MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 a54310f2ccd2c2a17651371d471611e523e61313dfcb77369b37ce7b28fd30a1. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	a54310f2ccd2c2a17651371d471611e523e61313dfcb77369b37ce7b28fd30a1
SHA3-384 hash:	0e326f4e028dea54dc5a0726ee573ef83176c0b1ed02c1033430cce6c1cadb0a893524faa9005d08b2b766795c250bd8
SHA1 hash:	06e2b610e3cc6a60b9fc88169926bab2ca295c6b
MD5 hash:	67e8bc169ee7402703bba860370345f4
humanhash:	lima-oscar-mockingbird-high
File name:	25675731912.zip
Download:	download sample
Signature	StormKitty Alert Create hunting rule
File size:	876'018 bytes
First seen:	2026-08-17 09:12:15 UTC
Last seen:	Never
File type:	zip
MIME type:	application/zip
Note:	This file is a password protected archive. The password is: infected
ssdeep	24576:i76Fw62HTqPtV9AxJsy8BbF+/t0F4fztUTqkIrjT:i+FwQP9AIBYtaTTzIr
TLSH	T1811533EA781089107F6C1D9F41FCA50D652D80A1861F0FEE5BCB35AFABE443856E93D8
Magika	zip
Reporter	bryancampbell
Tags:	HOLDINGHANDS StormKitty zip

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

142

Origin country :

GB

File Archive Information

This file is a password protected archive. The password is: infected

This file archive contains 1 file(s), sorted by their relevance:

Relevant files 1

File name:	8ab3212afc5bd442b877fc949e4f8e7de64606d4d6ffc7cd507dba55909eccd0
File size:	1'966'775 bytes
SHA256 hash:	8ab3212afc5bd442b877fc949e4f8e7de64606d4d6ffc7cd507dba55909eccd0
MD5 hash:	daef7b7d2b33530510ce481713c4a980
MIME type:	application/x-dosexec
Signature	StormKitty

Vendor Threat Intelligence

ACCE Zip_Archive

Details

Link:

https://research.acce.ciphertechsolutions.com/results/4bdbae44-c91d-44db-8da5-0b7770058d06/

DocGuard Malicious

Result

Verdict:

Malicious

File Type:

PE File

Link:

https://app.docguard.net/a54310f2ccd2c2a17651371d471611e523e61313dfcb77369b37ce7b28fd30a1/results/dashboard

Behaviour

BlacklistAPI detected

FileScan.IO Malicious

Verdict:

Malicious

Threat level:

  10/10

Confidence:

100%

Tags:

anti-debug anti-vm apt base64 blackenergy cmd crypto cscript evasive expand explorer fingerprint hacktool lolbin meterpreter microsoft_visual_cc mpcmdrun obfuscated overlay packed regsvr32 rundll32 runonce schtasks wscript wuauclt

Link:

https://www.filescan.io/uploads/6a82d078fb59a82aea101273/reports/f80f22aa-b40e-47d2-94fd-5e31d1d28dd9/overview

Hybrid Analysis Malicious

Verdict:

Malicious

Link:

https://www.hybrid-analysis.com/sample/a54310f2ccd2c2a17651371d471611e523e61313dfcb77369b37ce7b28fd30a1

Nucleon Malprob Malware

Score:

80%

Verdict:

Malware

File Type:

ARCHIVE

Link:

https://malprob.io/report/a54310f2ccd2c2a17651371d471611e523e61313dfcb77369b37ce7b28fd30a1

Malva.RE inconclusive

Verdict:

inconclusive

YARA:

2 match(es)

Tags:

Executable PDB Path PE (Portable Executable) PE File Layout Zip Archive

Link:

https://app.malva.re/file/67e8bc169ee7402703bba860370345f4

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/a54310f2ccd2c2a17651371d471611e523e61313dfcb77369b37ce7b28fd30a1/

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=uvbrb4wm2lbkc5srg4ouofqr4ur6meyt37fxonu3g7hhwkh5gcqq._file

Hatching Triage stormkitty

Result

Malware family:

stormkitty

Alert

Create hunting rule

Score:

  10/10

Tags:

family:stormkitty stealer

Link:

https://tria.ge/reports/260817-lgxvpsxyhw/

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Malicious File

Threat name:

Malicious File

Score:

1.00

Link:

https://yomi.yoroi.company/submissions/a54310f2ccd2c2a17651371d471611e523e61313dfcb77369b37ce7b28fd30a1