MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 97ed374fe4ea6c8bd095f4402a4afb94d0fd33eaff806886cccd616c1bdef8cc. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	97ed374fe4ea6c8bd095f4402a4afb94d0fd33eaff806886cccd616c1bdef8cc
SHA3-384 hash:	50b326187b57ba4c7fac5dfa467e1f3345add51eb010da1117d46c20298e41a50032a8501e1aea08fafd6f883f2525f2
SHA1 hash:	234ec81c770717deb24040b66b27d729894c9a63
MD5 hash:	e54394789073266fda74a830c558030f
humanhash:	venus-zebra-ink-yellow
File name:	Частинаs.rar
Download:	download sample
File size:	817'152 bytes
First seen:	2026-10-26 12:54:26 UTC
Last seen:	Never
File type:	rar
MIME type:	application/vnd.rar
ssdeep	12:oEOrn6MRnZueADwR0m8Mlb+UE4WlK5OFQPFaUFjOrcAiu5OrcVbdpYrn1Il+BdaY:ZOrRueAraEhKdgJchzcZdd+Bd
TLSH	T152059C3029FD4634F3B109379876B303D9BAB919AD31AB1D01DE824C60739119DA0F6F
TrID	61.5% (.RAR) RAR compressed archive (v5.0) (8000/1) 38.4% (.RAR) RAR compressed archive (gen) (5000/1)
Magika	rar
Reporter	smica83
Tags:	rar UKR

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

78

Origin country :

HU

Vendor Threat Intelligence

ACCE Rar_Archive

Details

Link:

https://research.acce.ciphertechsolutions.com/results/b9ea39c8-dac9-4691-9b2e-4d25f352d767/

ClamAV Detected

Detection(s):

Sanesecurity.Foxhole.Lnk_Rar_1.UNOFFICIAL

Alert

Create hunting rule

Sanesecurity.Foxhole.Rar_fs852.UNOFFICIAL

Alert

Create hunting rule

SecuriteInfo.com.FileRepMalware.27415557.UNOFFICIAL

Alert

Create hunting rule

TwinWave.EvilLNK.DottedQuadDancingInHeaven.20220622.UNOFFICIAL

Alert

Create hunting rule

TwinWave.EvilLNK.HTTPDottedQuadPolicykill.20220908.UNOFFICIAL

Alert

Create hunting rule

TwinWave.EvilLNK.KingForADayDownloaders.20231121.UNOFFICIAL

Alert

Create hunting rule

TwinWave.EvilLNK.OddLook.202207213.UNOFFICIAL

Alert

Create hunting rule

TwinWave.EvilLNK.SilverChairs4SilverBacks.20221114.UNOFFICIAL

Alert

Create hunting rule

CyberFortress Clean

Verdict:

Clean

Score:

99.9%

Link:

https://cyber-fortress.com/docs/result/index.php?id=6adf4db9afb06e650cd92d9a

Tags:

n/a

Hybrid Analysis Unknown

Verdict:

Unknown

Link:

https://www.hybrid-analysis.com/sample/97ed374fe4ea6c8bd095f4402a4afb94d0fd33eaff806886cccd616c1bdef8cc

Kaspersky OpenTIP Malicious

Verdict:

Malicious

File Type:

rar

First seen:

2026-10-23T10:12:00Z UTC

Last seen:

2026-10-23T10:16:00Z UTC

Hits:

~10

Link:

https://opentip.kaspersky.com/97ed374fe4ea6c8bd095f4402a4afb94d0fd33eaff806886cccd616c1bdef8cc/results?tab=lookup

Malva.RE Malware

Verdict:

Malware

YARA:

1 match(es)

Tags:

Execution: CMD in LNK LNK LOLBin LOLBin:cmd.exe Malicious Rar Archive T1059.003 T1202: Indirect Command Execution T1204.002 T1218: System Binary Proxy Execution

Link:

https://app.malva.re/file/e54394789073266fda74a830c558030f

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/97ed374fe4ea6c8bd095f4402a4afb94d0fd33eaff806886cccd616c1bdef8cc/

ReversingLabs TitaniumCloud Shortcut.Trojan.Pantera

Threat name:

Shortcut.Trojan.Pantera

Alert

Create hunting rule

Status:

Malicious

First seen:

2026-10-22 13:23:00 UTC

AV detection:

10 of 38 (26.32%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=s7wtot7e5jwixuev6racusx3stip2m7k76agrbwmzvqwyg667dga._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  1/10

Tags:

n/a

Link:

https://tria.ge/reports/261026-p5wt4ae16l/

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Malicious File

Threat name:

Malicious File

Score:

0.70

Link:

https://yomi.yoroi.company/submissions/97ed374fe4ea6c8bd095f4402a4afb94d0fd33eaff806886cccd616c1bdef8cc