MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 8f2606bb191cdc91c840f0207f056f2247e21815518fe0a66c9dc708b72fc10a. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Threat unknown


Vendor detections: 3


Intelligence 3 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: 8f2606bb191cdc91c840f0207f056f2247e21815518fe0a66c9dc708b72fc10a
SHA3-384 hash: 1496a4a40c42101a072d445220a1fb2a73812d94ea699528db7707927ec7db2d4109992d4dc85e9744ced73ed6258ab8
SHA1 hash: 7fef2312039d18960ea44a643f54cc55ed8549d0
MD5 hash: 7a0babf120b85399ee76027f73bbe5f0
humanhash: helium-kansas-december-july
File name:Safe Trading_DEX Platform.rar
Download: download sample
File size:239'264 bytes
First seen:2026-06-25 10:08:25 UTC
Last seen:Never
File type: rar
MIME type:application/octet-stream
ssdeep 6144:y7y5YqeOM1qJLBlYbo4Ts4IDODYlEX3rj6Lnqp41pn3:y7y5YPqLl2o4TP36jnn3
TLSH T1713422695EF6AF155E6748C2EEFE6A4523022F455CD43374735FAAF260CB1E6C0082D8
Magika rar
Reporter smica83
Tags:Crafted8088 rar

Intelligence

File Origin
# of uploads :
1
# of downloads :
34
Origin country :
HU HU
File Archive Information

This file archive contains 8 file(s), sorted by their relevance:

File name:SafeTrade_Whitepaper_Version_1.pdf:.._.._Functional_SafeTrade_Bonus,txt.lnk
File size:1'971 bytes
SHA256 hash: 0ce5f89fc417aaf8f33566575207b5f50dd31bc7a83cf6e6ebd201eb027b0ea4
MD5 hash: 913654d91d7ff905f32745dabd9e189e
MIME type:application/octet-stream
File name:SafeTrade_Explain_Two.html:.._.._.._.._.._Roaming_Microsoft_Windows_Start Menu_Programs_Startup_notepad.lnk
File size:1'537 bytes
SHA256 hash: 58a9093981a0247ae1bb157711a5024b08fd3bace345b6048f0cb287a6772b9a
MD5 hash: 70d2f7701d52a98a775120a563c2e285
MIME type:application/octet-stream
File name:Ten_Reasons_To_Choose_SafeTrade.pdf
File size:3'360 bytes
SHA256 hash: b1df720caf888b8787b5c56c1639c197cfb712bd78877d4bfc185bf96e0bff16
MD5 hash: 5f97e9a95db86f2f76f2087fcf6c0870
MIME type:application/pdf
File name:SafeTrade_Explain_One.html
File size:4'766 bytes
SHA256 hash: 7da77631bd6e4ccca35f664e02d28eb54d9936818d7d5dde2b5173b8b13aa34b
MD5 hash: 11154296d7ff1df921335724872367c5
MIME type:text/html
File name:SafeTrade_Explain_Two.html
File size:4'770 bytes
SHA256 hash: 58e22ac89ca1e47730d9809e53b6df91f36ec710f27563d157b616159ef72959
MD5 hash: 992016a36380bae5c3b71835cd2b70a5
MIME type:text/html
File name:SafeTrade_Ecosystem_Instruction.pdf
File size:112'779 bytes
SHA256 hash: c1791ffe3bcb92b8fb9ae657c41e0e6e1ea14ad269260bfeb2329f297cca4322
MD5 hash: dceaf67224f7a3d1a7bbc2ac276fab56
MIME type:application/pdf
File name:SafeTrade_Whitepaper_Version_1.pdf
File size:182'266 bytes
SHA256 hash: b51f506a45789208affb7237c806f88cb31edd25b5fe9d3feeb079e1e34f53a4
MD5 hash: 740f56c3bd72fc82238c91d251280e00
MIME type:application/pdf
File name:Platform_Demo_Report.pdf
File size:2'122 bytes
SHA256 hash: 7e0ee3d421a786679be62ef8a6c7783843b33f52f3ad91eb01c9bd2fae6c69cb
MD5 hash: a0c51c3c39725471937e171f6277f42d
MIME type:application/pdf
Vendor Threat Intelligence
No detections
Detection(s):
TwinWave.EvilRAR.GhettoSuperstream.20241120.UNOFFICIAL
Create hunting rule

Verdict:
Clean
Score:
99.9%
Link:
https://cyber-fortress.com/docs/result/index.php?id=6a3d070b86bc95245bf9625a
Tags:
n/a
Verdict:
Unknown
Link:
https://www.hybrid-analysis.com/sample/8f2606bb191cdc91c840f0207f056f2247e21815518fe0a66c9dc708b72fc10a
Gathering data
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/8f2606bb191cdc91c840f0207f056f2247e21815518fe0a66c9dc708b72fc10a/
Threat name:
Win32.Trojan.Kepavll
Create hunting rule
Status:
Malicious
First seen:
2026-06-18 09:06:55 UTC
File Type:
Binary
AV detection:
6 of 36 (16.67%)
Threat level:
  5/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=r4tanoyzdtojdsca6aqh6blpejd6egavkgh6bjtmtxdqrnzpyefa._file
Result
Malware family:
n/a
Score:
  1/10
Tags:
n/a
Link:
https://tria.ge/reports/260625-mxql1abs6m/
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Legit
Score:
0.10
Link:
https://yomi.yoroi.company/submissions/8f2606bb191cdc91c840f0207f056f2247e21815518fe0a66c9dc708b72fc10a

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Comments