Incident #1078 - XDR Test Manager

MEDIUM 'WildFire Malware' along with 5 other issues

RESOLVED OTHER ID: #1078 | Created: 2026-01-09 03:39:05

XDR Console

Alerts

Hosts

Files

Network

Incident Overview

'WildFire Malware' along with 5 other issues generated by XDR Agent detected on host teahee involving user dokji

Alert Count 6

Modified 2026-01-09 06:25

Assigned To Unassigned

Sources XDR Agent

Alert Categories

Malware

Affected Hosts & Users

Hosts (1)

Users (1)

dokji

MITRE ATT&CK Mapping

No MITRE ATT&CK data available for this incident

Related Alerts 6

ID	Severity	Name	Host	Action	Time
18253	MEDIUM	WildFire Malware	teahee	Prevented (Blocked)	01-09 05:51
18249	MEDIUM	WildFire Malware	teahee	Prevented (Blocked)	01-09 05:45
18217	MEDIUM	WildFire Malware	teahee	Prevented (Blocked)	01-09 04:45
18215	MEDIUM	WildFire Malware	teahee	Prevented (Blocked)	01-09 04:42
18178	MEDIUM	WildFire Malware	teahee	Prevented (Blocked)	01-09 03:39
18179	MEDIUM	WildFire Malware	teahee	Prevented (Blocked)	01-09 03:39

File Artifacts 2

File Name	Path	SHA256	Signature	Verdict	Actions
MegaGenerator.exe	-	`e11e17aa538668963d62d7ba8fcb3e705b437f4a8e3e3333c2afc0c3552b2edf`	SIGNATURE_UNAVAILABLE	UNKNOWN	VT
UltimateXdrGenerator.exe	-	`af362370742931d534c21901f6b41bf8d034bf5d7e80a571d5eca6bc871ff499`	SIGNATURE_UNAVAILABLE	UNKNOWN	VT

Network Artifacts 0

No network artifacts found for this incident

Process Artifacts 6

Process	Command Line	Parent Process	User
MegaGenerator.exe	`"C:\app\cortex-xdr-siem-test\xdr_tools\MegaGenerator\bin\publish\MegaGenerator.e...`	-	dokji
UltimateXdrGenerator.exe	`"C:\app\cortex-xdr-siem-test\xdr_tools\UltimateXdrGenerator\bin\publish\Ultimate...`	-	dokji
MegaGenerator.exe	`"C:\app\cortex-xdr-siem-test\xdr_tools\MegaGenerator\bin\publish\MegaGenerator.e...`	-	dokji
UltimateXdrGenerator.exe	`"C:\app\cortex-xdr-siem-test\xdr_tools\UltimateXdrGenerator\bin\publish\Ultimate...`	-	dokji
UltimateXdrGenerator.exe	`"C:\app\cortex-xdr-siem-test\xdr_tools\UltimateXdrGenerator\bin\publish\Ultimate...`	-	dokji
MegaGenerator.exe	`"C:\app\cortex-xdr-siem-test\xdr_tools\MegaGenerator\bin\publish\MegaGenerator.e...`	-	dokji

Registry Artifacts 0

No registry artifacts found for this incident

Analyst Verdict

Classification

Risk Level

MEDIUM

Recommended Actions

Monitor for similar activity
Verify remediation complete

Summary

Alerts

Hosts

Files

Network

Alert Categories

Malware

Timeline

01-09 06:25:29

Incident Modified

Status or details updated

01-09 06:25:29

Incident Resolved

resolved other

01-09 05:51:02

WildFire Malware

medium - Prevented (Blocked)

01-09 05:45:01

WildFire Malware

medium - Prevented (Blocked)

01-09 04:45:01

WildFire Malware

medium - Prevented (Blocked)

01-09 04:42:01

WildFire Malware

medium - Prevented (Blocked)

01-09 03:39:05

Incident Created

#1078 - 'WildFire Malware' along with 5 other issues

01-09 03:39:05

MegaGenerator.exe

Verdict: Unknown

01-09 03:39:05

UltimateXdrGenerator.exe

Verdict: Unknown

01-09 03:39:01

WildFire Malware

medium - Prevented (Blocked)

01-09 03:39:01

WildFire Malware

medium - Prevented (Blocked)