🤲🏼 NEW | abuse.ch Community Hub! Earn recognition 🏅 for the malware intelligence you share, climb the leaderboards 📈, and connect with like-minded contributors who share your hunting focus 🤝. Ready to unlock your profile? Go to the Community Hub →

MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 ae5a7b4d6ac001e41a49833ea03abba64f33d49ea46d3e4875d18331c52eb6a8. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


PureLogsStealer


Vendor detections: 6


Intelligence 6 IOCs YARA 9 File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: ae5a7b4d6ac001e41a49833ea03abba64f33d49ea46d3e4875d18331c52eb6a8
SHA3-384 hash: c15f07e5c64055fda8d77eff2f68318fb945f959078defe56c0e9501867b8410c1a88d951bf3199c5b2f1b7a4cdc7e2b
SHA1 hash: ca08f63dda72f8cc1f102354bea71b828bd49221
MD5 hash: d25b04e748d3faa33ae684ba15e39a96
humanhash: mississippi-jersey-michigan-twenty
File name:vlc.zip
Download: download sample
Signature PureLogsStealer
Create hunting rule
File size:2'951'114 bytes
First seen:2026-09-20 13:17:39 UTC
Last seen:Never
File type: zip
MIME type:application/zip
ssdeep 49152:1IkqkvtZ5koCHbISHhU6aRkHVEM+EDa9unat3TPuBeZDtwn6W13YoBxRwYw6X/TS:4ogkQ/9VVMYnat3UeFtNWtgBmTDmDR
TLSH T10ED533E638F7CF7E811C582421D7EB216AB18A8C4A3C1F964BEC8D5C95162E5710A3FD
Magika zip
Reporter whack_sh
Tags:cryp htxs PureLogsStealer Suschil zip

Intelligence

File Origin
# of uploads :
1
# of downloads :
94
Origin country :
US US
File Archive Information

This file archive contains 93 file(s), sorted by their relevance:

