MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 4cf36c2ac69e855ab8fb22475cd282259fb1fe1483914bbcf7dbae073d724e85. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	4cf36c2ac69e855ab8fb22475cd282259fb1fe1483914bbcf7dbae073d724e85
SHA3-384 hash:	7a8dfccc2a97cec50e752cf2454fea1a869c7b37b9d1e4308f550dc815ad573dfc24057cd193fcbad37da3b3e2807746
SHA1 hash:	43ff88f7582e8bc01ce43762562173ea5ed4eeee
MD5 hash:	18b6ac259e3b39bc8dc5c0f0ae069d34
humanhash:	low-avocado-carolina-alabama
File name:	MO_TA_CONG_VIEC.vhdx
Download:	download sample
File size:	104'857'600 bytes
First seen:	2026-10-14 08:53:46 UTC
Last seen:	Never
File type:	VHDX
MIME type:	application/octet-stream
ssdeep	1572864:3sDJ1AHlmgd+RBwcmYZP5BqRzgPzUjKQfjS:3O6l1dCAYZqyrRQ7
TLSH	T13938130357CC22BFC1EA9A3E86B54712DB35BD255313679716607AA01E7B308AEBF311
Magika	iso
Reporter	smica83
Tags:	vhdx

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

91

Origin country :

HU

File Archive Information

This file archive contains 7 file(s), sorted by their relevance:

Potential files of interest 4

File name:	Start_MO_TA.exe
File size:	46'632 bytes
SHA256 hash:	7410599261912ddd9f7136bf1142bd14358beefa4126cde47e18fc9f6606a569
MD5 hash:	ac1d6e39956f1924dac0b0ff6a83c5fe
MIME type:	application/x-dosexec

File name:	M__T___C_NG_VI_C.lnk
File size:	1'365 bytes
SHA256 hash:	5dce1eb840e170e23ee2795225e28c1cba8692ad8aa04609b1131977db898315
MD5 hash:	e8060b86cb84123c8c4bcde30ff5f3c3
MIME type:	application/octet-stream

File name:	newton.dll
File size:	51'712 bytes
SHA256 hash:	64fb9ac36702d48fc560e134ad65c5de638212bf10f1489fdb63960cd3c3b3af
MD5 hash:	97ddd1c3e11539611b91b31a79f84705
MIME type:	application/x-dosexec

File name:	__mrzhen.mkv
File size:	3'354'320 bytes
SHA256 hash:	dc0291966214c8794c72e946f18c3e945c3c8a5217754fd033106a1252e43d69
MD5 hash:	0195ae6b73b9e4a12302c531388f862e
MIME type:	application/x-dosexec

Other files 3

File name:	__Config.msf
File size:	50'153'270 bytes
SHA256 hash:	fc741734fd8fab22084295105ac6ea107dab59b94b44f0f1bbc795ada10ea41c
MD5 hash:	2230ce25b901df76c9203e2fe16b7571
MIME type:	application/x-rar

File name:	__script.bat
File size:	559 bytes
SHA256 hash:	73d65536eed1ef68b2e7f3de401a2f8faaa380fa8e4a6c9027573aca1e675878
MD5 hash:	44fe06ead5315dc69dcd5adbfc2e3a48
MIME type:	text/plain

File name:	Start_MO_TA.exe.config
File size:	463 bytes
SHA256 hash:	7c5b1f56058026906589ff8c38a108cd9e0bacf93163541e9ad4351ccd2ab529
MD5 hash:	f0b21427f6998e2ab68f7e40cbae419f
MIME type:	text/xml

Vendor Threat Intelligence

CyberFortress Malicious

Verdict:

Malicious

Score:

70%

Link:

https://cyber-fortress.com/docs/result/index.php?id=6ad13ab66f551121ba164caa

Tags:

malware

Hybrid Analysis Trojan.Generic

Verdict:

Suspicious

Labled as:

Trojan.Generic

Link:

https://www.hybrid-analysis.com/sample/4cf36c2ac69e855ab8fb22475cd282259fb1fe1483914bbcf7dbae073d724e85

Kaspersky OpenTIP Malicious

Verdict:

Malicious

File Type:

discimage.vhdx

First seen:

2026-10-14T07:20:00Z UTC

Last seen:

2026-10-14T07:32:00Z UTC

Hits:

~10

Link:

https://opentip.kaspersky.com/4cf36c2ac69e855ab8fb22475cd282259fb1fe1483914bbcf7dbae073d724e85/results?tab=lookup

CERT.PL MWDB

Gathering data

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=jtzwykwgt2cvvoh3ejdvzuucewp3d7quqoiuxphx3oxaoplsj2cq._file

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.