MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 cdbc1565b097fa6c91f57e4361dfc76a4f124473f595d3e625dcbb6edb7738f7. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

ACRStealer

Vendor detections: 3

Intelligence 3 IOCs YARA 2 File information Comments

SHA256 hash:	cdbc1565b097fa6c91f57e4361dfc76a4f124473f595d3e625dcbb6edb7738f7
SHA3-384 hash:	2e9db122bef437bc5644f17b5d9ee575f86ccb5ec546d7640b03b7351b2032836a402fdcaa7e017e0505f8b74374be9b
SHA1 hash:	2668c04fb68fa8e20a530e8c54e56499730bfc55
MD5 hash:	437b3a8fd4fae59714045bd82d06fa77
humanhash:	pizza-florida-enemy-freddie
File name:	i№st@113R ver.4.8__P@$$ 0104.rar
Download:	download sample
Signature	ACRStealer Create hunting rule
File size:	22'767'074 bytes
First seen:	2025-05-18 10:48:32 UTC
Last seen:	Never
File type:	rar
MIME type:	application/x-rar
Note:	This file is a password protected archive. The password is: 0104
ssdeep	393216:zNVEEut5MDzZjmo6iADF8Ju9DHrZFZ7CBwNM1wuz6M5K3hSrgqV:zNYtywo1AGJmDHzZ7CBAM1/eiEe
TLSH	T1C83733F02EB54B11378404B4261F60F2A3A561F692E57F7297600BFE93AE1C1E892DF5
TrID	61.5% (.RAR) RAR compressed archive (v5.0) (8000/1) 38.4% (.RAR) RAR compressed archive (gen) (5000/1)
Magika	rar
Reporter	aachum
Tags:	ACRStealer file-pumped pw-0104 rar

iamaachum

https://chefupdates.rest/?cl=4 => https://mega.nz/file/uUcDVLCZ#GWyln6uIJ_4vvatM7FNpiVyJ_S_mt5SK9rwHuL3dcGI

Intelligence

File Origin

# of uploads :

# of downloads :

Origin country :

File Archive Information

This file is a password protected archive. The password is: 0104

This file archive contains 68 file(s), sorted by their relevance:

File name:	Microsoft.Internal.VisualStudio.Interop.dll
File size:	464'824 bytes
SHA256 hash:	9319b8d46a7f91024af8cb72f242c8e9020833c7ba3ec33cf339099a1a5d62d0
MD5 hash:	67ffeb8781ed93dac236c958b9af3d2c
MIME type:	application/x-dosexec
Signature	ACRStealer

File name:	axvlc.dll
File size:	1'347'712 bytes
SHA256 hash:	7a83fb6086c8f633f2e208ccea640bbabd01d4983599ac887b27beb96079f0af
MD5 hash:	56028035dd2e4ba3b1a86197567458be
MIME type:	application/x-dosexec
Signature	ACRStealer

File name:	avutil-progdvb-58.dll
File size:	924'384 bytes
SHA256 hash:	c7535bae888a92052d2c00ba206877953b040851f8e8b8a80185a5942fee5125
MD5 hash:	9eb9c084a55c83a71e24a084a483e87b
MIME type:	application/x-dosexec
Signature	ACRStealer

File name:	ReflectionClassConstant_getValue_typed.phpt
File size:	814 bytes
SHA256 hash:	ddb98c7b48ffbe920f22c4257c8600d83791377ae4d8f064fee507284d680c97
MD5 hash:	65aca68d096966e984860111c5278950
MIME type:	text/x-c++
Signature	ACRStealer

File name:	libstdc++-6.dll
File size:	1'540'622 bytes
SHA256 hash:	fe96f74f6513681b3ff1cdf67145a40dee5bc629dbc2be1995d0c641e97260b0
MD5 hash:	728b61ff321886151a8a5d2703fd4df3
MIME type:	application/x-dosexec
Signature	ACRStealer