File name:19814
File size:65'570 bytes
SHA256 hash: a3facb01ff5a780826771301a7a1f2beed895fd1b66419947d25e6578c123e87
MD5 hash: e04c8af344538087a42a373171411284
MIME type:application/octet-stream
Signature PureLogsStealer
File name:15002
File size:22'063 bytes
SHA256 hash: cb983f04e777e426c9a73767e73261b12e39b9716736ff8e4c8fde00ae6c7a74
MD5 hash: 00681cea0894fb2ad029a8348605bde6
MIME type:application/octet-stream
Signature PureLogsStealer
File name:19818
File size:65'625 bytes
SHA256 hash: 27bdad78bba4e0f6c2ac5d1ad9e3bcdf79608ee6302304dc9f86d345675d3971
MD5 hash: 72b524e7fe99ab659f01906c90358538
MIME type:application/octet-stream
Signature PureLogsStealer
File name:19822
File size:65'610 bytes
SHA256 hash: 1e2da200c5cc2710cd37a5e3cadab95c03332c4d14553a313650fc326d3467b8
MD5 hash: 6a126ee42176a91ace0daa73c3f296fc
MIME type:application/octet-stream
Signature PureLogsStealer
File name:wininet.dll
File size:4'414'976 bytes
SHA256 hash: 795732d6da04deec49d1083fd3a4e0cd82238cbbff5974bbcbf1ebbeedeabc52
MD5 hash: 39f052e2236e8fc9cc2d9200045e2c13
MIME type:application/x-dosexec
Signature PureLogsStealer
File name:19806
File size:65'544 bytes
SHA256 hash: a7c24dccff04445fd5f1aaf2e1ee2b20fbf6250c3aff2bf477366f2148cadaf7
MD5 hash: 51d393f3cbac4ebedebd47af703cae67
MIME type:application/octet-stream
Signature PureLogsStealer
File name:15043
File size:22'074 bytes
SHA256 hash: c60cd55d129ca3d30c8441b0aab2f2ebba3566d82c49a14a613f747c5b044741
MD5 hash: 640948d6a42d4f69505b215e15f0a31f
MIME type:text/html
Signature PureLogsStealer
File name:19813
File size:65'625 bytes
SHA256 hash: e1184c77a9f4335fa86bfef7c7b174ed826667cbc30bcc06413f08fd60154e66
MD5 hash: 2de444df8c645e86e3e93742cb1732a7
MIME type:application/octet-stream
Signature PureLogsStealer
File name:15056
File size:21'993 bytes
SHA256 hash: 8e65dc666a990c67c64a54e3b7e899a14efa0ce2c1ce49f9c29756966f1221f3
MD5 hash: fc3dbade56c8b741c05ae0be44020243
MIME type:application/octet-stream
Signature PureLogsStealer
File name:19819
File size:65'570 bytes
SHA256 hash: 89d193c32b7171164af62b2491b60108b4f4fb2c46d3eb604e7a3cc5c5e2eedd
MD5 hash: 33ae38fdbc996f090f7189ea97e85101
MIME type:application/octet-stream
Signature PureLogsStealer
File name:19811
File size:65'544 bytes
SHA256 hash: 8e3c59de2accca84ef06e8e4dbbae15970283ebefeaa4f7cf12cb595099e382a
MD5 hash: 7c35ccb088b5c7626e4cde2cb2df4829
MIME type:application/octet-stream
Signature PureLogsStealer
File name:19802
File size:65'606 bytes
SHA256 hash: abbbbbd8792ab1eaea8766a98cebd65a6f939d058e4c548a7278918d09c5cf85
MD5 hash: 1ac6d8a26e703f479cdde37f88567849
MIME type:application/octet-stream
Signature PureLogsStealer
File name:19815
File size:65'580 bytes
SHA256 hash: 579f8ad1eaadbb7f8cf327dee6ca2e36f4339adcc8e6b6d12d913606caadb2c0
MD5 hash: 533da6fcfb27bafc4e3c2f3fbcef24f6
MIME type:audio/x-wav
Signature PureLogsStealer
File name:string.txt
File size:1'902 bytes
SHA256 hash: 21488091a716f61de0ce79e7c585c2e9627ef86b9b76c4b098b732c135b43d9a
MD5 hash: 088598ef8fc9c04d39939e27098e32c9
MIME type:application/octet-stream
Signature PureLogsStealer
File name:15055
File size:22'029 bytes
SHA256 hash: 9e20cb68288cd5577eb971508c718fbcd25bf9d4faba8d89178b1a8841dd4cdb
MD5 hash: 38940a705c49151ebae591fde66df1c6
MIME type:audio/x-wav
Signature PureLogsStealer
File name:4000
File size:56 bytes
SHA256 hash: 487dd6c80ee82ed646ca70379d208cd7cb8aa6dbb37269e6c421082d429fb87e
MD5 hash: 353b247dda30dd84bd2d5c14d64d1e43
MIME type:application/octet-stream
Signature PureLogsStealer
File name:15036
File size:21'993 bytes
SHA256 hash: afa4efe8d4e4e353ba0f3be3ed0003d57c53de188c2e2682c57ff5ab27591a83
