MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 ac02ca9999601566b5b154e0fdbc19bb8676cffb132bfd2a37a4a704cf47d963. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	ac02ca9999601566b5b154e0fdbc19bb8676cffb132bfd2a37a4a704cf47d963
SHA3-384 hash:	13826548aa63c4fe2764fce3c3dfcec287941b7e6c6fcd89ecf763639ddb16d0d759cdff210c8470f6c831b5d16bb4c5
SHA1 hash:	abbccec13f33f5d4905c340d991925c57f004a68
MD5 hash:	93c9fe266639d7701f6c8434a90fe36d
humanhash:	lemon-georgia-comet-alanine
File name:	ac02ca9999601566b5b154e0fdbc19bb8676cffb132bfd2a37a4a704cf47d963.bin
Download:	download sample
Signature	Vidar Alert Create hunting rule
File size:	97'958'272 bytes
First seen:	2026-09-02 12:56:21 UTC
Last seen:	Never
File type:	exe
MIME type:	application/x-dosexec
imphash	d42595b695fc008ef2c56aabd8efd68e (1'268 x Vidar, 328 x RemusStealer, 134 x Stealc)
ssdeep	1572864:bBMyjvWyaHgFC6k36VeZNTV/n/KWEKgvSLQAzFko5jnbFaIMZi7aS9YD:YyaAFCWeZNNn/Ikp5jbFFMZibYD
TLSH	T17E283303A54655E5C865DF34C2BB57227A64FC8CD73533E32E40AA782F357D0AABAB40
TrID	27.0% (.EXE) Win64 Executable (generic) (6522/11/2) 20.8% (.EXE) Win16 NE executable (generic) (5038/12/1) 18.6% (.EXE) Win32 Executable (generic) (4504/4/1) 8.5% (.ICL) Windows Icons Library (generic) (2059/9) 8.4% (.EXE) OS/2 Executable (generic) (2029/13)
Magika	pebin
Reporter	Anonymous
Tags:	exe vidar

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

155

Origin country :

CH

Vendor Threat Intelligence

ACCE Unknown

No detections

ANY.RUN

Malware family:

n/a

ID:

1

File name:

exe

Verdict:

No threats detected

Analysis date:

2026-09-02 13:27:11 UTC

Tags:

n/a

Link:

https://app.any.run/tasks/9d002858-cfa5-4666-bab0-1183e8643154

Note:

ANY.RUN is an interactive sandbox that analyzes all user actions rather than an uploaded sample

Dr. Web vxCube Malware

Result

Verdict:

Malware

Maliciousness:

Behaviour

Сreating synchronization primitives

Connection attempt

Sending a custom TCP request

Hybrid Analysis Win64/GenKryptik.HUEZ trojan

Verdict:

Malicious

Labled as:

Win64/GenKryptik.HUEZ trojan

Link:

https://www.hybrid-analysis.com/sample/ac02ca9999601566b5b154e0fdbc19bb8676cffb132bfd2a37a4a704cf47d963

Kaspersky OpenTIP Malicious

Verdict:

Malicious

File Type:

exe x64

First seen:

2026-09-02T07:00:00Z UTC

Last seen:

2026-09-02T21:18:00Z UTC

Hits:

~1000

Link:

https://opentip.kaspersky.com/ac02ca9999601566b5b154e0fdbc19bb8676cffb132bfd2a37a4a704cf47d963/results?tab=lookup

Nucleon Malprob Malware

Score:

90%

Verdict:

Malware

File Type:

PE

Link:

https://malprob.io/report/ac02ca9999601566b5b154e0fdbc19bb8676cffb132bfd2a37a4a704cf47d963

CERT.PL MWDB

Gathering data

ReversingLabs TitaniumCloud Win64.Packed.Generic

Threat name:

Win64.Packed.Generic

Alert

Create hunting rule

Status:

Suspicious

First seen:

2026-09-02 12:58:57 UTC

File Type:

PE+ (Exe)

AV detection:

7 of 36 (19.44%)

Threat level:

  1/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=vqbmvgmzmakwnnnrktqp3pazxodhnt73cmv72krxustqjt2h3frq._file

Threatray Vidar

Verdict:

malicious

Label(s):

Vidar

Alert

Create hunting rule

Link:

https://reports.threatray.com/93877580-1a4a-4468-bd9b-5e37c0efd975

Hatching Triage Suspicious

Result

Malware family:

n/a

Score:

  5/10

Tags:

n/a

Link:

https://tria.ge/reports/260902-p6pr6stbjc/

Behaviour

Suspicious behavior: EnumeratesProcesses

VMRay Vidar

Malware family:

Vidar

Alert

Create hunting rule

Verdict:

Malicious

Link:

https://www.vmray.com/analyses/_mb/ac02ca999960/report/overview.html

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.