File name:	bug80719.phpt
File size:	469 bytes
SHA256 hash:	62a0d21d60811f0c703eb359fe064d7c1812490243e6fb656b6a90b26728f27d
MD5 hash:	0160c1c0cf2ba25d4f0914148b93f855
MIME type:	text/plain
Signature	ACRStealer

File name:	Microsoft.Cci.dll
File size:	374'704 bytes
SHA256 hash:	1af87a2136fe6c2e74f2db400fb8b1015c1d6815ec88795f535bcb05316aed23
MD5 hash:	6940fd027f2b0035516ec6880b83b567
MIME type:	application/x-dosexec
Signature	ACRStealer

File name:	bug75535.phpt
File size:	764 bytes
SHA256 hash:	345afdabc2dd497600750e197e7a7e3c18e365b3888338fb61690b02bf6ebf94
MD5 hash:	3fffac25f7aae63a22424d9c1696d332
MIME type:	text/x-ruby
Signature	ACRStealer

File name:	Microsoft.VisualStudio.LanguageServices.TypeScript.resources.dll
File size:	279'072 bytes
SHA256 hash:	e5e076e14182227c6d853735b77d1e92cf81bd3b91009b3b788af94fad158456
MD5 hash:	337931d5dd5cdcee396e4880c6256429
MIME type:	application/x-dosexec
Signature	ACRStealer

File name:	Fire 3.png
File size:	23'087 bytes
SHA256 hash:	427c8cbcd613c6f5119b0603a289194f51153480d60223152d8277df3e55d337
MD5 hash:	94b3006011d5abeaedc6663b926077f5
MIME type:	image/png
Signature	ACRStealer

File name:	bug68996.phpt
File size:	274 bytes
SHA256 hash:	87d7127ad16c3001f018c7d332ed5621e831e1e0d7d76c611313b6ed1e1adfa9
MD5 hash:	e223b035158fbe3f9868a43b2d5c68b9
MIME type:	text/plain
Signature	ACRStealer

File name:	wdag.dll
File size:	228'928 bytes
SHA256 hash:	f505626a2413aca0c81d1a09bd291e216bf3891ad7379bef302f484d16eca2d7
MD5 hash:	37d07e825917948d9aace95efbe16912
MIME type:	application/x-dosexec
Signature	ACRStealer

File name:	mswebprjui.dll
File size:	373'696 bytes
SHA256 hash:	d0021a6bb870d741e9a23cd398a156b704d43d2124ed62bee8858a00c26f3e11
MD5 hash:	c2702ab2989db597517e70303485bccf
MIME type:	application/x-dosexec
Signature	ACRStealer

File name:	tipskins.dll
File size:	1'046'528 bytes
SHA256 hash:	8e2c94ce0a149047b45652c8d22428e9ff3834cb7328e28edd33deb5d9d06eca
MD5 hash:	5262795822926c515042caab4d8604d8
MIME type:	application/x-dosexec
Signature	ACRStealer

File name:	dvacaptioning.dll
File size:	1'435'848 bytes
SHA256 hash:	6b1581ae91a133a609d830f119eb0b050b80ed8ead3b4288c3f923689382ab1e
MD5 hash:	e3a639a034b4e6d90e75bf9952d04291
MIME type:	application/x-dosexec
Signature	ACRStealer

File name:	msys-svn_subr-1-0.dll
File size:	782'807 bytes
SHA256 hash:	898f97d251273578cbc389a5503d8b055f764ffeaea5e0f3f106284adf4c4b34
MD5 hash:	bfc5d5a9e51db4f034548f5ce36a02a4
MIME type:	application/x-dosexec
Signature	ACRStealer

File name:	wp_type1ttf64.dll
File size:	991'232 bytes
SHA256 hash:	1fc4298b89fcc2396336350766fef13be10135df03adccb2b183e366c3e52ffc
MD5 hash:	da6ec984bf76a57cc7a77074b8626438
MIME type:	application/x-dosexec
Signature	ACRStealer