MD5 hash: 2c19e99cd71a0e56b07ffe057648c441
MIME type:application/octet-stream
Signature PureLogsStealer
File name:15013
File size:22'074 bytes
SHA256 hash: 3b3ca241813b10baa751e0d92c223221f1632dcb4e285ab83a3a7e4242dd38e4
MD5 hash: 41ab2e637165232a727f004e8b9c52b8
MIME type:text/html
Signature PureLogsStealer
File name:19805
File size:65'580 bytes
SHA256 hash: 9e5db4a0446f44400ebed6c4e87cc1f6bd206d37349fd96a5dd888727cc7d482
MD5 hash: e34fdcad6bef8e70beb4960c908ca084
MIME type:audio/x-wav
Signature PureLogsStealer
File name:15001
File size:21'993 bytes
SHA256 hash: fb8394f140c472504deae5ef75d183b7ad745ad512fcfba331ac2dea978501ca
MD5 hash: ba3a594c175108995abf5ae975e6049b
MIME type:application/octet-stream
Signature PureLogsStealer
File name:15039
File size:22'019 bytes
SHA256 hash: 9e4119c3ea15a7ff32b10c3d645f9abc1a1596b23f23005f1a355082f433fdb2
MD5 hash: 61dbc23e5e89479adc5a1a3cf10fe79f
MIME type:text/plain
Signature PureLogsStealer
File name:15040
File size:22'029 bytes
SHA256 hash: 8f6207b24475f3cb8c2104ee854772cea710a4a1a97fe105e995306931aac0c2
MD5 hash: 8b2f91290ea1c308edd7b9bd35ef812e
MIME type:audio/x-wav
Signature PureLogsStealer
File name:15024
File size:22'019 bytes
SHA256 hash: 02aecd466591a838fcc46126ca2021b0a6356f98af4b5ecebad188ae9359b497
MD5 hash: f282e8e1f7f8d37016ca8a16ab9290a1
MIME type:application/octet-stream
Signature PureLogsStealer
File name:19821
File size:65'544 bytes
SHA256 hash: 604a4d43aac9886caa0baddb06cffc9f45a5ae3013bc2998403148061af682a2
MD5 hash: 0e312cd1a5f072bdf9740b2aaf6c3f23
MIME type:application/octet-stream
Signature PureLogsStealer
File name:15052
File size:22'067 bytes
SHA256 hash: 1a69030d85de5e4fab672a6911b0822b77ee482b392403f60b36fa563de1b5cf
MD5 hash: b649971355e1ceeba3f497dc5a964a83
MIME type:application/octet-stream
Signature PureLogsStealer
File name:15053
File size:22'073 bytes
SHA256 hash: 9f8bce4f4258122503b863fc1afa137215065e767c361c85b73a3e273140fb2d
MD5 hash: 8bd9751b4de0812818a20fc69c064be6
MIME type:text/html
Signature PureLogsStealer
File name:15015
File size:22'029 bytes
SHA256 hash: a1bb6e7a006bbcb2b4d3fa87c2b72c973160fd63c4a78987cb372381ca34ac59
MD5 hash: 1a558546eba2526f777bef03888adcaf
MIME type:audio/x-wav
Signature PureLogsStealer
File name:15045
File size:22'029 bytes
SHA256 hash: 571193c4ba14e15d46067b1366518205b5a6b9c12564df455ee6c4e9f5180e90
MD5 hash: c664244972792bd312d647909e2e6f2e
MIME type:audio/x-wav
Signature PureLogsStealer
File name:15020
File size:22'029 bytes
SHA256 hash: 77845474cad59f08b4b2e91505136feab9677c10c09b5e85c9abaeae56c3af8b
MD5 hash: 23037e42ff34c9591d4d11b3ff4548c4
MIME type:audio/x-wav
Signature PureLogsStealer
File name:19816
File size:65'544 bytes
SHA256 hash: 1d3ce3c44e711dd19634d9e5bedb1bf60770e56b14ab4fe9cf22add90d4731f1
MD5 hash: acf383ff1f47cd93fedb34ac0b6fd2ee
MIME type:application/octet-stream
Signature PureLogsStealer
File name:15037
File size:22'067 bytes
SHA256 hash: f40ec7448a2d8b2f6164d3182f7b65aad8da2e3f160711a905a34266073d8e62
MD5 hash: e5c815b4881a4e988181acbcfda54205
MIME type:application/octet-stream
Signature PureLogsStealer
File name:15004
File size:22'019 bytes
SHA256 hash: c5bad998f80927f26b8e8d28581e0bd7c2db4afe30024a8ef81e5a74bd37e177
MD5 hash: a7f59e069f40209fc37bd039f849e6f8
MIME type:text/plain
Signature PureLogsStealer
File name:19812
File size:65'612 bytes
SHA256 hash: dadc67f295883cbf69bca219e49f6f6e92efb23874fb1adc2569cd0e15f2d0f3
MD5 hash: abe7d1090d0650e5c24ebd0662f18e38
MIME type:application/octet-stream
Signature PureLogsStealer
File name:15030
File size:22'029 bytes
SHA256 hash: 84fab92afa30a4f0257d35e0f10b3b8c59b8ad53b0f4203da75bbbfadeb2911f
