MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 00918a79f2daaa5940db523e04004b79d12c5986fa21415b8b6c535b0286b4c2. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	00918a79f2daaa5940db523e04004b79d12c5986fa21415b8b6c535b0286b4c2
SHA3-384 hash:	b9577f72b91299947da352452914101383c0924240337f46c6dc4fe251ae21fe7b48c928810d44d312e16688daa65f05
SHA1 hash:	3a0918905b10241fdefeb62ac996712b5c5cec59
MD5 hash:	bdb63dcf250b9e79d3539cd472f8b265
humanhash:	river-september-twenty-butter
File name:	00918a79f2daaa5940db523e04004b79d12c5986fa21415b8b6c535b0286b4c2.tgz
Download:	download sample
File size:	4'281'793 bytes
First seen:	2026-07-27 13:15:47 UTC
Last seen:	Never
File type:
MIME type:	application/x-7z-compressed
ssdeep	98304:5qevEDAEDchJJaQ9hgLaty2ajavQqmkd1cmzbEOz9PL0DU/a1:5qevUQ9h5AOvQNO/bEulL0A/a1
TLSH	T1BC16335B8192F660B05B8CA3D3DA5534EE4B448C1BD06A0FBCB07AF61F5BD1D88B5398
Magika	sevenzip
Reporter	JAMESWT_WT
Tags:	46-225-151-177 tgz

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

48

Origin country :

IT

Vendor Threat Intelligence

ACCE Unknown

No detections

Hybrid Analysis Trojan.Generic

Verdict:

Malicious

Labled as:

Trojan.Generic

Link:

https://www.hybrid-analysis.com/sample/00918a79f2daaa5940db523e04004b79d12c5986fa21415b8b6c535b0286b4c2

Nucleon Malprob Malware

Score:

93%

Verdict:

Malware

File Type:

ARCHIVE

Link:

https://malprob.io/report/00918a79f2daaa5940db523e04004b79d12c5986fa21415b8b6c535b0286b4c2

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/00918a79f2daaa5940db523e04004b79d12c5986fa21415b8b6c535b0286b4c2/

ReversingLabs TitaniumCloud Win64.Trojan.Suschil

Threat name:

Win64.Trojan.Suschil

Alert

Create hunting rule

Status:

Malicious

First seen:

2026-07-09 13:26:46 UTC

File Type:

Binary (Archive)

Extracted files:

112

AV detection:

19 of 36 (52.78%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=aciyu6ps3kvfsqg3ki7aiaclphisywmg7iqucw4lnrjvwaugwtba._file

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Malicious File

Threat name:

Malicious File

Score:

1.00

Link:

https://yomi.yoroi.company/submissions/00918a79f2daaa5940db523e04004b79d12c5986fa21415b8b6c535b0286b4c2