MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 7b37f2f7b933f42fc81f05d9eacc0ef5d99099ab0672cc98ea57872a29e75dd7. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	7b37f2f7b933f42fc81f05d9eacc0ef5d99099ab0672cc98ea57872a29e75dd7
SHA3-384 hash:	b8adfd7ac5f6c541aa7ddae642d25dbcd3cdcb69bf2d5ac9d8742c881f78f88acb61847f1bdc7900572b2959461aec37
SHA1 hash:	49c4896060b45a885b57e08fbfdc9c74c71b5bd8
MD5 hash:	46b0d4a02d84d3a3ec0e0024bf0d070e
humanhash:	blue-summer-hawaii-glucose
File name:	python312.7z
Download:	download sample
File size:	14'060'707 bytes
First seen:	2025-12-18 14:56:52 UTC
Last seen:	Never
File type:	7z
MIME type:	application/x-7z-compressed
ssdeep	196608:E29iMH8Hprouoo5QUxZ+MHAqw/TYi924n8DrVg1+GZ5dQ82jFChEg+g8Hjn:/0pzbxdAT924n8Dhg/5dQ81hEhjjn
TLSH	T195E633C0BD062B00C0DE24BC176E181AE2F3B2FA1918BF874597D8557A997ADF0DB257
TrID	57.1% (.7Z) 7-Zip compressed archive (v0.4) (8000/1) 42.8% (.7Z) 7-Zip compressed archive (gen) (6000/1)
Magika	sevenzip
Reporter	johnk3r
Tags:	7z aassdd-pro banker modulowinapp-com newkget-com

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

49

Origin country :

CH

File Archive Information

This file archive contains 5 file(s), sorted by their relevance:

Potential files of interest 2

File name:
File size:	15'376'384 bytes
SHA256 hash:	6fb80bc2dea9f334731c800737543b96fb467a9f46fbb56302f4f146d67756c1
MD5 hash:	27d7f4e2fb4004c5830e205187f49eab
MIME type:	application/octet-stream

File name:	python312.dll
File size:	149'610'496 bytes
SHA256 hash:	50e47209efb4d29cde5894489e96ee5957b4c43e7baf11f6e3df3c464066043f
MD5 hash:	298c44a6615de8b879d7937fc1aadf31
MIME type:	application/x-dosexec

Other files 3

File name:	MAINICON
File size:	76 bytes
SHA256 hash:	a2b14c7d58c2d51b1ea0f740f4b27feea93c04f1860dd6b0dc08be4997aad9e4
MD5 hash:	e577c3800c40d5ccf27323e26c91152e
MIME type:	application/octet-stream

File name:	string.txt
File size:	76 bytes
SHA256 hash:	6c8e1efc5c21f61b7fd6cae67c7abf907da1b8dfcee8518dcee4477f8622d928
MD5 hash:	b60b306df07bed37481a3e08422fff3f
MIME type:	application/octet-stream

File name:	5
File size:	39'288 bytes
SHA256 hash:	7c612e8c1e06a90ba0252cda1575c80008bd75e50f699d0e285a0542ad7bb68d
MD5 hash:	f83dada3786011b42984a2e8d09b4338
MIME type:	image/png

Vendor Threat Intelligence

ACCE Unknown

No detections

CyberFortress Clean

Verdict:

Clean

Score:

99.9%

Link:

https://cyber-fortress.com/docs/result/index.php?id=69441659c97f4a807a3ba4e2

Tags:

n/a

FileScan.IO Suspicious

Verdict:

Suspicious

Threat level:

  5/10

Confidence:

100%

Tags:

embarcadero_delphi expand lolbin obfuscated packed packed themidawinlicense

Link:

https://www.filescan.io/uploads/6944164a3f8fdbf8e94af18d/reports/1ec2b224-b2ce-4f93-ad8b-59ff90577a4f/overview

Hybrid Analysis Unknown

Verdict:

Unknown

Link:

https://www.hybrid-analysis.com/sample/7b37f2f7b933f42fc81f05d9eacc0ef5d99099ab0672cc98ea57872a29e75dd7

Kaspersky OpenTIP Malicious

Verdict:

Malicious

File Type:

7z

First seen:

2025-12-19T02:01:00Z UTC

Last seen:

2025-12-19T02:22:00Z UTC

Hits:

~10

Link:

https://opentip.kaspersky.com/7b37f2f7b933f42fc81f05d9eacc0ef5d99099ab0672cc98ea57872a29e75dd7/results?tab=lookup

Nucleon Malprob Malware

Score:

96%

Verdict:

Malware

File Type:

ARCHIVE

Link:

https://malprob.io/report/7b37f2f7b933f42fc81f05d9eacc0ef5d99099ab0672cc98ea57872a29e75dd7

Malva.RE inconclusive

Verdict:

inconclusive

YARA:

3 match(es)

Tags:

7z Archive Executable PE (Portable Executable) PE File Layout SFX 7z

Link:

https://app.malva.re/file/46b0d4a02d84d3a3ec0e0024bf0d070e

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/7b37f2f7b933f42fc81f05d9eacc0ef5d99099ab0672cc98ea57872a29e75dd7/

ReversingLabs TitaniumCloud Win32.Trojan.AgentBanker

Threat name:

Win32.Trojan.AgentBanker

Alert

Create hunting rule

Status:

Malicious

First seen:

2025-12-18 14:57:13 UTC

File Type:

Binary (Archive)

Extracted files:

288

AV detection:

6 of 24 (25.00%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=pm37f55zgp2c7sa7axm6vtao6xmzbgnlazzmzghkk6dsukphlxlq._file

Hatching Triage

Gathering data

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/7b37f2f7b933f42fc81f05d9eacc0ef5d99099ab0672cc98ea57872a29e75dd7