MD5 hash: f1374e095094ea9c1b47f1f9e2e3cf1c
MIME type:audio/x-wav
Signature PureLogsStealer
File name:15061
File size:21'993 bytes
SHA256 hash: c2bb51793ea19d238615117f995d272c9eee6fb16510ce11103cedfd55f91575
MD5 hash: 7d4cd1e0b7cd379ebd0867e18edfacb5
MIME type:application/octet-stream
Signature PureLogsStealer
File name:15062
File size:22'061 bytes
SHA256 hash: 102dfa5010f08d3c224b17102831efd8af47f3cf52b168bbed69c5d94de20c36
MD5 hash: 4473794e16a93ba5db32629d14e40143
MIME type:application/octet-stream
Signature PureLogsStealer
File name:15007
File size:22'065 bytes
SHA256 hash: bae542985a66fe6325a6fe20239de40ac635c2ad89ea0fd81cc663f47ee9ce98
MD5 hash: 64c78c0b9e85b2d83bb6bbaeb78d8db3
MIME type:application/octet-stream
Signature PureLogsStealer
File name:15038
File size:22'074 bytes
SHA256 hash: 4fe68f967d5b136f4dc592806278f768d9c80121e4f40f28ae7d958f3d906d17
MD5 hash: 0831c726df8383ecde80c4f964cb2fd9
MIME type:text/html
Signature PureLogsStealer
File name:19826
File size:57'096 bytes
SHA256 hash: b1c45b6763e745a4643ce51d8cb6bc3d342a4f313913c4c214d1a89105e25760
MD5 hash: aab049db0022fd6737663cf5ed962ce3
MIME type:application/octet-stream
Signature PureLogsStealer
File name:15058
File size:22'071 bytes
SHA256 hash: 70912b8f267e6e1ba3a3948f4e5a72ba8f77e283e9267edf8ed6361dd8854815
MD5 hash: 121cfa178df4137d0a2fd7df4d026fc1
MIME type:text/html
Signature PureLogsStealer
File name:15021
File size:21'993 bytes
SHA256 hash: b84b0adddfa1be7ffcc73352107e8fdca6030be17e6dcfe50a8ae6bac2d16345
MD5 hash: 8cf50bac158f6a5d56ba71af02602082
MIME type:application/octet-stream
Signature PureLogsStealer
File name:15034
File size:22'019 bytes
SHA256 hash: 03759af2101b63c65771de2a90f9a305ccecc3ac76a843b92c2e72db4827d7bd
MD5 hash: 519ac85544ef42172bfae3069f8e133d
MIME type:text/plain
Signature PureLogsStealer
File name:15018
File size:22'072 bytes
SHA256 hash: 4ead7c82c8ae2740c823753809049350dd350079a5a79b7217dfdec57485e8a6
MD5 hash: 09a61dd78f2d19d3733df1e0a92a20bd
MIME type:text/html
Signature PureLogsStealer
File name:19803
File size:65'624 bytes
SHA256 hash: c61ead3e022ab699a929cf3222d9a846499a79b14ba8c8c777b189583349909d
MD5 hash: bbf6be9670fa9a43416c880ac9242288
MIME type:application/octet-stream
Signature PureLogsStealer
File name:19809
File size:65'570 bytes
SHA256 hash: 5349a34d7110e128d400ea683affb6839556199c1ec77b615a341b7431505ab4
MD5 hash: 6d5e668a4590478a224797a07af2c388
MIME type:text/plain
Signature PureLogsStealer
File name:15025
File size:22'029 bytes
SHA256 hash: e36c3ab7fed1f82383995e6716c6d55c928790fdeaf5b475e6aa4047d4da0d1f
MD5 hash: 54fd1d379cbe6fc966268f7c0872f7a4
MIME type:audio/x-wav
Signature PureLogsStealer
File name:19824
File size:65'570 bytes
SHA256 hash: bf0f8ba6c286419a03baaaef771f0b98d2f5a8d657801d94398f979f6e5989de
MD5 hash: b62a05278c6a348feb5c5fc38abc784c
MIME type:application/octet-stream
Signature PureLogsStealer
File name:15064
File size:14'793 bytes
SHA256 hash: fde75e09b26a5c06e501bc59516b2f39280d055121790961e53342e6a6cf1549
MD5 hash: 20ad1a6ad530b0cbe4fe956e7ad24030
MIME type:text/plain
Signature PureLogsStealer
File name:15060
File size:22'029 bytes
SHA256 hash: b2936df64a710eaf28fd8bf2335c5bae29dcaedaed22618aaa172846445cde17
MD5 hash: 82b3f2629dadeea914bc86d50e4e33cf
MIME type:audio/x-wav
Signature PureLogsStealer
File name:15027
File size:22'061 bytes
SHA256 hash: a9c55570c09d8115f69aa607f2fb72ed13b09e627ae7ebda73f6fb3102e38383
MD5 hash: cdc89290aa52629c68fc4227ee050fae
MIME type:application/octet-stream
Signature PureLogsStealer
File name:19825
File size:65'580 bytes
SHA256 hash: 898228b650cacc625f4415a372557875e5c9868ee353234d39fac396efa1fecb
