MalwareBazaar Database
You are currently viewing the MalwareBazaar entry for SHA256 614ba1acb334bf24a690ec2b75bd749baa05095cf2faf86a93d49ce69fad57bd. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.
Database Entry
Threat unknown
Vendor detections: 5
| SHA256 hash: | 614ba1acb334bf24a690ec2b75bd749baa05095cf2faf86a93d49ce69fad57bd |
|---|---|
| SHA3-384 hash: | 7ef598a6362569e6d983f9b36ca46c00fff915e380e5c063503db0338bf36777d972b626b52e9cb8f90975de51766460 |
| SHA1 hash: | 26b1ffc3b71796593060d7418692c30d0f21d773 |
| MD5 hash: | 620f2d3525d119276acef8b8deba4422 |
| humanhash: | eight-summer-hydrogen-uncle |
| File name: | 614ba1acb334bf24a690ec2b75bd749baa05095cf2faf86a93d49ce69fad57bd.zip |
| Download: | download sample |
| File size: | 16'996'208 bytes |
| First seen: | 2026-01-16 18:13:03 UTC |
| Last seen: | 2026-01-16 19:08:30 UTC |
| File type: | zip |
| MIME type: | application/zip |
| ssdeep | 393216:LLyPWyYeXoni/0mp7A7SHFSutZpTIdB+ny3v6Q2:XOtoniVzsCpM+y3vY |
| TLSH | T1AA07338EE57505E5D6C25F8CF121EE29838D3EB66EC2D6D9D2707130CDE0096CAB86C9 |
| Magika | zip |
| Reporter |  johnk3r |
| Tags: | 007consultoriafinanceira-net banker docsmoonstudioclayworks-site Ghost zip |
Intelligence
File Origin
# of uploads :
2
# of downloads :
133
Origin country :
CHFile Archive Information
This file archive contains 1 file(s), sorted by their relevance:
| File name: | installer2.msi |
|---|---|
| File size: | 17'068'032 bytes |
| SHA256 hash: | 2cbafc607c5d38a891ab89799f98b6b754b519706eb6597e4c4f2d4f6fc5db21 |
| MD5 hash: | bc7b9acee0db48efa0a9bc795fa4ec5c |
| MIME type: | application/x-msi |
Vendor Threat Intelligence
Verdict:
Malicious
Score:
70%
Tags:
shellcode backdoor dropper
Result
Verdict:
Clean
File Type:
MSI File
Verdict:
Likely Malicious
Threat level:
7.5/10
Confidence:
100%
Tags:
anti-debug fingerprint installer installer keylogger obfuscated
Result
Verdict:
UNKNOWN
Link:
Gathering data
Detection(s):
Suspicious file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Legit
Score:
0.05
File information
The table below shows additional information about this malware sample such as delivery method and external references.
vbs zip 614ba1acb334bf24a690ec2b75bd749baa05095cf2faf86a93d49ce69fad57bd
(this sample)
msi Delivery method
Distributed via web download
Comments
Login required
You need to login to in order to write a comment. Login with your abuse.ch account.