File name:	backed-string-heredoc.phpt
File size:	288 bytes
SHA256 hash:	8f7c35714d714e757c8a2dddae12d65ff49fd0d841e6cf2877fb58eecfc14421
MD5 hash:	ac3d69f8228b7d2a139d9eb4c4dd837b
MIME type:	text/plain
Signature	ACRStealer

File name:	Qt5Widgets.dll
File size:	6'226'432 bytes
SHA256 hash:	9829bdf2eb6d19f523c0c0306ea8f41afdc478635430695c2e016fdf0a025858
MD5 hash:	58e7f25df568d859dabbbd490de94dfd
MIME type:	application/x-dosexec
Signature	ACRStealer

File name:	mb_stristr_variation5.phpt
File size:	2'158 bytes
SHA256 hash:	0bb4b80a9fc9904d5849a522bdc0cab8923c7957f53bd0ec4c0235a9cffb5bdd
MD5 hash:	a2087f76a8402e8297d98f8c1f6210e6
MIME type:	text/plain
Signature	ACRStealer

File name:	RarExt32.dll
File size:	579'224 bytes
SHA256 hash:	53322be2fdf24b09de1070a2713855ea3d01bbc895c6d24a2991d1e2139ca585
MD5 hash:	8510bea1dc5a2245a72dfe5ecd20cda6
MIME type:	application/x-dosexec
Signature	ACRStealer

File name:	Microsoft.VisualStudio.TraceCollector.dll
File size:	244'264 bytes
SHA256 hash:	f7aa18ee77f02d27858b11b759a33c49ed9d051f18e11f23e3bbac999b97e5b1
MD5 hash:	44889b1594043c56504a57dcaa9f6048
MIME type:	application/x-dosexec
Signature	ACRStealer

File name:	Qt5Network.dll
File size:	1'070'480 bytes
SHA256 hash:	6ede77792c97dda9ff4dd6a62924b3145a0d5fc5dd23534a789001393ef60f41
MD5 hash:	205c9938101548e795a9b244811b879e
MIME type:	application/x-dosexec
Signature	ACRStealer

File name:	vet_flags.txt
File size:	2'843 bytes
SHA256 hash:	4db03ef8a87024f0020768fef7274313be3fe613c28d570ec727f5ae10422ee6
MD5 hash:	4a5b341156af518905cbb742f0627a75
MIME type:	text/plain
Signature	ACRStealer

File name:	rmdir_variation3.phpt
File size:	2'318 bytes
SHA256 hash:	6baaa44aa11223c594c05732db8b4782a52fbfd1ed8b387476296f64ce8bd9bf
MD5 hash:	19eb291500f14bd7434f85bc011f02b8
MIME type:	text/plain
Signature	ACRStealer

File name:	bug55478.phpt
File size:	325 bytes
SHA256 hash:	aedfb24b52bf184b84a73a92cb8ed23ce1e21a39b54c0ea8254c831c817d8b1c
MD5 hash:	44742ae2983316552f892d83e9f296ce
MIME type:	text/plain
Signature	ACRStealer

File name:	bug38132.phpt
File size:	617 bytes
SHA256 hash:	f886f28b55c586415cdf5c19f0abf433533f746e5c77ae874209fae5b385f098
MD5 hash:	1d06421b3a41384bac63737f2b67be25
MIME type:	text/x-c++
Signature	ACRStealer

File name:	readline.stub.php
File size:	1'075 bytes
SHA256 hash:	08ad8aa373939a0d0b9935e52ec05e7162539e984ae8ba86757d342249ac8024
MD5 hash:	53493e5efcd9461f8a0819084ef84658
MIME type:	text/x-php
Signature	ACRStealer

File name:	vdt80ui.dll
File size:	354'232 bytes
SHA256 hash:	accc01ea13354637b2a940d7f8ade80beda77d4602df91dfa5720cbee398bdf1
MD5 hash:	a4c2f26628b1a5090966afb7508eb603
MIME type:	application/x-dosexec
Signature	ACRStealer