MD5 hash: 572507bdb81ff0b456fdd7ca1eea6444
MIME type:audio/x-wav
Signature PureLogsStealer
File name:15022
File size:22'061 bytes
SHA256 hash: b000475cfaa5a2711b99bb6c8c9e6db551cffaaa3a3b877e2f66c2ac81ce3604
MD5 hash: dbfad0c0b77afd51e4e5f0a8a8ad393c
MIME type:application/octet-stream
Signature PureLogsStealer
File name:15046
File size:21'993 bytes
SHA256 hash: f4c1c72a8ec35e6507f97ee84d3b6087b31ec53907e1022416f53b42dc5ae127
MD5 hash: 791e64a93b226259a5d0dea32eff6a91
MIME type:application/octet-stream
Signature PureLogsStealer
File name:15016
File size:21'993 bytes
SHA256 hash: a7579d685e4997b7cdc46a089a34777970871fe60c82a3c5054e271f12d2d02b
MD5 hash: a9ca4b28c95b21fb19cb50f16be6b989
MIME type:application/octet-stream
Signature PureLogsStealer
File name:libvlc.dll
File size:194'440 bytes
SHA256 hash: 095d164633af53ac015dcd76540e8523744f57d506db111f19b3fdd9d6180833
MD5 hash: 264a9e0194dbd3c0540d67b156ecaaba
MIME type:application/x-dosexec
Signature PureLogsStealer
File name:8581
File size:38'860 bytes
SHA256 hash: 49dd3945b1748518f528411c3312143cbe001fd8a4e1b71107b1deadbe3456b3
MD5 hash: a2776c2f189ad1628b61d8ddf67a6f1b
MIME type:application/octet-stream
Signature PureLogsStealer
File name:19804
File size:65'570 bytes
SHA256 hash: 11127e5b677c39a451a1ed2108658d74afc26694f7590a162e79ef1d1f901dbe
MD5 hash: f68686a8197a25f721c01de7856107fb
MIME type:text/plain
Signature PureLogsStealer
File name:15009
File size:22'019 bytes
SHA256 hash: 466f84cd2305e9b9dc9373c26b99123a715b0e383e15a08a899b7b4e7862e760
MD5 hash: ed3a024a3c378c4070899d93c5ff7e2c
MIME type:text/plain
Signature PureLogsStealer
File name:15049
File size:22'019 bytes
SHA256 hash: 9cb88c86fe719fe036f7eada94b01336c9b4ea6024216f4df9d453a5c56618bb
MD5 hash: 9680d893de5f2555f1f767e608b65f85
MIME type:text/plain
Signature PureLogsStealer
File name:19800
File size:65'580 bytes
SHA256 hash: 763fc76863e9bff6bc5729c17f52a4a40c8185c40894ee04a42583bd1f144a09
MD5 hash: a2f263cdf13cd82b236cd827d35af8b5
MIME type:audio/x-wav
Signature PureLogsStealer
File name:15023
File size:22'074 bytes
SHA256 hash: bf058707c03ad6f70a5ef49d5b929019a47839807604c79b50fc6fed82cd9df3
MD5 hash: 14096b4d876b7bfb29c591b4248c3c45
MIME type:text/html
Signature PureLogsStealer
File name:15051
File size:21'993 bytes
SHA256 hash: 19d1deb94b9239ea4dffd74eb628fb67c690721b8e94abc5d12e1008b6b20e44
MD5 hash: a2d730a94ec97fdeb3f43fe33f03e343
MIME type:application/octet-stream
Signature PureLogsStealer
File name:15012
File size:22'061 bytes
SHA256 hash: b0fd99a71413dc080fdfb93533f874295c39651baadcd0a47bb38603d0db27f4
MD5 hash: 248a862224df7f17c8c228e76a778285
MIME type:application/octet-stream
Signature PureLogsStealer
File name:15054
File size:22'019 bytes
SHA256 hash: 5f7dda1f2afc167c9b1ba714ad8d0928a32015fb54207caa170652eb99c7a622
MD5 hash: 82eddbb6358c7503c2e369db44effb9f
MIME type:text/plain
Signature PureLogsStealer
File name:15005
File size:22'029 bytes
SHA256 hash: 34fb9543406e41a9b4d5e16c0fa859983520b8a9cee94dc1273ca4a7d20833c9
MD5 hash: 80559a210e94d26788a009a4cbc62fc4
MIME type:audio/x-wav
Signature PureLogsStealer
File name:19807
File size:65'618 bytes
SHA256 hash: d44e9456e240972cc155d9f6661b483eb3f269d3d09dac0e138cd3cbab6103ad
MD5 hash: aa424027a8752c3297dfd62ecb531478
MIME type:application/octet-stream
Signature PureLogsStealer
File name:15029
File size:22'019 bytes
SHA256 hash: a4da7e1071f613a190de16fef3fb9426ccaf2b0c5c8f336f5979d83ca45a4768
MD5 hash: 245db240bca8d88f0ae239f7f5418406
MIME type:text/plain
Signature PureLogsStealer
File name:19823
File size:65'622 bytes
SHA256 hash: 0a0f97a6bf4facbda4329f7d77a813bf05401a6c828e586895b18c4e93a7d6c6
