MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 3f06724955b52d95fe12d1182dd1ca97a012b1d86d335a241ea80ef7a8c20991. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	3f06724955b52d95fe12d1182dd1ca97a012b1d86d335a241ea80ef7a8c20991
SHA3-384 hash:	05df9b34537afd95190cb50adabcf07e8d47f82f1717a03dc59595a9c3bdf2da4da5af37207f1e79aab9e70709c14cb3
SHA1 hash:	8ea21481ac39e91369ba60d62cf6d37a7a46df4b
MD5 hash:	658982da6b6b48780e3e4bdef8824c1a
humanhash:	harry-mars-xray-rugby
File name:	nOC-756456897567897.z
Download:	download sample
File size:	31'617 bytes
First seen:	2026-08-21 17:01:17 UTC
Last seen:	Never
File type:	z
MIME type:	application/x-rar
ssdeep	384:he0c1rf0AI/tjNq7yojpjZ21BjX8rAoaWoOXTLg4ap5E0bU9FZyjZbKd5TVVv:k2ltE7yojpjZ87sAxWoALcfEz9G4/hR
TLSH	T151E25B253749D3EFC0D6E5649B23FC5C3F603E3E9918B2EAF2925BCB4688845AD52131
TrID	61.5% (.RAR) RAR compressed archive (v5.0) (8000/1) 38.4% (.RAR) RAR compressed archive (gen) (5000/1)
Magika	rar
Reporter	FXOLabs
Tags:	z

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

52

Origin country :

US

File Archive Information

This file archive contains 1 file(s), sorted by their relevance:

Other files 1

File name:	OC-756456897567897578786756.js
File size:	232'783'872 bytes
SHA256 hash:	74fcd7765e9fbad111c184e6cfef65cc0b21e14f9b498e35b21b3d03f19725c2
MD5 hash:	94d401226241c6824ba433ab1f2ce03e
MIME type:	text/plain

Vendor Threat Intelligence

ACCE Rar_Archive

Details

Link:

https://research.acce.ciphertechsolutions.com/results/9f7ff870-ccfb-4727-b6e1-25c1973732f1/

ClamAV Detected

Detection(s):

Sanesecurity.Foxhole.JS_Rar_1.UNOFFICIAL

Alert

Create hunting rule

SecuriteInfo.com.Suspicious-Rar-JS.UNOFFICIAL

Alert

Create hunting rule

CyberFortress Clean

Verdict:

Clean

Score:

99.9%

Link:

https://cyber-fortress.com/docs/result/index.php?id=6ac34b69650dd7cf11e8fa53

Tags:

n/a

Hybrid Analysis Unknown

Verdict:

Unknown

Link:

https://www.hybrid-analysis.com/sample/3f06724955b52d95fe12d1182dd1ca97a012b1d86d335a241ea80ef7a8c20991

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/3f06724955b52d95fe12d1182dd1ca97a012b1d86d335a241ea80ef7a8c20991/

ReversingLabs TitaniumCloud Win32.Trojan.Vigorf

Threat name:

Win32.Trojan.Vigorf

Alert

Create hunting rule

Status:

Malicious

First seen:

2026-08-21 17:01:32 UTC

AV detection:

6 of 23 (26.09%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=h4dheskvwuwzl7qs2emc3uoks6qbfmoynuzvuja6vahppkgcbgiq._file

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Malicious File

Threat name:

Malicious File

Score:

1.00

Link:

https://yomi.yoroi.company/submissions/3f06724955b52d95fe12d1182dd1ca97a012b1d86d335a241ea80ef7a8c20991