MalwareBazaar Database
You are currently viewing the MalwareBazaar entry for SHA256 3eaf786bfb4ae5688b347511f98d74c948b7dc0749558acbdc6bbe33dcfa3a61. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.
Database Entry
Threat unknown
Vendor detections: 5
| SHA256 hash: | 3eaf786bfb4ae5688b347511f98d74c948b7dc0749558acbdc6bbe33dcfa3a61 |
|---|---|
| SHA3-384 hash: | aa1cc19411d5bc3e8273ca4e4448b9b0b9ef2c6e24e90edfe3105a9e92f1eda22ded00800477dee87bc6055f3d7998a7 |
| SHA1 hash: | b02d6b80c14bc5556bd7eaa6f1bc502b59818f90 |
| MD5 hash: | b385111d6599a30210b7be8f7674a163 |
| humanhash: | sad-batman-lima-five |
| File name: | Grape2.zip |
| Download: | download sample |
| File size: | 83'160'207 bytes |
| First seen: | 2026-08-09 16:13:37 UTC |
| Last seen: | Never |
| File type: | zip |
| MIME type: | application/zip |
| ssdeep | 1572864:I80lOfrXk1EbPDfKyeVk0uJgxPGogagKCOgejVn6ZO5P5hRJ2mN:wGrXkKjDfheCXSxPPMFOgeZnQAP5hjFN |
| TLSH | T1D808334CC3F4900EF95175B56A743CED82011CEE42BA6A62E25FD28DB1AD9F2C371D92 |
| Magika | zip |
| Reporter |  skocherhan |
| Tags: | 203-188-171-166 crystalmorrowlighthouse-com file-host-alpha-vercel-app zip |
Intelligence
File Origin
# of uploads :
1
# of downloads :
65
Origin country :
GBVendor Threat Intelligence
Verdict:
Suspicious
Score:
50%
Tags:
infosteal
Verdict:
Malicious
File Type:
zip
First seen:
2026-08-10T08:27:00Z UTC
Last seen:
2026-08-10T21:41:00Z UTC
Hits:
~10
Score:
5%
Verdict:
Benign
File Type:
ARCHIVE
Gathering data
Threat name:
Script-JS.Malware.Heuristic
Status:
Malicious
First seen:
2026-08-08 15:51:47 UTC
File Type:
Binary (Archive)
Extracted files:
6158
AV detection:
3 of 24 (12.50%)
Threat level:
2/5
Detection(s):
Suspicious file
Please note that we are no longer able to provide a coverage score for Virus Total.
File information
The table below shows additional information about this malware sample such as delivery method and external references.
ps1 zip 3eaf786bfb4ae5688b347511f98d74c948b7dc0749558acbdc6bbe33dcfa3a61
(this sample)
Comments
Login required
You need to login to in order to write a comment. Login with your abuse.ch account.