MD5 hash: df5a5d989e349633ff1b3cb571b65c9b
MIME type:application/octet-stream
Signature PureLogsStealer
File name:15006
File size:21'993 bytes
SHA256 hash: 01e0dfa3a03cb204b266f91d549ed5cdcd11f3bbc25c23a7cb05257f2a4a866e
MD5 hash: d379728f9bf88328e9ad2f02a87e0ed2
MIME type:application/octet-stream
Signature PureLogsStealer
File name:15028
File size:22'071 bytes
SHA256 hash: 499df5be2abf7bf97ab5fea20071b04dd0437815e12e16e47f5a494b75c6e614
MD5 hash: 93854203b286d4aed7ac4e04f8dab08f
MIME type:text/html
Signature PureLogsStealer
File name:15041
File size:21'993 bytes
SHA256 hash: 2cecac628836680afc09b98e187248e0551c24a5e6d911c409017cabfa1b0d9f
MD5 hash: 3f92c40b2ad659741f27a79256ea03a3
MIME type:application/octet-stream
Signature PureLogsStealer
File name:15014
File size:22'019 bytes
SHA256 hash: a61faed6434fbadccfda291a728addb9fe0767152a4142d58bbdbb994dbf0d49
MD5 hash: 9f9d696c3c9472180e5775fafc3edfae
MIME type:text/plain
Signature PureLogsStealer
File name:4016
File size:7'213 bytes
SHA256 hash: 7c29c9c97d198542101b0f89453e47c0a3178424deb69accf104bbadc897458b
MD5 hash: 9cc77318f7c698518b29044c57185d09
MIME type:audio/x-wav
Signature PureLogsStealer
File name:15033
File size:22'072 bytes
SHA256 hash: f4ff957f3fa343ed69b6e4bdd74510650032760d5f3494e0d043b41a63877ec1
MD5 hash: a5e149daba064f49708ab11f6fd16666
MIME type:text/html
Signature PureLogsStealer
File name:19801
File size:65'544 bytes
SHA256 hash: 7c02f840ef07d3312ee685cc02f43bfecbf0d58f8693d0e583aaaac9c3ae3af9
MD5 hash: 844eca36588aadfb157bc468c3753dfd
MIME type:application/octet-stream
Signature PureLogsStealer
File name:15010
File size:22'029 bytes
SHA256 hash: 52227bcd2395e04fba2ae4d8243efa1578833723b4737d96374f471dce91e061
MD5 hash: ce2b3f3712c4e281f6d2d42cf5631fc9
MIME type:audio/x-wav
Signature PureLogsStealer
File name:15011
File size:21'993 bytes
SHA256 hash: a44246bf5cbdbd6fb29994c929dc726e73e4c5ba9f100a0ae3b7ea3661069ccd
MD5 hash: 18f3702b3a1e0ffec048c8764ecf85f2
MIME type:application/octet-stream
Signature PureLogsStealer
File name:15032
File size:22'059 bytes
SHA256 hash: d25de40b73d92310d1e28a22db5d6200b67f895ef140f8c9039ba29a2bd13c71
MD5 hash: 8c783aea7187a70a2061b2e3fa4529e1
MIME type:application/octet-stream
Signature PureLogsStealer
File name:15048
File size:22'074 bytes
SHA256 hash: 101c1f6036bb3d430906d5547ff319b089d00ce5f1212e2c323a28ddfc5e74cf
MD5 hash: d973f306db3df88d9af984c86d34190b
MIME type:application/octet-stream
Signature PureLogsStealer
File name:15050
File size:22'029 bytes
SHA256 hash: 6a33463f348230e5cd4fc405d3d9ed4e3d58a01a4abc4f6a721e05d95ab99b41
MD5 hash: caef1e9b1e666fd7ce7dcea917cf8da7
MIME type:audio/x-wav
Signature PureLogsStealer
File name:vlc.exe
File size:1'046'424 bytes
SHA256 hash: bfa5740f028a8f310ca01c779bbc5f2f1b435c41539c54de592f715bb0c10389
MD5 hash: f0a4d5c3492115bfe2f346bc7bdce396
MIME type:application/x-dosexec
Signature PureLogsStealer
File name:15057
File size:22'065 bytes
SHA256 hash: 53eb8c316d757491e3f0adf270823ed505fc90e418bb49a303bed163b9ce25bb
MD5 hash: fb8d1fda7597bd13be48c2703aabf7fe
MIME type:application/octet-stream
Signature PureLogsStealer
File name:15031
File size:21'993 bytes
SHA256 hash: 32cb8fec6432de763c69e97b1ef57cbcf649a334ccabfc2221ed32290b8431aa
MD5 hash: c78b8d4e6b19273850fd3ea8e24422d3
MIME type:application/octet-stream
Signature PureLogsStealer
File name:19808
File size:65'622 bytes
SHA256 hash: 0aa4df7d68743cda95a5616eecef4b924a5f4f5343c0f8fab497819af291a0c3
MD5 hash: 855180d19b88718e901d1ab85f14b04a
MIME type:application/octet-stream
Signature PureLogsStealer
File name:19820
