MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 ac08f4de2a47aa64d78f1844d326d6822f1fc17dfc040ef36ee5a1028f326a18. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	ac08f4de2a47aa64d78f1844d326d6822f1fc17dfc040ef36ee5a1028f326a18
SHA3-384 hash:	909235d42e9dfd7db787ca67718ca79296f2665b8532b2f0620fd25baa1e9d0550ac015512b6724cb8677a9279e98600
SHA1 hash:	e6ca231037197506c9aaa61d56b07d0e13a08674
MD5 hash:	6044c50df19aef84c556172984267ba8
humanhash:	crazy-orange-michigan-uniform
File name:	TheWifeSecret.exe
Download:	download sample
File size:	95'983'616 bytes
First seen:	2026-07-29 13:58:30 UTC
Last seen:	Never
File type:	exe
MIME type:	application/x-dosexec
ssdeep	1572864:52Jzwbt/z+l1zAxJorsgdnen9qPsniUd:4Jzwbtal1z0ysge9qUiUd
TLSH	T18528CF02A3E88599C0BFD139D57B550BE7F2BC695331D7CB1180597A2E73BE04A3A362
TrID	63.2% (.EXE) Win32 EXE PECompact compressed (generic) (41569/9/9) 9.9% (.EXE) Win64 Executable (generic) (6522/11/2) 7.6% (.EXE) Win16 NE executable (generic) (5038/12/1) 6.8% (.EXE) Win32 Executable (generic) (4504/4/1) 3.1% (.ICL) Windows Icons Library (generic) (2059/9)
Magika	pebin
dhash icon	39e8ccd4f0f8d4cc (1 x RedLineStealer, 1 x ACRStealer)
Reporter	lfr
Tags:	exe

lfr

https://blip-88.itch.io/the-wife-secret

https://www.virustotal.com/gui/file/30d66cf22405273adc3482f587044a2a2b901eba13588419625055b7703e0ba8/detection
https://www.virustotal.com/gui/file/ac08f4de2a47aa64d78f1844d326d6822f1fc17dfc040ef36ee5a1028f326a18/detection

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

182

Origin country :

FR

Vendor Threat Intelligence

ACCE AmsiScanBufferBypass MurmurHash3_128x64 MurmurHash3_128x86

Details

Link:

https://research.acce.ciphertechsolutions.com/results/1def3755-1ec9-4c84-9175-bc8ddbdcd6a7/

Dr. Web vxCube Clean

Result

Verdict:

Clean

Maliciousness:

Behaviour

Creating a window

Launching a service

Hybrid Analysis Win64/Agent_AGeneric.ONN trojan

Verdict:

Malicious

Labled as:

Win64/Agent_AGeneric.ONN trojan

Link:

https://www.hybrid-analysis.com/sample/ac08f4de2a47aa64d78f1844d326d6822f1fc17dfc040ef36ee5a1028f326a18

Kaspersky OpenTIP Malicious

Verdict:

Malicious

File Type:

exe x64

First seen:

2026-07-30T15:03:00Z UTC

Last seen:

2026-07-31T10:32:00Z UTC

Hits:

~100

Detections:

HEUR:Trojan.MSIL.Agent.gen

Link:

https://opentip.kaspersky.com/ac08f4de2a47aa64d78f1844d326d6822f1fc17dfc040ef36ee5a1028f326a18/results?tab=lookup

Nucleon Malprob Benign

Score:

6%

Verdict:

Benign

File Type:

PE

Link:

https://malprob.io/report/ac08f4de2a47aa64d78f1844d326d6822f1fc17dfc040ef36ee5a1028f326a18

CERT.PL MWDB

Gathering data

ReversingLabs TitaniumCloud Win64.Trojan.Generic

Threat name:

Win64.Trojan.Generic

Alert

Create hunting rule

Status:

Suspicious

First seen:

2026-07-29 14:06:04 UTC

File Type:

PE+ (.Net Exe)

Extracted files:

70

AV detection:

10 of 24 (41.67%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=vqepjxrki6vgjv4pdbcngjwwqixr7ql57qca543o4wqqfdzsnima._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  3/10

Tags:

n/a

Link:

https://tria.ge/reports/260729-rav1eswaka/

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Malicious File

Threat name:

Malicious File

Score:

1.00

Link:

https://yomi.yoroi.company/submissions/ac08f4de2a47aa64d78f1844d326d6822f1fc17dfc040ef36ee5a1028f326a18