MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 03c3e5d36e6297e798dfa57308494f26e4d651a034fe11aaaa0fb848dcbfb12a. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	03c3e5d36e6297e798dfa57308494f26e4d651a034fe11aaaa0fb848dcbfb12a
SHA3-384 hash:	880b112f6e47efabe8577d4f60fb2992dfd39382cff37aaccb179cbf8df67c281bc9a7dc37813ad80a75c38ca594620e
SHA1 hash:	86d32475d53a4a24befce555cca6b33c93d18709
MD5 hash:	0c5e3ff94f8c40b68ccab4187fa9adf0
humanhash:	mike-river-potato-pasta
File name:	setup.zip
Download:	download sample
Signature	ACRStealer Alert Create hunting rule
File size:	23'044'795 bytes
First seen:	2025-11-08 12:55:18 UTC
Last seen:	Never
File type:	zip
MIME type:	application/zip
ssdeep	393216:Gd5EmNQZPwAdaDxAl1b4KnIhw6bt6Cms6wsyNTLhs8OqK4U20XnCY+JgK:GPnNBvDxO1b46Ih7bMCR6wsOT9s81bpT
TLSH	T11D3733E9C2168640A9170D340AFEB90DCAFA8D728123DBA59D5C028F1EDF6F175F9B11
Magika	zip
Reporter	aachum
Tags:	2265ca 78-46-204-134 ACRStealer Amadey HIjackLoader IDATLoader zip

iamaachum

https://3bnx23aq.cfd/ => https://mega.nz/file/bQEDkToA#d5x4AcCEBrBUSxAxQrrMKlEbUUY0VD7l-pz3uuSS8tg

ACRStealer C2: 78.46.204.134
Amadey Botnet: 2265ca
Amadey C2: http://mi.huffproofs.com/kaWt2QXfpPueNM/index.php

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

148

Origin country :

ES

Vendor Threat Intelligence

CyberFortress Clean

Verdict:

Clean

Score:

99.9%

Link:

https://cyber-fortress.com/docs/result/index.php?id=690f3dc530bacec888c9cd02

Tags:

n/a

FileScan.IO Unknown

Verdict:

Unknown

Threat level:

n/a  -.1.0/10

Confidence:

100%

Tags:

crypto expired-cert hacktool microsoft_visual_cc signed

Link:

https://www.filescan.io/uploads/690f3dbe45d0218fdf1eb142/reports/25497912-7f26-436d-a4df-0fcf33323fde/overview

Hybrid Analysis Unknown

Verdict:

Unknown

Link:

https://www.hybrid-analysis.com/sample/03c3e5d36e6297e798dfa57308494f26e4d651a034fe11aaaa0fb848dcbfb12a

Kaspersky OpenTIP Unknown

Verdict:

Unknown

File Type:

zip

Link:

https://opentip.kaspersky.com/03c3e5d36e6297e798dfa57308494f26e4d651a034fe11aaaa0fb848dcbfb12a/results?tab=lookup

Nucleon Malprob Benign

Score:

5%

Verdict:

Benign

File Type:

ARCHIVE

Link:

https://malprob.io/report/03c3e5d36e6297e798dfa57308494f26e4d651a034fe11aaaa0fb848dcbfb12a

Malva.RE

Gathering data

CERT.PL MWDB

Gathering data

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=apb6lu3omkl6pgg7uvzqqskpe3snmunagt7bdkvkb64erxf7weva._file

Hatching Triage hijackloader

Result

Malware family:

hijackloader

Alert

Create hunting rule

Score:

  10/10

Tags:

family:hijackloader

Link:

https://tria.ge/reports/251108-s28w2afq2v/

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.