File name:	Qt5Gui.dll
File size:	6'398'976 bytes
SHA256 hash:	8f7c29d0c656b515f30870cca2666b6e9bc1be0152a64afabce19b1ada508ad7
MD5 hash:	8d28f304e1266da7a1d4bc53f57b0d66
MIME type:	application/x-dosexec
Signature	ACRStealer

File name:	cdio.dll
File size:	364'032 bytes
SHA256 hash:	eb7d6e259e6b98068670edc43c414801936a21b72ae2d61c2c5c44be9ab14a19
MD5 hash:	b2553f5a6b035bc7825778c0a059e588
MIME type:	application/x-dosexec
Signature	ACRStealer

File name:	r3_groupE_list_004w.phpt
File size:	1'758 bytes
SHA256 hash:	6541650a4b7922ba94761a3ed4fb162497a7e4102b78e887b9451ca31b0f6f1a
MD5 hash:	3be0c8fd1e7ec3294900ca776745df06
MIME type:	text/x-c++
Signature	ACRStealer

File name:	mscss7es.dll
File size:	480'152 bytes
SHA256 hash:	b22edc50669d9fdcb316e0325b63ed3bf954c62a2b7e92f0c18d10594beaf8f5
MD5 hash:	45efde7e16e891fe55361ab0b836a0fe
MIME type:	application/x-dosexec
Signature	ACRStealer

File name:	cpfecl.Win32.dll
File size:	416'184 bytes
SHA256 hash:	eaa583048b8617bab1735b62666efc2aafc040fa3a52ed17114f8ed3539e5b6b
MD5 hash:	6a5944263ff95915a083705b65b350ff
MIME type:	application/x-dosexec
Signature	ACRStealer

File name:	imagecopymergegray_basic.phpt
File size:	645 bytes
SHA256 hash:	33d1122209be613ebaf799f0842eddc54a4df2cfd5d092bcd338f2d16c244a42
MD5 hash:	bf44a18a15486cfe9ca0d81b0548e9ad
MIME type:	text/plain
Signature	ACRStealer

File name:	NASCloudService.dll
File size:	397'976 bytes
SHA256 hash:	f196d7c1125638c6ec0b1d415fa2645ff3c6a0d2b8f8282962ea0d01e74206a7
MD5 hash:	eaa4b5d25b266c3fb4159d640208e9ac
MIME type:	application/x-dosexec
Signature	ACRStealer

File name:	backed-negative-int.phpt
File size:	277 bytes
SHA256 hash:	fab78ba4d8150e74012ee350fd16e1d5f4094252d0a0a5da58ff316c8bf3773b
MD5 hash:	e412b486799e7cd3cbe311d7eca1d59a
MIME type:	text/plain
Signature	ACRStealer

File name:	FileTrackerA4.dll
File size:	312'208 bytes
SHA256 hash:	4ec5076408dac4f0468393cfbe7fad310f80ca88218112618ecdf6efaae0c2fa
MD5 hash:	98afcbc47eba94b220e6685451895a15
MIME type:	application/x-dosexec
Signature	ACRStealer

File name:	jp2ssv.dll
File size:	209'824 bytes
SHA256 hash:	9b1832957833b43edcfdcc5cd1de393b2bd0e1bc81ab03cda40dd3990e8c8029
MD5 hash:	26a901a5e125df2dc9a13f39909b383d
MIME type:	application/x-dosexec
Signature	ACRStealer

File name:	cpfecl.Clang.Windows.x64.dll
File size:	447'408 bytes
SHA256 hash:	1686cc43af30bf183a19ce23e1ce71d585462ac49bfa1eeb7c573a4ffb42bdf6
MD5 hash:	c6f7963bf8d0c6a62fc7a5a14d3c6186
MIME type:	application/x-dosexec
Signature	ACRStealer

File name:	Microsoft.ProgramSynthesis.Transformation.Json.dll
File size:	227'704 bytes
SHA256 hash:	25269d6346f808eb38e8dcd620bc4f6232903f7108c3354ea38f25a80443870e
MD5 hash:	65da79ff6df829abeabb7eb9a8eed06c
MIME type:	application/x-dosexec
Signature	ACRStealer

