MalwareBazaar Database
You are currently viewing the MalwareBazaar entry for SHA256 7c67fa23010c492d564c53bc5e7bcd881cac83ac77c6c2596548ee693d5f6b45. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.
Database Entry
Threat unknown
Vendor detections: 6
| SHA256 hash: | 7c67fa23010c492d564c53bc5e7bcd881cac83ac77c6c2596548ee693d5f6b45 |
|---|---|
| SHA3-384 hash: | a064e84b88298852a5fee617f39ddeabe576bfcbe4b6d67ff707ad07c75a4c73db67eab10eb5b7f687cbad20cbc57143 |
| SHA1 hash: | 6e41d2d80568b93909a8ae2ea8ee29903a414e52 |
| MD5 hash: | 875669d442760872cdaddc8cc9cc2c49 |
| humanhash: | papa-muppet-quebec-undress |
| File name: | Free Downloaded Files.zip |
| Download: | download sample |
| File size: | 28'687'972 bytes |
| First seen: | 2026-02-22 20:22:05 UTC |
| Last seen: | Never |
| File type: | zip |
| MIME type: | application/zip |
| ssdeep | 786432:sX4hmMBT6+qRLhYxFojX0vDPYz5SQH0TZLih+:sX4sMBT67RSokbgND0Tpis |
| TLSH | T15D573311821CC6DBFEE7B5B4B4B0D516C4EE60B2728E76DEB9E831F4BD875848728811 |
| Magika | zip |
| Reporter |  user35335 |
| Tags: | lumma LummaStealer zip |
user35335
https://dwnlods.onl/ -> https://f7.quickhost13.sbs/share/a123f3f6fd85713c1ea015ff9c47ff -> Free Downloaded Files.zipIntelligence
File Origin
# of uploads :
1
# of downloads :
802
Origin country :
CAVendor Threat Intelligence
Verdict:
Clean
Score:
99.9%
Tags:
n/a
Verdict:
Malicious
File Type:
zip
Score:
67%
Verdict:
Susipicious
File Type:
ARCHIVE
Verdict:
inconclusive
YARA:
3 match(es)
Tags:
Executable PDB Path PE (Portable Executable) PE File Layout PE Memory-Mapped (Dump) Zip Archive
Gathering data
Threat name:
Script-Python.Trojan.Multiverze
Status:
Malicious
First seen:
2026-02-22 20:23:18 UTC
File Type:
Binary (Archive)
Extracted files:
2805
AV detection:
5 of 23 (21.74%)
Threat level:
5/5
Detection(s):
Suspicious file
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Legit
Score:
0.00
File information
The table below shows additional information about this malware sample such as delivery method and external references.
Web download
zip 7c67fa23010c492d564c53bc5e7bcd881cac83ac77c6c2596548ee693d5f6b45
(this sample)
Delivery method
Distributed via web download
Comments
Login required
You need to login to in order to write a comment. Login with your abuse.ch account.