MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 53e61067c0f26d6d127ceed558a5ea4f3058ea46990c7221bbf039e7cefbee9e. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	53e61067c0f26d6d127ceed558a5ea4f3058ea46990c7221bbf039e7cefbee9e
SHA3-384 hash:	37abe4dd70103948f27dab903d9a2aafbce7498bc7ffa99a2554579c5c68c473ee7ae76eb632c742113b4aa658016f70
SHA1 hash:	d436df52b47fc2181bdce97c73c1452761c14375
MD5 hash:	3feb95b3d2801fb6e8b0aa554983990c
humanhash:	virginia-august-alanine-spaghetti
File name:	PlanetsTherapy.rar
Download:	download sample
Signature	EpsilonStealer Alert Create hunting rule
File size:	74'910'584 bytes
First seen:	2024-01-13 22:02:35 UTC
Last seen:	Never
File type:	rar
MIME type:	application/x-rar
Note:	This file is a password protected archive. The password is: beta
ssdeep	1572864:DxDNYgmsY++JEXG5lAv+PQUnxUXTdVB15PjMPnK8gGnShqvo9:tGeY++ut+P/nxKdVtPj8K8tSWo9
TLSH	T1CFF733FFE7A0E710248E56A7E114421D401C0FCC9397B79FC04BB23926BB6E995FA562
TrID	61.5% (.RAR) RAR compressed archive (v5.0) (8000/1) 38.4% (.RAR) RAR compressed archive (gen) (5000/1)
Reporter	beansoup
Tags:	discord EpsilonStealer PlanetsTherapy pw-beta rar

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

156

Origin country :

NL

File Archive Information

This file is a password protected archive. The password is: beta

This file archive contains 1 file(s), sorted by their relevance:

Relevant files 1

File name:	PlanetsTherapy.exe
File size:	74'793'161 bytes
SHA256 hash:	1f75823631e70c74d3c906e6e51bd24d6e109729a8dc703aa712e8174e208330
MD5 hash:	fd4dbfa9eedeb18ec739a5f20efdcbd0
MIME type:	application/x-dosexec
Signature	EpsilonStealer

Vendor Threat Intelligence

FileScan.io

Gathering data

Hybrid Analysis Unknown

Verdict:

Unknown

Link:

https://www.hybrid-analysis.com/sample/53e61067c0f26d6d127ceed558a5ea4f3058ea46990c7221bbf039e7cefbee9e

InQuest MALICIOUS

Result

Verdict:

MALICIOUS

CERT.PL MWDB

Gathering data

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=kptbaz6a6jww2et453kvrjpkj4yfr2sgteghein36a46ptx352pa._file

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.