File size:65'580 bytes
SHA256 hash: 0e6813b803390327efdebeba5b9179b9e4d0542627528b48119120a24d00778a
MD5 hash: 7cc82791fe1a11f1ed7017df2debdbdc
MIME type:audio/x-wav
Signature PureLogsStealer
File name:15059
File size:22'019 bytes
SHA256 hash: 0cce06a0552c0d2cc29f76cdf71310e54ca7ba4e09eaa4ce206fdd46b5a2b9de
MD5 hash: 3233cf6d0ae1889d3206c7f8d628d91e
MIME type:text/plain
Signature PureLogsStealer
File name:15003
File size:22'073 bytes
SHA256 hash: 20a886c1cf5e26f114330c661cd76add4db236af4f2ddfc105bff900d1942022
MD5 hash: aebf55a76bda44594cff12a3c84191d7
MIME type:text/html
Signature PureLogsStealer
File name:15063
File size:22'072 bytes
SHA256 hash: b2d14f825937461864f5c29faafa414afb3cab48a9dc5dc66627f98b34bfbdbc
MD5 hash: d3b02c33554cbc68d7acaeaf011789c4
MIME type:text/html
Signature PureLogsStealer
File name:15047
File size:22'061 bytes
SHA256 hash: a799666255ef13233c115dfde70dedc719bea3a7b53ae8de073b063dc14c0c03
MD5 hash: a41f2c3476ca6056e4c222af99cbebda
MIME type:application/octet-stream
Signature PureLogsStealer
File name:15019
File size:22'019 bytes
SHA256 hash: dc64b20a0732a72b676f547ab14fbcf6706776e131c7e96b60e1bf41df0faedb
MD5 hash: e331960cc779b5e6df8efcce2e6d1c65
MIME type:text/plain
Signature PureLogsStealer
File name:19810
File size:65'580 bytes
SHA256 hash: cd2f75dfd558bdc3105adec9d106b03b9801e19e374ddbaf3a52a56253d9fede
MD5 hash: ac6a2d6933bd71d6330be005b866ba14
MIME type:audio/x-wav
Signature PureLogsStealer
File name:19817
File size:65'612 bytes
SHA256 hash: df2fb0f4a1542600f790ae5edefde4e0b5a60bc87ed62ef4b7c5da7338da16be
MD5 hash: 4e74ce0ba9cdbd129a165b6f10a0cca6
MIME type:application/octet-stream
Signature PureLogsStealer
File name:15042
File size:22'057 bytes
SHA256 hash: 165296550aa2e850b68cf6f988d2e15f66a5aa82a9ec92c81c87325506b3dc22
MD5 hash: 35c9130ae7c1e0c07dd033056975fb84
MIME type:application/octet-stream
Signature PureLogsStealer
Vendor Threat Intelligence
Details
Link:
https://research.acce.ciphertechsolutions.com/results/d518e60c-449a-40f8-8ff8-409fe51109a6/
Verdict:
Unknown
Threat level:
n/a  -.1.0/10
Confidence:
100%
Tags:
adaptive-context anti-debug anti-vm crypto mingw overlay packed reconnaissance signed
Link:
https://www.filescan.io/uploads/6aafdd1d5a41a7ea8db58741/reports/bb356eb4-6e04-4429-bd2e-46f1336ee43f/overview
Verdict:
Unknown
Link:
https://www.hybrid-analysis.com/sample/ae5a7b4d6ac001e41a49833ea03abba64f33d49ea46d3e4875d18331c52eb6a8
Verdict:
Unknown
File Type:
zip
Link:
https://opentip.kaspersky.com/ae5a7b4d6ac001e41a49833ea03abba64f33d49ea46d3e4875d18331c52eb6a8/results?tab=lookup
Score:
83%
Verdict:
Malware
File Type:
ARCHIVE
Link:
https://malprob.io/report/ae5a7b4d6ac001e41a49833ea03abba64f33d49ea46d3e4875d18331c52eb6a8
Verdict:
inconclusive
YARA:
3 match(es)
Tags:
Executable PDB Path PE (Portable Executable) PE File Layout Zip Archive
Link:
https://app.malva.re/file/d25b04e748d3faa33ae684ba15e39a96
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/ae5a7b4d6ac001e41a49833ea03abba64f33d49ea46d3e4875d18331c52eb6a8/
Threat name:
Win64.Trojan.Suschil
Create hunting rule
Status:
Malicious
First seen:
2026-08-26 11:34:31 UTC
File Type:
Binary (Archive)
Extracted files:
54
AV detection:
19 of 36 (52.78%)
Threat level:
  5/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=vznhwtlkyaa6igsjqm7kaov3uzhthve6urwt4sdv2gbtdrjow2ua._file
Result
Malware family:
n/a
Score:
  5/10
Tags:
n/a
Link:
https://tria.ge/reports/260920-r5z8maxydx/
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
Malicious File
Score:
1.00
Link:
https://yomi.yoroi.company/submissions/ae5a7b4d6ac001e41a49833ea03abba64f33d49ea46d3e4875d18331c52eb6a8

