⌘K
Dashboard
Incidents3
Threat Queue8
Investigations
Threats
Vulnerabilities
Assets
Endpoints
Network Monitoring
Firewall Rules
Log Analysis
Analyst Notes
Remediation & Orders
Messages
Reports
Analysts
Access Control
Settings
Login
Register
Forgot Password
Reset Password
2 Step Verification
Lock Screen
404 Error
500 Error
Malware Signature
HighTHR-4821 · Detected 10 Jul 2026, 10:42 AM
3
Endpoints5
IOCsYes
Contained8.4
RiskThreat Summary
The endpoint detection agent on WKS-2043 flagged a known malware signature (Trojan.GenericKD) during an on-access scan. The suspicious executable attempted to establish persistence via a scheduled task and reach an external command-and-control host. The file has been quarantined and the host flagged for review.
Detection Timeline
Signature matched
Trojan.GenericKD found in temp directory · 10:42 AM
Persistence attempt
Scheduled task creation blocked · 10:43 AM
C2 connection blocked
Outbound to 45.83.220.17 denied at firewall · 10:43 AM
File quarantined
Sample isolated and hash submitted to sandbox · 10:45 AM
Indicators of Compromise
| Type | Value | Confidence |
|---|---|---|
| SHA-256 | a3f5c9...9c1d | High |
| IP Address | 45.83.220.17 | High |
| Domain | update-sync[.]net | Medium |
| File Path | C:\Temp\svc-host.exe | Medium |
Details
StatusContained
SeverityHigh
CategoryMalware
FamilyTrojan.GenericKD
EndpointWKS-2043
SourceEDR Agent
Assigned Analyst
James Allaire
Threat Hunter
MITRE ATT&CK
T1059 Execution
T1053 Persistence
T1071 C2