MalwareBazaar Database
You are currently viewing the MalwareBazaar entry for SHA256 62d8401ee3672901817566623194efdbdcabc03f66f05b3aa3a90c18a56dfd15. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.
Database Entry
Threat unknown
Vendor detections: 4
| SHA256 hash: | 62d8401ee3672901817566623194efdbdcabc03f66f05b3aa3a90c18a56dfd15 |
|---|---|
| SHA3-384 hash: | ea0746ef26c1b0f801d3ecc2580751ca307f68342334a0f3efff6b5be3a63263c5a614f381b29ea37fc4fc9d728721cf |
| SHA1 hash: | 13fe430a7788ff6385766e4c99d8df061885355d |
| MD5 hash: | be3fc5d9f57cd3fe29c269d61fe052aa |
| humanhash: | fix-idaho-magazine-emma |
| File name: | 62d8401ee3672901.bin |
| Download: | download sample |
| File size: | 5'307'503 bytes |
| First seen: | 2026-09-28 14:25:04 UTC |
| Last seen: | Never |
| File type: | zip |
| MIME type: | application/zip |
| ssdeep | 98304:WCIS99R51rxzG45JSYuNrFI9FghQACMlJ7s/zSt/sto+h6Z:WCr1rVG45JSYuWFgY4iKsxhS |
| TLSH | T1273633BF42D95AB9E803B4D780B5D6621E26F1419CBEE08964414E8F7BCCB5ACD4CDB0 |
| Magika | zip |
| Reporter |  whack_sh |
| Tags: | zip |
Intelligence
File Origin
# of uploads :
1
# of downloads :
68
Origin country :
USVendor Threat Intelligence
Verdict:
Clean
Score:
99.9%
Tags:
n/a
Verdict:
Unknown
File Type:
zip
Score:
0%
Verdict:
Benign
File Type:
ARCHIVE
Verdict:
inconclusive
YARA:
2 match(es)
Tags:
Zip Archive
Threat name:
Binary.Trojan.Generic
Status:
Suspicious
First seen:
2026-09-19 12:40:12 UTC
File Type:
Binary (Archive)
Extracted files:
50
AV detection:
4 of 24 (16.67%)
Threat level:
5/5
Detection(s):
Suspicious file
Result
Malware family:
n/a
Score:
3/10
Tags:
discovery
Behaviour
Checks processor information in registry
Enumerates system info in registry
Modifies registry class
Suspicious behavior: EnumeratesProcesses
Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
Suspicious use of FindShellTrayWindow
Suspicious use of SendNotifyMessage
Suspicious use of WriteProcessMemory
Browser Information Discovery
System Time Discovery
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Suspicious File
Score:
0.35
File information
The table below shows additional information about this malware sample such as delivery method and external references.
Web download
zip 62d8401ee3672901817566623194efdbdcabc03f66f05b3aa3a90c18a56dfd15
(this sample)
Delivery method
Distributed via web download
Comments
Login required
You need to login to in order to write a comment. Login with your abuse.ch account.