YARA Signatures

MalwareBazaar uses YARA rules from several public and non-public repositories, such as YARAhub and Malpedia. Those are being matched against malware samples uploaded to MalwareBazaar as well as against any suspicious process dumps they may create. Please note that only results from TLP:CLEAR rules are being displayed.

Rule name:CP_Script_Inject_Detector
Create hunting rule
Author:DiegoAnalytics
Description:Detects attempts to inject code into another process across PE, ELF, Mach-O binaries
Rule name:DebuggerCheck__API
Create hunting rule
Reference:https://github.com/naxonez/yaraRules/blob/master/AntiDebugging.yara
Rule name:golang_bin_JCorn_CSC846
Create hunting rule
Author:Justin Cornwell
Description:CSC-846 Golang detection ruleset
Rule name:meth_stackstrings
Create hunting rule
Author:Willi Ballenthin
Rule name:NET
Create hunting rule
Author:malware-lu
Rule name:pe_detect_tls_callbacks
Create hunting rule
Rule name:PE_Digital_Certificate
Create hunting rule
Author:albertzsigovits
Rule name:TH_AntiVM_MassHunt_Win_Malware_2026_CYFARE
Create hunting rule
Author:CYFARE
Description:Detects Windows malware employing anti-VM / anti-sandbox evasion techniques across VMware, VirtualBox, Hyper-V, QEMU, Xen, and generic sandbox environments
Reference:https://cyfare.net/
Rule name:VECT_Ransomware
Create hunting rule
Author:Mustafa Bakhit
Description:Detects activity associated with VECT ransomware. This includes registry modifications and deletions, execution of system and defense-evasion commands, suspicious API usage, mutex creation, file and memory manipulation, ransomware note generation, anti-debugging and anti-analysis techniques, and embedded cryptographic constants (SHA256) characteristic of this malware family. Designed for threat intelligence and malware detection environments.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Web download

PureLogsStealer

zip ae5a7b4d6ac001e41a49833ea03abba64f33d49ea46d3e4875d18331c52eb6a8

(this sample)

  
Delivery method
Distributed via web download
  
URLhaus
https://urlhaus.abuse.ch/url/3906362/

Comments