🤲🏼 NEW | abuse.ch Community Hub! Earn recognition 🏅 for the malware intelligence you share, climb the leaderboards 📈, and connect with like-minded contributors who share your hunting focus 🤝. Ready to unlock your profile? Go to the Community Hub →

MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 2392b96d1433e44f19605fa3a90e79afc2d757fc73bade0400a8f87c6b5f2bed. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Threat unknown


Vendor detections: 6


Intelligence 6 IOCs YARA 14 File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 2392b96d1433e44f19605fa3a90e79afc2d757fc73bade0400a8f87c6b5f2bed
SHA3-384 hash: 79ccdd43b6b8f205cc210cb57642d42917d9a836e2226352e7447bb772c2e39a94ce288341ce50886f99971d8af5b535
SHA1 hash: bbb016df478a2d33ef3c2dce27ebd8e303d52b30
MD5 hash: 6490c5ca43ac6b03b08b70da14e243b4
humanhash: utah-white-pasta-thirteen
File name:2392b96d1433e44f19605fa3a90e79afc2d757fc73bade0400a8f87c6b5f2bed.bin
Download: download sample
File size:183'524 bytes
First seen:2026-10-01 12:16:49 UTC
Last seen:Never
File type: zip
MIME type:application/zip
ssdeep 3072:2q93+/oYvBgL+MvMhfxwDYmpxIu6kUjhd10f4jCmeVaUx2jcALWdefkoPEhl:2qx+/u7UhSYbNN30f45gMkocb
TLSH T1960412256D1458D2C0AAB63736E81945800B46938B63DA2B2933FEB0705FED0DF1DF9B
Magika zip
Reporter whack_sh
Tags:zip

Intelligence

File Origin
# of uploads :
1
# of downloads :
67
Origin country :
US US
File Archive Information

This file archive contains 36 file(s), sorted by their relevance:

