MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 2df4f4c0b77671fcbadccb2189e3de9fb4fbca0052bc41ef82d58af056bd6dca. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	2df4f4c0b77671fcbadccb2189e3de9fb4fbca0052bc41ef82d58af056bd6dca
SHA3-384 hash:	fd3a29c5bdb4347b7a39c47144a775942adda5023e251a41ac8c679f206f43048170b5c66435464baab403ea1e8beca2
SHA1 hash:	cfa53a09b711e5e17652cf723e0bcab5a0a456e2
MD5 hash:	291fbeb8973b1f00b8217739ab8a5ad7
humanhash:	october-oregon-sierra-idaho
File name:	SETUP.zip
Download:	download sample
Signature	ACRStealer Alert Create hunting rule
File size:	29'153'573 bytes
First seen:	2026-06-18 14:13:16 UTC
Last seen:	Never
File type:	zip
MIME type:	application/zip
ssdeep	786432:Y3ZEik7xM4P8AJpAJAQDLNXBR4dcVVBIQOK/VE:EtBgNAJAQD5XBR4dciOE
TLSH	T1D6573369D601CF41C56FED3E84D6525AB6BB9A29097BC02B03EC96CF3CE2E8D975100D
Magika	zip
Reporter	aachum
Tags:	ACRStealer stream-pawpalace-cc zip

iamaachum

https://bestproviders.org/ => https://www.mediafire.com/file/o57u2y5iu7z4oxk/SETUP_FILE_(PASS$_KEY=2114)).zip/file

ACRStealer C2: stream.pawpalace.cc

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

82

Origin country :

ES

Vendor Threat Intelligence

ACCE Zip_Archive

Details

Link:

https://research.acce.ciphertechsolutions.com/results/f1cf0628-8f1f-47c7-b20a-dbf4330cc985/

CyberFortress Malicious

Verdict:

Malicious

Score:

70%

Link:

https://cyber-fortress.com/docs/result/index.php?id=6a33fe0886bc95245bf79f24

Tags:

ransomware injection dropper

Hybrid Analysis Unknown

Verdict:

Unknown

Link:

https://www.hybrid-analysis.com/sample/2df4f4c0b77671fcbadccb2189e3de9fb4fbca0052bc41ef82d58af056bd6dca

Kaspersky OpenTIP Malicious

Verdict:

Malicious

File Type:

zip

First seen:

2026-06-18T10:28:00Z UTC

Last seen:

2026-06-18T12:52:00Z UTC

Hits:

~10

Link:

https://opentip.kaspersky.com/2df4f4c0b77671fcbadccb2189e3de9fb4fbca0052bc41ef82d58af056bd6dca/results?tab=lookup

Nucleon Malprob Susipicious

Score:

38%

Verdict:

Susipicious

File Type:

ARCHIVE

Link:

https://malprob.io/report/2df4f4c0b77671fcbadccb2189e3de9fb4fbca0052bc41ef82d58af056bd6dca

Malva.RE

Gathering data

CERT.PL MWDB

Gathering data

ReversingLabs TitaniumCloud Win32.Trojan.Generic

Threat name:

Win32.Trojan.Generic

Alert

Create hunting rule

Status:

Suspicious

First seen:

2026-06-18 14:14:58 UTC

File Type:

Binary (Archive)

Extracted files:

603

AV detection:

5 of 24 (20.83%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=fx2pjqfxozy7zow4zmqyty66t62pxsqakk6ed34c2wfpavv5nxfa._file

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/2df4f4c0b77671fcbadccb2189e3de9fb4fbca0052bc41ef82d58af056bd6dca