MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 c0218cdf209ec4fe1e9395c3f07d766d4456b9be6b67772689a40c32b04a0ed9. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	c0218cdf209ec4fe1e9395c3f07d766d4456b9be6b67772689a40c32b04a0ed9
SHA3-384 hash:	57def76c309e4a4217175bbb82800a2cf083bdbfa23fe22642e2892b4965f135585f59979e55204cdd4594abca557c84
SHA1 hash:	43b06b132475b2139632fae1d115532c89c1a881
MD5 hash:	e0e0dbf0ed1423abad18ef2c4ecdebdb
humanhash:	early-fourteen-fix-emma
File name:	Photo.scr
Download:	download sample
File size:	6'271'176 bytes
First seen:	2025-12-08 16:55:59 UTC
Last seen:	Never
File type:	exe
MIME type:	application/x-dosexec
ssdeep	12288:NCd+eqoTmcfq5894PLEA2sEg1P1z3VujCbC3X:Mwe9m89eo7Hglx3aCOH
TLSH	T1265623729C65A900F054B5F578C61CCCAFC068B4442FD660BABF9787C74CAD61946E8F
TrID	22.2% (.ICL) Windows Icons Library (generic) (2059/9) 22.0% (.EXE) DOS Executable Borland Pascal 7.0x (2035/25) 21.6% (.EXE) Generic Win/DOS Executable (2002/3) 21.6% (.EXE) DOS Executable Generic (2000/1) 10.8% (.SCORE) Music Craft Score (1007/6)
Magika	unknown
Reporter	abuse_ch
Tags:	exe scr

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

76

Origin country :

SE

Vendor Threat Intelligence

ACCE Unknown

No detections

CAPE Sandbox

Detection:

n/a

Link:

https://www.capesandbox.com/analysis/43887/

CyberFortress Clean

Verdict:

Clean

Score:

99.9%

Link:

https://cyber-fortress.com/docs/result/index.php?id=69370331881313558a2b9ff7

Tags:

n/a

Hybrid Analysis Unknown

Verdict:

Unknown

Link:

https://www.hybrid-analysis.com/sample/c0218cdf209ec4fe1e9395c3f07d766d4456b9be6b67772689a40c32b04a0ed9

InQuest

Result

Gathering data

Kaspersky OpenTIP Clean

Verdict:

Clean

File Type:

unknown

Link:

https://opentip.kaspersky.com/c0218cdf209ec4fe1e9395c3f07d766d4456b9be6b67772689a40c32b04a0ed9/results?tab=lookup

Joe Sandbox unknown

Result

Threat name:

n/a

Detection:

unknown

Classification:

n/a

Score:

0 / 100

Link:

https://www.joesandbox.com/analysis/1829037

Behaviour

Behavior Graph:

Download SVG

Malva.RE

Gathering data

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/c0218cdf209ec4fe1e9395c3f07d766d4456b9be6b67772689a40c32b04a0ed9/

Neiki Clean

Verdict:

Clean

Link:

https://tip.neiki.dev/file/c0218cdf209ec4fe1e9395c3f07d766d4456b9be6b67772689a40c32b04a0ed9

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=yaqyzxzat3cp4hutsxb7a7lwnvcfnon6nntxojujuqgdfmckb3mq._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  1/10

Tags:

n/a

Link:

https://tria.ge/reports/251208-vfq57sypcz/

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

File information

---

The table below shows additional information about this malware sample such as delivery method and external references.

Web download

exe c0218cdf209ec4fe1e9395c3f07d766d4456b9be6b67772689a40c32b04a0ed9

(this sample)

  

URLhaus

https://urlhaus.abuse.ch/url/3216430/

  

Delivery method

Distributed via web download

Cape

https://www.capesandbox.com/analysis/43887/