File name:MobiX Unlock.exe
File size:54'272 bytes
SHA256 hash: 074e85f359c1b3bc41a01e818791ca77e79f6366d15e90032b33d9bedfb4b219
MD5 hash: 90f8868a525708e54cc117fab3c0f07a
MIME type:application/x-dosexec
File name:WebView2Loader.dll
File size:165'488 bytes
SHA256 hash: 1970ae5e398666304483203dae64f8bc3327811114ae38bb3484ecbce1386b41
MD5 hash: 075e4272f2815b3b6bc7caf0ebcc65ae
MIME type:application/x-dosexec
File name:apple.svg
File size:580 bytes
SHA256 hash: f7bb6f40c8f5e0a1f3f818fd972b27e2d69e5b133e63f4588b6c0e2fec18b93c
MD5 hash: 9607b1b088666dc6b5db6e47d7b38ce8
MIME type:image/svg+xml
File name:iqoo.svg
File size:299 bytes
SHA256 hash: bd8404612f7b033d163503e337b17f9d377f8628683f777030198f2c13c94415
MD5 hash: 35c3bef002ff23ae58c39b19c66c3c61
MIME type:image/svg+xml
File name:nubia.svg
File size:282 bytes
SHA256 hash: a4a2c1036ae83aecfe3e739c5b6eeb2b09c847353f0b9d97d725921f6ccc97d6
MD5 hash: 768369ea8779808219349353b3c1df41
MIME type:image/svg+xml
File name:logo.svg
File size:294 bytes
SHA256 hash: d376308805a2378fdab84888eeea9f2a3bf1a8c3c6bc2bad6d2564072988d612
MD5 hash: f92da20b95f5c475cc74f2a7861a27e3
MIME type:image/svg+xml
File name:oneplus.svg
File size:323 bytes
SHA256 hash: a47e1e183fad9603b5ebc1381fbfd8d000ab0fccd02eb23f4cdd487166a767d6
MD5 hash: e35768c305be43d99f4e64054b3bf2d0
MIME type:image/svg+xml
File name:samsung.svg
File size:428 bytes
SHA256 hash: 21c9520ddbf4cf134c8d3c6027732c5845cf1b03100030f148dd181ea93bcae2
MD5 hash: ccb6a7a1f205c9360dbcfdbc4e3eaeb0
MIME type:image/svg+xml
File name:app.js
File size:35'253 bytes
SHA256 hash: d9c27ea15b0a380b970b8eca0d2abb34973888be9f5b65178ea8d558a3c09d0d
MD5 hash: 77d3ea9e31ce5b30ff156a53ae2c1ab9
MIME type:text/plain
File name:realme.svg
File size:285 bytes
SHA256 hash: 6a7aaadb95229aef3d7d4741fdd7520b3e0e7867aaf7552ddad256464684c23b
MD5 hash: 67ed617fd72e1ec616f8274edf12ba94
MIME type:image/svg+xml
File name:i18n.js
File size:48'907 bytes
SHA256 hash: 621463eb73a9dd7e891c77e6523b93e044be1fca12044dc15ededcd91dbd086f
MD5 hash: 9ead00a62355184da38652c4d4ac888c
MIME type:text/plain
File name:zte.svg
File size:256 bytes
SHA256 hash: d227f40146513c897bc412106643b21609ede2baf69680458839face881f52b8
MD5 hash: eae20d4550db467cd3a0951d5ee6c4e4
MIME type:image/svg+xml
File name:huawei.svg
File size:792 bytes
SHA256 hash: fb5ff26c86731013b9b209b7c91b2d30c8a00d0473c591a16dbcbfe1d8207a1f
MD5 hash: acff233c917e2ad995cc29dc75c0809b
MIME type:image/svg+xml
File name:vivo.svg
File size:279 bytes
SHA256 hash: 09c7795c6b847b1f1294819ae9b553444eb8d5f64463c58b0e07f05d277d1406
MD5 hash: a28e8e21a7625b7833592c6a56763bca
MIME type:image/svg+xml
File name:lenovo.svg
File size:351 bytes
SHA256 hash: 420340ac1375bd9e75d18683d56bdea14728a52419b434f371aede16143859ff
MD5 hash: 5fe6630624bbe85651d5916d2ac9181a
MIME type:image/svg+xml
File name:poco.svg
File size:345 bytes
SHA256 hash: 27fce96cdd6e4eb4f91f4cb33822f2bda722c5d42df9fba309cd8476974f40eb
MD5 hash: 0496310f001ca31858d56a75016069f6
MIME type:image/svg+xml
File name:catalog.js
File size:7'494 bytes
SHA256 hash: 50cc8c0037084ed23556bf683ffdb7e5afcfb325d26c18b296fe9cbbcfad6bdb
MD5 hash: bebb9415457d05fea0c44f946c75458a
MIME type:text/plain
File name:nothing.svg
File size:3'924 bytes
SHA256 hash: e131c95a110fd4385a8d27f52b87a8be3fa183f8e14e3f1a63551e4588a5903e
MD5 hash: 4e8b3d7317f728f0afdafd6f9f3fa5aa
MIME type:image/svg+xml
File name:xiaomi.svg
File size:326 bytes
SHA256 hash: d2c16285034d917df6a787a71ce65e4d3c57e995511aea3e46034b1fc7873c22
MD5 hash: 736414e8c4126a34241482d7bf78b7af
MIME type:image/svg+xml
File name:asus.svg
File size:357 bytes
SHA256 hash: 1c7e88a1766ec199212f94d04068be4b3c007c461a4317f0ab4365de796f3599
MD5 hash: 4e35abeb4e632954fc420489ab9ab6bb
MIME type:image/svg+xml
File name:index.html
File size:25'264 bytes
SHA256 hash: 9e5e1c28750d98a2cb619dce74f1f181d61a983dbcfd59f81c79a306362098e5
MD5 hash: 0caf469551159a26df84447d1cc752e0
MIME type:text/html
File name:honor.svg
File size:281 bytes
SHA256 hash: 4a6d2bd46f87bb3abf9e7cafc7672e3803a542868a712d87fb1195d36d1afbb7
MD5 hash: 1c83c4ddfcc66449e1f84847b9c0ab73
MIME type:image/svg+xml
File name:graphite.css
File size:4'623 bytes
SHA256 hash: 5433af08377ee81c263add17e6cf29a2c6ce4fd88cd14fe7ded7bb3823bb6790
MD5 hash: 1a702810fe6b9a561a63b5dea3f1cc6a
MIME type:text/x-asm
File name:README.txt
File size:1'790 bytes
