a5cdd7bc949c368d8c2bc62f95c4.dll",#1
rundll32.exe"C:\f8a1d78eb7691f90053a5d7ad70588bed4c4a5cdd7bc949c368d8c2bc62f95c4.dll",#2
rundll32.exe"C:\f8a1d78eb7691f90053a5d7ad70588bed4c4a5cdd7bc949c368d8c2bc62f95c4.dll",#3