MEDIUM WildFire Malware
Prevented (Blocked)
ID: #582
|
Detected: 2026-01-01 09:12:02
|
Malware
Alert Overview
Suspicious executable detected
Unclassified
XDR Agent
New
DS:PANW/XDR Agent
DOM:Security
Host Information
BOOK-R0BE6S1NC3
BOOK-R0BE6S1NC3\ubuntu
00:72:ee:3e:51:84
Process Information
Process Execution
Actor Process (Executor)
| Process Name | UltimateXdrGenerator.exe |
|---|---|
| Path | C:\app\cortex-xdr-siem-test\xdr_tools\UltimateXdrGenerator\bin\publish\UltimateXdrGenerator.exe |
| PID | 19372 |
| SHA256 |
dc6ef9db16f6c3af583ab0e1f123ff0d29f5c2c6cc9bb7635cd52a03583efcd8
VT
|
| MD5 | df275e7b38b8fe8d7c6f2c3ffab38618 |
"C:\app\cortex-xdr-siem-test\xdr_tools\UltimateXdrGenerator\bin\publish\UltimateXdrGenerator.exe" --once --scenarios 20 Parent Process (Causality)
| Process Name | cmd.exe |
|---|---|
| Path | C:\Windows\System32\cmd.exe |
| SHA256 |
64afc6db3aad1289533662e2d79e27dd55c7dcdb8cd918b08e145ad82ad5acb4
VT
|
| MD5 | 6d109a3a00f210c1ab89c3b08399ed48 |
C:\windows\SYSTEM32\cmd.exe /c ""C:\app\cortex-xdr-siem-test\xdr_ultimate_runner.bat""Severity Analysis
MEDIUM
Review and assess impact
Summary
Events
1
IP Addresses
1
Tags
2
File Artifacts
Yes
Network Artifacts
No
Registry Artifacts
No
Analyst Verdict