MalwareBazaar Database
You are currently viewing the MalwareBazaar entry for SHA256 a2ac3452f8d34987d57c0035fc4d5fa42d59f9f7e2ebdcdc80c58368c41d44cd. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.
Database Entry
Threat unknown
Vendor detections: 3
| SHA256 hash: | a2ac3452f8d34987d57c0035fc4d5fa42d59f9f7e2ebdcdc80c58368c41d44cd |
|---|---|
| SHA3-384 hash: | de84c65c18b15b7cfb055b88ff62892045f778e9effe4967bf2f99b51659c3284b43f1aee8c091fab025bc8ea28cb503 |
| SHA1 hash: | acfe65aa3829bbf33b6cf3169ddc3b638863b5af |
| MD5 hash: | 42a2881c8f293c9900887a0923955e0f |
| humanhash: | mississippi-summer-kitten-zebra |
| File name: | boost.zip |
| Download: | download sample |
| File size: | 85'609'008 bytes |
| First seen: | 2026-08-11 18:00:41 UTC |
| Last seen: | 2026-08-20 19:16:37 UTC |
| File type: | zip |
| MIME type: | application/zip |
| ssdeep | 1572864:A7UdA27917Zvv/L8JrZVGiSDfzRkKDq0LU45YbLpvMgyPXXPgYPf:e+A2Vvj8JUD7G45Y3p1E/gYH |
| TLSH | T199183396937B2C37D9317EBCF485599C18D5C28901786A6F8A3E018A0CB36D537F2A1F |
| TrID | 77.7% (.ZIP) Opera Widget (14000/1/2) 22.2% (.ZIP) ZIP compressed archive (4000/1) |
| Magika | zip |
| Reporter |  aachum |
| Tags: | dropped-by-SnappyClient sxetnavelelaio-com zip |
Intelligence
File Origin
# of uploads :
2
# of downloads :
60
Origin country :
ESVendor Threat Intelligence
Verdict:
Unknown
File Type:
zip
First seen:
2026-08-04T20:25:00Z UTC
Last seen:
2026-08-11T17:17:00Z UTC
Hits:
~10
Score:
3%
Verdict:
Benign
File Type:
ARCHIVE
Gathering data
Detection(s):
Suspicious file
Result
Malware family:
n/a
Score:
7/10
Tags:
adware discovery execution javascript persistence spyware svg
Behaviour
Suspicious behavior: EnumeratesProcesses
Suspicious use of WriteProcessMemory
Adds Run key to start application
Please note that we are no longer able to provide a coverage score for Virus Total.
File information
The table below shows additional information about this malware sample such as delivery method and external references.
Web download
zip a2ac3452f8d34987d57c0035fc4d5fa42d59f9f7e2ebdcdc80c58368c41d44cd
(this sample)
Dropped by
SnappyClient
Delivery method
Distributed via web download
Comments
Login required
You need to login to in order to write a comment. Login with your abuse.ch account.C2: sxetnavelelaio.com