File name:	Microsoft.VisualStudio.Design.dll
File size:	835'464 bytes
SHA256 hash:	ffda9aee4712fd9357d93d2bb27d0d0534289910f66c2af3975887508a6670b1
MD5 hash:	c1647a398dba55f6cc596c2dc88804f4
MIME type:	application/x-dosexec
Signature	ACRStealer

File name:	bassenc.dll
File size:	16'448 bytes
SHA256 hash:	3b24b567fe34c59e6f77c7fc99e7b47eeedf4606bb3a35ef2a6118e4a8ca386c
MD5 hash:	efd43a932ff1f7169d0fa65e09cc75ea
MIME type:	application/x-dosexec
Signature	ACRStealer

File name:	Microsoft.Diagnostics.HeapDump.dll
File size:	403'344 bytes
SHA256 hash:	41fcbf42d10a1bf5d3ffda85c1992bae68ce76e9e3a32b1989be4af2200f4cdd
MD5 hash:	ee9de614842b596fdf86ecc3247887c1
MIME type:	application/x-dosexec
Signature	ACRStealer

File name:	sort_basic.phpt
File size:	5'436 bytes
SHA256 hash:	241c0065db977fe038df55171fc27705e140f46b2005d5b011a1e9b11f306b9c
MD5 hash:	3859ba141004eebe741a56b55454fc1e
MIME type:	text/plain
Signature	ACRStealer

File name:	IntelQuickSyncDecoder.dll
File size:	517'472 bytes
SHA256 hash:	79bfa788e0ef7caff3c137834920563f8f7e139ac4c58369cb8b6e58f01ddedd
MD5 hash:	3d499916e49ea4b20bc9e4bad1ae5476
MIME type:	application/x-dosexec
Signature	ACRStealer

File name:	026_unpack_in_args.phpt
File size:	210 bytes
SHA256 hash:	8bcc27b8813adb5bd6b46e4eb3bda1ece117376d3263814302552c5f8d533cc4
MD5 hash:	73a2cebfeba08851d098ca2776632f27
MIME type:	text/x-c++
Signature	ACRStealer

File name:	iterator_033.phpt
File size:	520 bytes
SHA256 hash:	80d34f4a323b6784df00b6f021426b08ddb8e9496797137ea8d8764b2cfab0ab
MD5 hash:	a7060e7899fd8a77dadec65fd01f73e4
MIME type:	text/plain
Signature	ACRStealer

File name:	WebAppUpgrade.dll
File size:	380'296 bytes
SHA256 hash:	63850c2615793ed8b7eed7c5d7abdced6ec6b31aaab087651af1cd610a91fc37
MD5 hash:	81f567151e4ad02a2ec51c319cbd4024
MIME type:	application/x-dosexec
Signature	ACRStealer

File name:	PkgdefMgmt.dll
File size:	450'096 bytes
SHA256 hash:	3a50f6991d25ef7a2a1e2fa6922d68198df3b9b14260f199caf9ddead98e7eba
MD5 hash:	ae0de67a127b0f1ae217c6f0a6283896
MIME type:	application/x-dosexec
Signature	ACRStealer

File name:	Microsoft.Data.Tools.Design.XmlCore.dll
File size:	312'200 bytes
SHA256 hash:	80f94898b1699414fae1f47e776cc185f14e64d6fc1091d32f827ddd37e6d4cf
MD5 hash:	b737306c31ef359a40c0af21ccfd2a2f
MIME type:	application/x-dosexec
Signature	ACRStealer

File name:	libde265.dll
File size:	999'424 bytes
SHA256 hash:	c37a6aae4e4f48b3dd9c92169cda869165b2c5164c7e225954b89cb520e72fcf
MD5 hash:	ade31eba076faffc4ce47fc6f7694cf5
MIME type:	application/x-dosexec
Signature	ACRStealer

