🤲🏼 NEW | abuse.ch Community Hub! Earn recognition 🏅 for the malware intelligence you share, climb the leaderboards 📈, and connect with like-minded contributors who share your hunting focus 🤝. Ready to unlock your profile? Go to the Community Hub →

MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 840244014ea8cfa9bcbfdbdc360b3a309ddea340fdf676a9d3ae26f806f97e21. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry



Threat unknown


Vendor detections: 4


Intelligence 4 IOCs YARA File information Comments

SHA256 hash: 840244014ea8cfa9bcbfdbdc360b3a309ddea340fdf676a9d3ae26f806f97e21
SHA3-384 hash: 5b6c01a7a723a76b7c5c4c0c648366bfd567cd480e38a6ca653584e9551d97c29d05857141cc5e08ee3b7e0ffc05439d
SHA1 hash: 66475480b09a71ab8541fc0a6aac1bad8bc7331c
MD5 hash: 150e1ae8a6b020c523de25ab4c38e6d6
humanhash: fifteen-diet-lactose-alaska
File name:stage2_decoded.zip
Download: download sample
File size:8'453 bytes
First seen:2026-09-22 19:30:12 UTC
Last seen:Never
File type: zip
MIME type:application/zip
ssdeep 192:sIPKhytdzpdhwurmz9TG/enQP2a0DQ2+gfNqKls8Ji88eY:LShyhTwzd60Q0Y2q6TJit3
TLSH T1B902AF68C6E14959F4B7A2FD5414A535B4703667F11FAF4928402B3B3B526804E6F198
Magika zip
Reporter johnk3r
Tags:Astaroth au3 banker brasilengenhariaecom-store vmi3554028.contaboserver-net zip

Intelligence


File Origin
# of uploads :
1
# of downloads :
72
Origin country :
BR BR
Vendor Threat Intelligence
Verdict:
Likely Malicious
Threat level:
  7.5/10
Confidence:
100%
Tags:
evasive
Verdict:
inconclusive
YARA:
2 match(es)
Tags:
Zip Archive
Please note that we are no longer able to provide a coverage score for Virus Total.

File information


The table below shows additional information about this malware sample such as delivery method and external references.

zip 840244014ea8cfa9bcbfdbdc360b3a309ddea340fdf676a9d3ae26f806f97e21

(this sample)

Comments