MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 a34e11c2f4efe61f499b0a7e6968bd55b4c2fdfa72ffcd800c169f45b84c9ca9. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	a34e11c2f4efe61f499b0a7e6968bd55b4c2fdfa72ffcd800c169f45b84c9ca9
SHA3-384 hash:	e1e3f60de203541f2d13342135b30dd06c0c581e861b13c930165cc1c48b472280f0215d2b1048acca71bce1eaec73ee
SHA1 hash:	32e241d5e10ce57826d849c4a2d241ece248a351
MD5 hash:	eee876b008cc6a02ddde922df21c444d
humanhash:	tennis-freddie-pluto-alabama
File name:	SecuriteInfo.com.W64.GameHack_AGen.BC.tr.16640.11370
Download:	download sample
File size:	11'264 bytes
First seen:	2025-11-14 17:19:36 UTC
Last seen:	2025-11-14 18:19:56 UTC
File type:	exe
MIME type:	application/x-dosexec
imphash	3b500a66ffd4a01bb4fb3e7e4b8227eb
ssdeep	96:hMe2ObB3yOZUuHKzK2AkFoG8kBQUW80pzmDP7w1vSHWj7T8GUFXqjgwcx2ksD6M:ht2ObB3QuqKAuUWmXKvYcH3gvIkY
TLSH	T1F832F981B2A85CF9D37D807A82D68EA6E1FE70112762CFCF0974C2690B53ED5653B741
TrID	25.4% (.ICL) Windows Icons Library (generic) (2059/9) 25.0% (.EXE) OS/2 Executable (generic) (2029/13) 24.7% (.EXE) Generic Win/DOS Executable (2002/3) 24.7% (.EXE) DOS Executable Generic (2000/1)
Magika	pebin
Reporter	SecuriteInfoCom
Tags:	exe

Intelligence

---

File Origin

# of uploads :

2

# of downloads :

95

Origin country :

FR

Vendor Threat Intelligence

ANY.RUN agenttesla

Malware family:

n/a

ID:

1

File name:

Glacier.exe

Verdict:

Malicious activity

Analysis date:

2025-06-27 19:05:07 UTC

Tags:

processhacker tool kprocesshacker-sys vuln-driver delphi inno installer iqvw64e-sys discord ims-api generic

Link:

https://app.any.run/tasks/9a40e1d4-8c35-4281-80dd-9d6e4b56c148

Note:

ANY.RUN is an interactive sandbox that analyzes all user actions rather than an uploaded sample

CAPE Sandbox

Detection:

n/a

Link:

https://www.capesandbox.com/analysis/38225/

ClamAV Detected

Detection(s):

SecuriteInfo.com.W64.GameHack_AGen.BC.tr.16640.11370.UNOFFICIAL

Alert

Create hunting rule

CyberFortress Malicious

Verdict:

Malicious

Score:

96.5%

Link:

https://cyber-fortress.com/docs/result/index.php?id=68e66df9277c2bd8bc5de5e5

Tags:

dropper virus sage

Dr. Web vxCube Clean

Result

Verdict:

Clean

Maliciousness:

FileScan.IO Likely Malicious

Verdict:

Likely Malicious

Threat level:

  7.5/10

Confidence:

100%

Tags:

anti-debug anti-vm microsoft_visual_cc

Link:

https://www.filescan.io/uploads/691764dc8f2fc32a22dfec5b/reports/15195d7e-245d-4f88-8e4f-c6e3edfed508/overview

Hybrid Analysis Win/malicious_confidence_70%

Verdict:

Malicious

Labled as:

Win/malicious_confidence_70%

Link:

https://www.hybrid-analysis.com/sample/a34e11c2f4efe61f499b0a7e6968bd55b4c2fdfa72ffcd800c169f45b84c9ca9

Kaspersky OpenTIP Unknown

Verdict:

Unknown

File Type:

sys x64

First seen:

2025-06-14T15:30:00Z UTC

Last seen:

2025-11-05T09:06:00Z UTC

Hits:

~10

Link:

https://opentip.kaspersky.com/a34e11c2f4efe61f499b0a7e6968bd55b4c2fdfa72ffcd800c169f45b84c9ca9/results?tab=lookup

Intezer Unknown

Verdict:

Unknown

Link:

https://analyze.intezer.com/analyses/df2e0df1-f0cd-47ee-a334-8f30aaae579b

Malva.RE

Gathering data

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/a34e11c2f4efe61f499b0a7e6968bd55b4c2fdfa72ffcd800c169f45b84c9ca9/

Neiki Clean

Verdict:

Clean

Link:

https://tip.neiki.dev/file/a34e11c2f4efe61f499b0a7e6968bd55b4c2fdfa72ffcd800c169f45b84c9ca9

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=unhbdqxu57tb6sm3bj7gs2f5kw2mf7p2ol743aamc2pulocmtsuq._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  3/10

Tags:

n/a

Link:

https://tria.ge/reports/251114-vwmsqavjf1/

Threat.Zone Unknown

Verdict:

Unknown

Tags:

maldriver

YARA:

HUNT_WIN_DRIVER_UNSIGNED_00

Link:

https://app.threat.zone/submission/152401d2-da92-4bd3-af7b-7d86e03311fe

UnpacMe

Unpacked files

SH256 hash:

a34e11c2f4efe61f499b0a7e6968bd55b4c2fdfa72ffcd800c169f45b84c9ca9

MD5 hash:

eee876b008cc6a02ddde922df21c444d

SHA1 hash:

32e241d5e10ce57826d849c4a2d241ece248a351

Link:

https://www.unpac.me/results/f791fdeb-4ee6-4ac1-b601-1d3725a4e4ba/

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Suspicious File

Threat name:

Suspicious File

Score:

0.40

Link:

https://yomi.yoroi.company/submissions/a34e11c2f4efe61f499b0a7e6968bd55b4c2fdfa72ffcd800c169f45b84c9ca9

File information

---

The table below shows additional information about this malware sample such as delivery method and external references.

Web download

exe a34e11c2f4efe61f499b0a7e6968bd55b4c2fdfa72ffcd800c169f45b84c9ca9

(this sample)

Cape

https://www.capesandbox.com/analysis/38225/

  

URLhaus

https://urlhaus.abuse.ch/url/3588880/

  

Delivery method

Distributed via web download

  

URLhaus

https://urlhaus.abuse.ch/url/3708438/