Incident #281 - XDR Test Manager

MEDIUM 'WildFire Malware' along with 8 other issues

RESOLVED DUPLICATE INCIDENT ID: #281 | Created: 2026-01-04 09:12:03

XDR Console

Alerts

Hosts

Files

Network

Incident Overview

'WildFire Malware' along with 8 other issues generated by XDR Agent detected on host teahee involving user dokji

Alert Count 9

Modified 2026-01-04 13:30

Assigned To Unassigned

Sources XDR Agent

Alert Categories

Malware

Affected Hosts & Users

Hosts (1)

Users (1)

dokji

MITRE ATT&CK Mapping

No MITRE ATT&CK data available for this incident

Related Alerts 9

ID	Severity	Name	Host	Action	Time
5245	MEDIUM	WildFire Malware	teahee	Prevented (Blocked)	01-04 13:24
5200	MEDIUM	WildFire Malware	teahee	Prevented (Blocked)	01-04 12:33
5180	MEDIUM	WildFire Malware	teahee	Prevented (Blocked)	01-04 12:21
5137	MEDIUM	WildFire Malware	teahee	Prevented (Blocked)	01-04 11:27
5128	MEDIUM	WildFire Malware	teahee	Prevented (Blocked)	01-04 11:18
5070	MEDIUM	WildFire Malware	teahee	Prevented (Blocked)	01-04 10:21
5065	MEDIUM	WildFire Malware	teahee	Prevented (Blocked)	01-04 10:15
5014	MEDIUM	WildFire Malware	teahee	Prevented (Blocked)	01-04 09:15
5010	MEDIUM	WildFire Malware	teahee	Prevented (Blocked)	01-04 09:12

File Artifacts 2

File Name	Path	SHA256	Signature	Verdict	Actions
UltimateXdrGenerator.exe	-	`af362370742931d534c21901f6b41bf8d034bf5d7e80a571d5eca6bc871ff499`	SIGNATURE_UNAVAILABLE	UNKNOWN	VT
MegaGenerator.exe	-	`e11e17aa538668963d62d7ba8fcb3e705b437f4a8e3e3333c2afc0c3552b2edf`	SIGNATURE_UNAVAILABLE	UNKNOWN	VT

Network Artifacts 0

No network artifacts found for this incident

Process Artifacts 9

Process	Command Line	Parent Process	User
UltimateXdrGenerator.exe	`"C:\app\cortex-xdr-siem-test\xdr_tools\UltimateXdrGenerator\bin\publish\Ultimate...`	-	dokji
MegaGenerator.exe	`"C:\app\cortex-xdr-siem-test\xdr_tools\MegaGenerator\bin\publish\MegaGenerator.e...`	-	dokji
UltimateXdrGenerator.exe	`"C:\app\cortex-xdr-siem-test\xdr_tools\UltimateXdrGenerator\bin\publish\Ultimate...`	-	dokji
MegaGenerator.exe	`"C:\app\cortex-xdr-siem-test\xdr_tools\MegaGenerator\bin\publish\MegaGenerator.e...`	-	dokji
UltimateXdrGenerator.exe	`"C:\app\cortex-xdr-siem-test\xdr_tools\UltimateXdrGenerator\bin\publish\Ultimate...`	-	dokji
MegaGenerator.exe	`"C:\app\cortex-xdr-siem-test\xdr_tools\MegaGenerator\bin\publish\MegaGenerator.e...`	-	dokji
UltimateXdrGenerator.exe	`"C:\app\cortex-xdr-siem-test\xdr_tools\UltimateXdrGenerator\bin\publish\Ultimate...`	-	dokji
MegaGenerator.exe	`"C:\app\cortex-xdr-siem-test\xdr_tools\MegaGenerator\bin\publish\MegaGenerator.e...`	-	dokji
UltimateXdrGenerator.exe	`"C:\app\cortex-xdr-siem-test\xdr_tools\UltimateXdrGenerator\bin\publish\Ultimate...`	-	dokji

Registry Artifacts 0

No registry artifacts found for this incident

Analyst Verdict

Classification

Risk Level

MEDIUM

Recommended Actions

Monitor for similar activity
Verify remediation complete

Summary

Alerts

Hosts

Files

Network

Alert Categories

Malware

Timeline

01-04 13:30:05

Incident Modified

Status or details updated

01-04 13:30:05

Incident Resolved

resolved duplicate incident

01-04 13:24:00

WildFire Malware

medium - Prevented (Blocked)

01-04 12:33:01

WildFire Malware

medium - Prevented (Blocked)

01-04 12:21:01

WildFire Malware

medium - Prevented (Blocked)

01-04 11:27:01

WildFire Malware

medium - Prevented (Blocked)

01-04 11:18:00

WildFire Malware

medium - Prevented (Blocked)

01-04 10:21:02

WildFire Malware

medium - Prevented (Blocked)

01-04 10:15:01

WildFire Malware

medium - Prevented (Blocked)

01-04 09:15:02

WildFire Malware

medium - Prevented (Blocked)

01-04 09:12:03

Incident Created

#281 - 'WildFire Malware' along with 8 other issues

01-04 09:12:03

UltimateXdrGenerator.exe

Verdict: Unknown

01-04 09:12:03

MegaGenerator.exe

Verdict: Unknown

01-04 09:12:01

WildFire Malware

medium - Prevented (Blocked)