MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 0e794f9133b3977065d72b7b3b3c9935aa449f7b35bf55eec5d197e1a69eec3a. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	0e794f9133b3977065d72b7b3b3c9935aa449f7b35bf55eec5d197e1a69eec3a
SHA3-384 hash:	896408dd99d296e5e954285b326c984ea0f73167f10d119f48d5deb93859a0147eba7f67ea74d426c46e5d96ab5e7f4a
SHA1 hash:	479e0d0d2cce522161bea1551089fb4d8a150dae
MD5 hash:	12a6f46954d25f70105637f3fe6bca29
humanhash:	solar-floor-eight-mirror
File name:	SETUP.zip
Download:	download sample
Signature	ACRStealer Alert Create hunting rule
File size:	58'675'513 bytes
First seen:	2026-05-15 20:28:50 UTC
Last seen:	Never
File type:	zip
MIME type:	application/zip
ssdeep	1572864:3V+BnWdmU3zyeGrYw+/a7ZOSjtWibf2yt+QJUNE:IEdm5hrrXOSxWEOytR
TLSH	T199D7338C9CD8C9DCF7B6C1BB1C20D01C5A5A7725FC1C2C26ACE49482DE8FDA7588D969
Magika	zip
Reporter	aachum
Tags:	ACRStealer apigrokcloud-icu HIjackLoader IDATLoader zip

iamaachum

https://hostckyd2.it.com/ => https://www.mediafire.com/file/vwte4d8ejoc5an0/D0WNL0AD+SETUP+FILE+(KEY-3521).zip/file

ACRStealer C2: apigrokcloud.icu

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

49

Origin country :

ES

Vendor Threat Intelligence

ACCE Zip_Archive

Details

Link:

https://research.acce.ciphertechsolutions.com/results/49b321cf-c558-4152-92b0-750d965271fb/

CyberFortress Unknown

Verdict:

Suspicious

Score:

50%

Link:

https://cyber-fortress.com/docs/result/index.php?id=6a065a3d953bbcef1c905bcd

Tags:

infosteal

DocGuard Malicious

Result

Verdict:

Malicious

File Type:

ZIP File

Link:

https://app.docguard.net/0e794f9133b3977065d72b7b3b3c9935aa449f7b35bf55eec5d197e1a69eec3a/results/dashboard

Hybrid Analysis Unknown

Verdict:

Unknown

Link:

https://www.hybrid-analysis.com/sample/0e794f9133b3977065d72b7b3b3c9935aa449f7b35bf55eec5d197e1a69eec3a

Kaspersky OpenTIP Malicious

Verdict:

Malicious

File Type:

zip

First seen:

2026-05-15T18:33:00Z UTC

Last seen:

2026-05-16T14:59:00Z UTC

Hits:

~10

Link:

https://opentip.kaspersky.com/0e794f9133b3977065d72b7b3b3c9935aa449f7b35bf55eec5d197e1a69eec3a/results?tab=lookup

Nucleon Malprob Malware

Score:

100%

Verdict:

Malware

File Type:

ARCHIVE

Link:

https://malprob.io/report/0e794f9133b3977065d72b7b3b3c9935aa449f7b35bf55eec5d197e1a69eec3a

CERT.PL MWDB

Gathering data

ReversingLabs TitaniumCloud Win32.Trojan.Generic

Threat name:

Win32.Trojan.Generic

Alert

Create hunting rule

Status:

Suspicious

First seen:

2026-05-15 15:12:40 UTC

File Type:

Binary (Archive)

Extracted files:

774

AV detection:

11 of 24 (45.83%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=bz4u7ejtwolxazoxfn5twpezgwvejh33gw7vl3wf2gl6dju65q5a._file

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.