MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 8affbb4a04373dee6a02c44e09f7bb644aa224adfac81eb330457a358df4fe29. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry



MicroStealer


Vendor detections: 6


Intelligence 6 IOCs YARA File information Comments

SHA256 hash: 8affbb4a04373dee6a02c44e09f7bb644aa224adfac81eb330457a358df4fe29
SHA3-384 hash: 310bfb912a4a3dccf1116a1bfb461e767d6fe05fe8c404683dcc815cd0aeebe85fc9edbcb76f62e2187a42de26f54beb
SHA1 hash: 2ffe9a9cf5b19399469635a3024a6776ff3f8b4e
MD5 hash: 1b29b5ce99eb5040be2192cae662bc5a
humanhash: indigo-seventeen-zebra-mountain
File name:loader.exe
Download: download sample
Signature MicroStealer
File size:89'353'728 bytes
First seen:2026-02-08 09:31:19 UTC
Last seen:Never
File type:Executable exe
MIME type:application/x-dosexec
imphash 359e649ab913e838011b9d61180c7f7f (1 x MicroStealer)
ssdeep 786432:U4WW714JtHT4bC6UvH2zMbDSpgPVlcmp:U4Wu4JtHT+nzmNb
TLSH T13A187D13B3A705D5E8FBDA7096E652236932BC066F3095DF324C07262F73AE05A76B11
TrID 63.5% (.EXE) Win64 Executable (generic) (10522/11/4)
12.2% (.EXE) OS/2 Executable (generic) (2029/13)
12.0% (.EXE) Generic Win/DOS Executable (2002/3)
12.0% (.EXE) DOS Executable Generic (2000/1)
Magika pebin
Reporter abuse_ch
Tags:de-pumped exe MicroStealer

Intelligence


File Origin
# of uploads :
1
# of downloads :
2'537
Origin country :
NL NL
Vendor Threat Intelligence
Malware family:
n/a
ID:
1
File name:
loader.exe
Verdict:
No threats detected
Analysis date:
2026-02-08 09:34:44 UTC
Tags:
n/a

Note:
ANY.RUN is an interactive sandbox that analyzes all user actions rather than an uploaded sample
Result
Verdict:
Clean
Maliciousness:

Behaviour
Creating a file
Verdict:
Suspicious
Threat level:
  5/10
Confidence:
100%
Tags:
adaptive-context anti-debug crypto fingerprint microsoft_visual_cc
Verdict:
Clean
File Type:
exe x64
First seen:
2026-02-08T08:04:00Z UTC
Last seen:
2026-02-08T08:15:00Z UTC
Hits:
~10
Result
Threat name:
n/a
Detection:
clean
Classification:
n/a
Score:
2 / 100
Behaviour
Behavior Graph:
n/a
Gathering data
Threat name:
Win64.Malware.Heuristic
Status:
Malicious
First seen:
2026-02-08 09:32:38 UTC
File Type:
PE+ (Exe)
Extracted files:
18
AV detection:
5 of 24 (20.83%)
Threat level:
  2/5
Result
Malware family:
n/a
Score:
  3/10
Tags:
n/a
Please note that we are no longer able to provide a coverage score for Virus Total.

File information


The table below shows additional information about this malware sample such as delivery method and external references.

MicroStealer

Executable exe 8affbb4a04373dee6a02c44e09f7bb644aa224adfac81eb330457a358df4fe29

(this sample)

Comments