s1
--:--:--UTC

Searching APEX

Starting…

  1. ○ Searching Threats, IOCs & Threat Intelligence locally
  2. ○ Querying external providers
  3. ○ Asking AI Forensic Validator
  4. ○ Creating new entry from validated hit

0s elapsed

VT-7de2c1bf58bce09eecc70476747d88a26163c3d6bb1d85235c24a558d1f1 high

📛 Threat Title

VirusTotal: 7de2c1bf58bce09eecc70476747d88a26163c3d6bb1d85235c24a558d1f16754

Category: ioc First seen: Last updated:

Description

VirusTotal verdict: 60 malicious / 0 suspicious of 75 engines. Suggested label: trojan.msil/agensla.

Indicators of Compromise (2)

Each indicator is enriched from the IOC database, threat-intel feed corroboration (Threat Hunt) and VirusTotal. Click one to expand.

domain trojan.msil VT: VT base fetch failed: HTTPError: 429 Too Many Requests for domains/trojan.msil

IOC database

Type
domain
Value
trojan.msil
First seen
Last seen
Attached to this threat
Appears in
2 threats
Description
Extracted from Threat VT-094fd325049b8a9cf6d3e5ef2a6d4cc6a567d7d49c35f8bb8dd9e3c6acf3

Open the full IOC page →

Threat Hunt — feed corroboration

Not present in any configured threat-intel feed.

Details From VirusTotal

VirusTotal: VT base fetch failed: HTTPError: 429 Too Many Requests for domains/trojan.msil

hash_sha256 7de2c1bf58bce09eecc70476747d88a26163c3d6bb1d85235c24a558d1f16754 VT: VT base fetch failed: HTTPError: 429 Too Many Requests for files/7de2c1bf58bce09eecc70476747d88a26163c3d6bb1d85235c24a558d1f16754

IOC database

Type
hash_sha256
Value
7de2c1bf58bce09eecc70476747d88a26163c3d6bb1d85235c24a558d1f16754
First seen
Last seen
Attached to this threat
Appears in
1 threat
Description
Extracted from Threat VT-7de2c1bf58bce09eecc70476747d88a26163c3d6bb1d85235c24a558d1f1

Open the full IOC page →

Threat Hunt — feed corroboration

Not present in any configured threat-intel feed.

Details From VirusTotal

VirusTotal: VT base fetch failed: HTTPError: 429 Too Many Requests for files/7de2c1bf58bce09eecc70476747d88a26163c3d6bb1d85235c24a558d1f16754

References (1)

  • VirusTotal report

    VirusTotal verdict: 60 malicious / 0 suspicious of 75 engines. Suggested label: trojan.msil/agensla.

Remediations (10)

  • THREAT ADVISORY RedSun Zero-Day (Windows Defender) April 17, 2026
    web:blackswan-cybersecurity.com

    Cloud Files API activity originating outside legitimate OneDrive/sync processes. Mitigation Steps: Apply all Windows updates immediately (monitor MSRC for an emergency RedSun-specific patch. None released as of April 17, 2026). Supplement Defender with a secondary EDR solution (e.g., Huntress) capable of detecting Defender bypasses.

  • VirusTotal 101: A Beginner's Guide to File Analysis and Threat ...
    web:chamindux.medium.com

    The vote in the VirusTotal vote section indicates that a user believes the file, URL, or IP address is malicious or harmful. This helps the community by signaling potential threats and contributing to the collective understanding of the item's safety.

  • VirusTotal - Wikipedia
    web:en.wikipedia.org

    VirusTotal is a website created by the Spanish security company Hispasec Sistemas. Launched in June 2004, it was acquired by Google in September 2012. [1][2][3] The company's ownership switched in January 2018 to Google Security Operations, a subsidiary of Google.

  • How to scan suspicious files with VirusTotal step by step
    web:mundobytes.com

    Complete guide to using VirusTotal : Scan files and URLs, interpret results, and avoid false positives. Tips and uses for Google Workspace.

  • VirusTotal CLI | vt-cli
    web:virustotal.github.io

    When you ask for information about a file, URL, domain, IP address or any other object in VirusTotal , you get a lot of data (by default in YAML format) that is usually more than what you need. You can narrow down the information shown by the vt-cli tool by using the --include and --exclude command-line options (-i and -x in short form).

  • VirusTotal - CISA
    web:www.cisa.gov

    VirusTotal inspects items with over 70 antivirus scanners and URL/domain blocklisting services, in addition to a variety of tools, to extract signals from the studied content.

  • CVE-2025-68947: NSecKrnl Driver Privilege Escalation Flaw - SentinelOne
    web:www.sentinelone.com

    CVE-2025-68947 is a privilege escalation vulnerability in NSecsoft NSecKrnl driver. Learn about its impact, affected versions, and mitigation methods.

  • VirusTotal Desktop App Download Free - 7.5 | TechSpot
    web:www.techspot.com

    VirusTotal is a free online service that analyzes files, URLs, and IP addresses to detect viruses, malware, and other types of threats.

  • VirusTotal - Home
    web:www.virustotal.com

    VirusTotal Assistant Bot offers a platform for users to interact with VirusTotal's threat intelligence suite and explore artifact-related information effectively.

  • Zero-day Vulnerability Database - zero-day.cz
    web:www.zero-day.cz

    Embedded malicious code (backdoor) The vulnerability allows a remote attacker to gain unauthorized access to the system. The vulnerability exists due to presence of embedded malicious functionality (aka backdoor) in the application's installer, downloaded from the official website. A remote attacker can compromise the affected system after installing the infected version of DAEMON Tools ...

AI Forensic Analysis

Only Available for Registered Users. Sign in to view.