MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 3268b11bbde0c9c34672f53764bc9aa80a68cb697ebaab9f102965129d3a8c5a. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	3268b11bbde0c9c34672f53764bc9aa80a68cb697ebaab9f102965129d3a8c5a
SHA3-384 hash:	b590b181d9fbe56447707237d35821bc7f99f3b4abf750f92a253ef3ee869325601049a583e69bfc63ba04bc050db0eb
SHA1 hash:	516a6f2cbfb2f9113742a584a66725ac57338ee2
MD5 hash:	d8db0727eeda4b40272cc779c87cf93f
humanhash:	oregon-burger-december-enemy
File name:	Banco BPM_Bonifico Bancario.pdf.7z
Download:	download sample
Signature	Koadic Alert Create hunting rule
File size:	1'727 bytes
First seen:	2026-05-20 15:50:10 UTC
Last seen:	Never
File type:	7z
MIME type:	application/x-7z-compressed
ssdeep	48:juRUmhzDuVwnvltStFZ8p7fUV7Fkxv0yS6ZDS4/+xkBAzw+:iRUmhbvf+F8MV7CbpT/+kB4w+
TLSH	T11B316D3D50030CB5F7EADA37531B6CD000B5994D3E384604647A9341DD367735E01A9E
TrID	57.1% (.7Z) 7-Zip compressed archive (v0.4) (8000/1) 42.8% (.7Z) 7-Zip compressed archive (gen) (6000/1)
Magika	sevenzip
Reporter	ShadowOpCode
Tags:	151-243-109-130 7z Koadic

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

69

Origin country :

IT

File Archive Information

This file archive contains 1 file(s), sorted by their relevance:

Relevant files 1

File name:	Banco BPM_Bonifico Bancario.pdf.bat
File size:	17'554 bytes
SHA256 hash:	125cc565e77c6db7dd998a8c7752c4087e2cf86bff5da96bced74640a042f6a1
MD5 hash:	3c75ef5928a2eecdfba69f5e70351a13
MIME type:	text/x-msdos-batch
Signature	Koadic

Vendor Threat Intelligence

ACCE Unknown

No detections

ClamAV Detected

Detection(s):

Sanesecurity.Foxhole.7z_pdf.UNOFFICIAL

Alert

Create hunting rule

CyberFortress Malicious

Verdict:

Malicious

Score:

91.7%

Link:

https://cyber-fortress.com/docs/result/index.php?id=6a0dcc4b4159ce11f601b655

Tags:

obfuscated shell sage

DocGuard Malicious

Result

Verdict:

Malicious

File Type:

Bat File

Link:

https://app.docguard.net/3268b11bbde0c9c34672f53764bc9aa80a68cb697ebaab9f102965129d3a8c5a/results/dashboard

FileScan.IO Malicious

Verdict:

Malicious

Threat level:

  10/10

Confidence:

100%

Tags:

masquerade obfuscated powershell

Link:

https://www.filescan.io/uploads/6a0dd84befbd399b39bfd46d/reports/767cebfb-9b46-4675-b330-2c910427327a/overview

Hybrid Analysis Unknown

Verdict:

Unknown

Link:

https://www.hybrid-analysis.com/sample/3268b11bbde0c9c34672f53764bc9aa80a68cb697ebaab9f102965129d3a8c5a

Kaspersky OpenTIP Malicious

Verdict:

Malicious

File Type:

7z

First seen:

2026-05-20T07:36:00Z UTC

Last seen:

2026-05-21T08:44:00Z UTC

Hits:

~10

Link:

https://opentip.kaspersky.com/3268b11bbde0c9c34672f53764bc9aa80a68cb697ebaab9f102965129d3a8c5a/results?tab=lookup

Nucleon Malprob Malware

Score:

90%

Verdict:

Malware

File Type:

ARCHIVE

Link:

https://malprob.io/report/3268b11bbde0c9c34672f53764bc9aa80a68cb697ebaab9f102965129d3a8c5a

Malva.RE

Gathering data

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/3268b11bbde0c9c34672f53764bc9aa80a68cb697ebaab9f102965129d3a8c5a/

ReversingLabs TitaniumCloud Win32.Trojan.Malgent

Threat name:

Win32.Trojan.Malgent

Alert

Create hunting rule

Status:

Malicious

First seen:

2026-05-20 15:50:49 UTC

File Type:

Binary (Archive)

Extracted files:

1

AV detection:

13 of 24 (54.17%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=gjulcg554de4grts6u3wjpe2vafgrs3jp25kxhyqffsrfhj2rrna._file

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Malicious File

Threat name:

Malicious File

Score:

1.00

Link:

https://yomi.yoroi.company/submissions/3268b11bbde0c9c34672f53764bc9aa80a68cb697ebaab9f102965129d3a8c5a