MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 33c8aee0af09b5f381e3040254abc393fffe6801cbc319369419d7bdd4e3d07c. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	33c8aee0af09b5f381e3040254abc393fffe6801cbc319369419d7bdd4e3d07c
SHA3-384 hash:	db600fb261f690c45f696863e12dcf46325814024958f76da0df0f5500d7bb8ab10ee89567163921da1e8320db631d72
SHA1 hash:	c5a7b6dae327a40741bac44d7498bb0fa42c893d
MD5 hash:	259d4c1efa85f363a8d7c786758062ff
humanhash:	golf-snake-freddie-london
File name:	SETUP.zip
Download:	download sample
Signature	ACRStealer Alert Create hunting rule
File size:	36'889'301 bytes
First seen:	2026-09-12 13:55:36 UTC
Last seen:	Never
File type:	zip
MIME type:	application/zip
ssdeep	786432:ceSaJoB7JGphQ0RkSNNHPy1SOHT0ZdeGqEkK4CdH15SB1PbgxiVQikRJ:cb9YnNFYScxEV3ViDgYVQHRJ
TLSH	T19A8733FC74B5B91AF594437BC2851CFADB2CA580D7993E8B8E2081467D8310F5FAB864
Magika	zip
Reporter	aachum
Tags:	ACRStealer sync-canyonmere-cc zip

iamaachum

https://wfmner.it.com/ => https://www.mediafire.com/file/ocjn9e4esn3jscc/SETUP_INSTALLER_(PASS=3791).zip/file

ACRStealer C2:
sync.canyonmere.cc

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

78

Origin country :

ES

Vendor Threat Intelligence

ACCE

Gathering data

Hybrid Analysis Unknown

Verdict:

Unknown

Link:

https://www.hybrid-analysis.com/sample/33c8aee0af09b5f381e3040254abc393fffe6801cbc319369419d7bdd4e3d07c

Nucleon Malprob Benign

Score:

24%

Verdict:

Benign

File Type:

ARCHIVE

Link:

https://malprob.io/report/33c8aee0af09b5f381e3040254abc393fffe6801cbc319369419d7bdd4e3d07c

CERT.PL MWDB

Gathering data

ReversingLabs TitaniumCloud Binary.Trojan.Generic

Threat name:

Binary.Trojan.Generic

Alert

Create hunting rule

Status:

Suspicious

First seen:

2026-09-12 13:56:38 UTC

File Type:

Binary (Archive)

Extracted files:

495

AV detection:

5 of 36 (13.89%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=gpek5yfpbg27hapdaqbfjk6dsp7742abzpbrsnuudhl33vhd2b6a._file

Hatching Triage

Gathering data

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/33c8aee0af09b5f381e3040254abc393fffe6801cbc319369419d7bdd4e3d07c