SHA256 hash: 03c9035f04271a7662c8370b8980b686bcf5e3eca0e8e4ffb91af4c9d5b88e1a
MD5 hash: 14f45a468e7e40556f0ebda3e4fb3547
MIME type:text/plain
File name:meizu.svg
File size:281 bytes
SHA256 hash: fc5cc541d5100955d645afeb00ca0b6175a349acbbe29fda401bba5591e1384e
MD5 hash: fb77d658323b6bb2a99bab013f29b4ee
MIME type:image/svg+xml
File name:motorola.svg
File size:370 bytes
SHA256 hash: 4f0797cfc661b6b274c63f343e891021366c75a1649feb99b2e84da6d745f894
MD5 hash: 6104b78db8c5affcb30729c20b87e95d
MIME type:image/svg+xml
File name:oppo.svg
File size:278 bytes
SHA256 hash: 24fd90d82541cdc58272159718fcdd0d400d1f834bfa190ed6e5b5a5dec90afd
MD5 hash: 2c05b3fda45002f329a2b8a5bc07eaeb
MIME type:image/svg+xml
File name:premium.css
File size:30'124 bytes
SHA256 hash: 91c5cac3ae43e1613aaf7fc9406bb6a0ce52d9f774f82318f817a3cbd26917e1
MD5 hash: fa74944e56977ed1f3ea8f33f2bc7495
MIME type:text/plain
File name:styles.css
File size:37'936 bytes
SHA256 hash: d4850f90295af365d9a5fae2a72a89ae6e66ad8910f17286426541e00bf3a3ee
MD5 hash: 0e366d8b6f3c0bc17f84934bbfc6f7ce
MIME type:text/plain
File name:nokia.svg
File size:283 bytes
SHA256 hash: 623c55e7cd10987009108b4a09a7d5039712d3fe21d548c888c8063b5afac960
MD5 hash: ba75ec761158916eddcbdda4105b2cba
MIME type:image/svg+xml
File name:sony.svg
File size:281 bytes
SHA256 hash: a5a77d9a01e4bf5c5633a8afbb88705c5afae9f65e73e24e014c579afbb88fbc
MD5 hash: c4b58b7877a0111ea3522a58e0c09277
MIME type:image/svg+xml
File name:tecno.svg
File size:302 bytes
SHA256 hash: 4c97394071b4562ff0d6f1a6b0fde9682555f1dcbf8e124e8ffe7f15823a277e
MD5 hash: f8d98a0e7209a1402800bdc7888a5260
MIME type:image/svg+xml
File name:google.svg
File size:695 bytes
SHA256 hash: 3d531818e804465d6c087b7f023149b581c071add45d114d9eb121da29bd1b29
MD5 hash: fdff4e73e50d5896eaf4a14c18398593
MIME type:image/svg+xml
File name:profile-report.js
File size:3'409 bytes
SHA256 hash: 6c79c3b4f02d5db311f2b4b5bde9d26515a49d7882734e549668db47de45320e
MD5 hash: 84e0f41ae57cabf3f24d551a2c6bebe9
MIME type:text/plain
File name:redmi.svg
File size:262 bytes
SHA256 hash: 19d6951e35dd6575e20e3a9173d0e6fb9285f8b961f921b3d9cdca281a1aa7e8
MD5 hash: 59417851c2cf0b980820bab08e2030a3
MIME type:image/svg+xml
File name:infinix.svg
File size:308 bytes
SHA256 hash: f6b16349e541403ab6d0aabb6e46fa12ef5371a1e6a75dbcbb0d9406ce599d76
MD5 hash: 2a575202df34622eddcd83f1367d6f0e
MIME type:image/svg+xml
Vendor Threat Intelligence
Details
Link:
https://research.acce.ciphertechsolutions.com/results/e07bee26-c00a-411d-afee-b0d37b99fe2b/
Verdict:
Unknown
Link:
https://www.hybrid-analysis.com/sample/2392b96d1433e44f19605fa3a90e79afc2d757fc73bade0400a8f87c6b5f2bed
Verdict:
Unknown
File Type:
zip
Link:
https://opentip.kaspersky.com/2392b96d1433e44f19605fa3a90e79afc2d757fc73bade0400a8f87c6b5f2bed/results?tab=lookup
Score:
93%
Verdict:
Malware
File Type:
ARCHIVE
Link:
https://malprob.io/report/2392b96d1433e44f19605fa3a90e79afc2d757fc73bade0400a8f87c6b5f2bed
Verdict:
inconclusive
YARA:
3 match(es)
Tags:
.Net Executable Managed .NET PDB Path PE (Portable Executable) PE File Layout SOS: 0.21 SVG Zip Archive
Link:
https://app.malva.re/file/6490c5ca43ac6b03b08b70da14e243b4
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/2392b96d1433e44f19605fa3a90e79afc2d757fc73bade0400a8f87c6b5f2bed/
Threat name:
Binary.Trojan.Generic
Create hunting rule
Status:
Suspicious
First seen:
2026-10-01 12:17:22 UTC
File Type:
Binary (Archive)
Extracted files:
88
AV detection:
3 of 24 (12.50%)
Threat level:
  5/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=eojls3iugpse6glal6r2sdtzv7bnov74oo5n4baavd4hy227fpwq._file
Result
Malware family:
n/a
Score:
  6/10
Tags:
adware defense_evasion discovery javascript spyware svg trojan
Link:
https://tria.ge/reports/261001-qk9e5ace68/
Behaviour
Enumerates system info in registry
Suspicious behavior: EnumeratesProcesses
Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
Suspicious use of AdjustPrivilegeToken
Suspicious use of WriteProcessMemory
Reads the TCP/IP host and domain name from the registry
Drops file in Program Files directory
Drops file in Windows directory
Checks whether UAC is enabled
Network Share Discovery
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Malicious File
Score:
1.00
Link:
https://yomi.yoroi.company/submissions/2392b96d1433e44f19605fa3a90e79afc2d757fc73bade0400a8f87c6b5f2bed

