MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 a2ac3452f8d34987d57c0035fc4d5fa42d59f9f7e2ebdcdc80c58368c41d44cd. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	a2ac3452f8d34987d57c0035fc4d5fa42d59f9f7e2ebdcdc80c58368c41d44cd
SHA3-384 hash:	de84c65c18b15b7cfb055b88ff62892045f778e9effe4967bf2f99b51659c3284b43f1aee8c091fab025bc8ea28cb503
SHA1 hash:	acfe65aa3829bbf33b6cf3169ddc3b638863b5af
MD5 hash:	42a2881c8f293c9900887a0923955e0f
humanhash:	mississippi-summer-kitten-zebra
File name:	boost.zip
Download:	download sample
File size:	85'609'008 bytes
First seen:	2026-08-11 18:00:41 UTC
Last seen:	Never
File type:	zip
MIME type:	application/zip
ssdeep	1572864:A7UdA27917Zvv/L8JrZVGiSDfzRkKDq0LU45YbLpvMgyPXXPgYPf:e+A2Vvj8JUD7G45Y3p1E/gYH
TLSH	T199183396937B2C37D9317EBCF485599C18D5C28901786A6F8A3E018A0CB36D537F2A1F
TrID	77.7% (.ZIP) Opera Widget (14000/1/2) 22.2% (.ZIP) ZIP compressed archive (4000/1)
Magika	zip
Reporter	aachum
Tags:	agiapukaaywsvn-com dropped-by-SnappyClient zip

iamaachum

https://agiapukaaywsvn.com/depend/boost.zip

IOC: agiapukaaywsvn.com

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

57

Origin country :

ES

Vendor Threat Intelligence

ACCE Zip_Archive

Details

Link:

https://research.acce.ciphertechsolutions.com/results/0a441f2e-995f-452c-a995-d9e9bf962c5f/

Hybrid Analysis Unknown

Verdict:

Unknown

Link:

https://www.hybrid-analysis.com/sample/a2ac3452f8d34987d57c0035fc4d5fa42d59f9f7e2ebdcdc80c58368c41d44cd

Kaspersky OpenTIP Unknown

Verdict:

Unknown

File Type:

zip

First seen:

2026-08-04T20:25:00Z UTC

Last seen:

2026-08-11T17:17:00Z UTC

Hits:

~10

Link:

https://opentip.kaspersky.com/a2ac3452f8d34987d57c0035fc4d5fa42d59f9f7e2ebdcdc80c58368c41d44cd/results?tab=lookup

Nucleon Malprob Benign

Score:

3%

Verdict:

Benign

File Type:

ARCHIVE

Link:

https://malprob.io/report/a2ac3452f8d34987d57c0035fc4d5fa42d59f9f7e2ebdcdc80c58368c41d44cd

CERT.PL MWDB

Gathering data

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=ukwdiuxy2neypvl4aa27ytk7uqwvt6px4lv5zxeaywbwrra5itgq._file

Hatching Triage Suspicious

Result

Malware family:

n/a

Score:

  7/10

Tags:

adware discovery execution javascript persistence spyware svg

Link:

https://tria.ge/reports/260811-xxymqazcke/

Behaviour

Suspicious behavior: EnumeratesProcesses

Suspicious use of WriteProcessMemory

Adds Run key to start application

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.