YARA Signatures

MalwareBazaar uses YARA rules from several public and non-public repositories, such as YARAhub and Malpedia. Those are being matched against malware samples uploaded to MalwareBazaar as well as against any suspicious process dumps they may create. Please note that only results from TLP:CLEAR rules are being displayed.

Rule name:Check_OutputDebugStringA_iat
Create hunting rule
Rule name:cobalt_strike_tmp01925d3f
Create hunting rule
Author:The DFIR Report
Description:files - file ~tmp01925d3f.exe
Reference:https://thedfirreport.com
Rule name:DebuggerCheck__API
Create hunting rule
Reference:https://github.com/naxonez/yaraRules/blob/master/AntiDebugging.yara
Rule name:FreddyBearDropper
Create hunting rule
Author:Dwarozh Hoshiar
Description:Freddy Bear Dropper is dropping a malware through base63 encoded powershell scrip.
Rule name:golang_bin_JCorn_CSC846
Create hunting rule
Author:Justin Cornwell
Description:CSC-846 Golang detection ruleset
Rule name:pe_detect_tls_callbacks
Create hunting rule
Rule name:PE_Digital_Certificate
Create hunting rule
Author:albertzsigovits
Rule name:pe_no_import_table
Create hunting rule
Description:Detect pe file that no import table
Rule name:svg_auto_payload_download
Create hunting rule
Author:Anish Bogati
Description:Detects suspicious SVG files with auto payload download behavior.
Rule name:telebot_framework
Create hunting rule
Author:vietdx.mb
Rule name:TH_AntiVM_MassHunt_Win_Malware_2026_CYFARE
Create hunting rule
Author:CYFARE
Description:Detects Windows malware employing anti-VM / anti-sandbox evasion techniques across VMware, VirtualBox, Hyper-V, QEMU, Xen, and generic sandbox environments
Reference:https://cyfare.net/
Rule name:TigerRAT_pe_yaraify
Create hunting rule
Author:hunts-yara-code
Description:YARAify-tightened byte rule from 9 sample(s) -- VERIFY hits
Rule name:VECT_Ransomware
Create hunting rule
Author:Mustafa Bakhit
Description:Detects activity associated with VECT ransomware. This includes registry modifications and deletions, execution of system and defense-evasion commands, suspicious API usage, mutex creation, file and memory manipulation, ransomware note generation, anti-debugging and anti-analysis techniques, and embedded cryptographic constants (SHA256) characteristic of this malware family. Designed for threat intelligence and malware detection environments.
Rule name:WIN_Sample_Unique_69354b41
Create hunting rule
Author:Marjoriefort
Description:Specimen unique (soumission Bazaar) - strings distinctifs propres au sample
Reference:69354b41e10daf03d3f3af881b32d5c0fec56b1cfe96629fd4c5263413a42854.exe

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Web download

zip 2392b96d1433e44f19605fa3a90e79afc2d757fc73bade0400a8f87c6b5f2bed

(this sample)

  
Delivery method
Distributed via web download

Comments