File name:	vcomp140.dll
File size:	191'864 bytes
SHA256 hash:	2b35b1082b95244a34efdfacf2ac6f252b7fc5189671715963fa685507e2ff2f
MD5 hash:	1017bc2c5f48feda26358f9aa53508a0
MIME type:	application/x-dosexec
Signature	ACRStealer

File name:	libcdda_plugin.dll
File size:	826'496 bytes
SHA256 hash:	6746a6b131b4338fdbd03f9d63683ff3442e0b11b9e1691b2c0a6676a804770a
MD5 hash:	52fa49105a67f737c9792d776833360a
MIME type:	application/x-dosexec
Signature	ACRStealer

File name:	gh8068.phpt
File size:	516 bytes
SHA256 hash:	a25992c29889135022f01ab81889fcaa3b69b3f3d88ca7ab683e61ddc0caee4f
MD5 hash:	c2adb05e35dda8bd315228cf6cf22043
MIME type:	text/plain
Signature	ACRStealer

File name:	dba_db4_009.phpt
File size:	722 bytes
SHA256 hash:	6f347f82bfba98c888024768ccb78f1e1125b68992f57224b78138d60e45bc51
MD5 hash:	93dfb2ca1620e2907f5b611d09883bdd
MIME type:	text/plain
Signature	ACRStealer

File name:	libgail.dll
File size:	310'556 bytes
SHA256 hash:	fe7b7322fcc5055d02d14a31635a8bd69f784795652677ab63c1f54761a3100d
MD5 hash:	75fbe523a6b93fa5a46b986e99da08a4
MIME type:	application/x-dosexec
Signature	ACRStealer

File name:	bug50698_3.wsdl
File size:	15'524 bytes
SHA256 hash:	571fd4d917f707a747c9a9c9aa0d2ad2023272c56f518325f2eba54793e6cbf8
MD5 hash:	4ae8e4ce5462bb3eee07f5d05ce6adc9
MIME type:	text/plain
Signature	ACRStealer

File name:	libspatialaudio_plugin.dll
File size:	1'087'616 bytes
SHA256 hash:	4f2a972d676e8ccff03524dc897ac8bece6c779f9112cd20e6ce7a2e513eb92c
MD5 hash:	8c8b3123568fc7347bb435da4629dde9
MIME type:	application/x-dosexec
Signature	ACRStealer

File name:	NuGet.PackageManagement.VisualStudio.dll
File size:	819'120 bytes
SHA256 hash:	a527c39a6611cd63e76a015227cc4a59c9ddf1c8fe693c922de6bce89f010178
MD5 hash:	4289557655533c056e7b64d24e1f3193
MIME type:	application/x-dosexec
Signature	ACRStealer

File name:	libgcc_s_dw2-1.dll
File size:	120'334 bytes
SHA256 hash:	4d2e2d408d399d066b0aaef2047f7a33515c13c589832de0d9f1ba87a530c394
MD5 hash:	043b39434829ce93637b1801d57b2082
MIME type:	application/x-dosexec
Signature	ACRStealer

File name:	Perfcore.dll
File size:	294'152 bytes
SHA256 hash:	034956d71b3a9bb3cb160eba59a43d3d31f6ca5b1ce97d423bbb292ff31da6bf
MD5 hash:	70eb41ff19608067e159b8255bcc541a
MIME type:	application/x-dosexec
Signature	ACRStealer

File name:	mgcv.dll
File size:	692'224 bytes
SHA256 hash:	7767961ced08f820b67adc621addb3cfccbacb5fb45afa008f41bce59b5d7c2b
MD5 hash:	47e7b6cedf3efe46b56308d37bee52c9
MIME type:	application/x-dosexec
Signature	ACRStealer

File name:	php_strip_whitespace.phpt
File size:	952 bytes
SHA256 hash:	3221e24c276673c9095d026d6e73ecc1ffdcc84e25856aa1c81e0db54aad6a2c
MD5 hash:	f509ddb119adf2935e77cc1104ef2a61
MIME type:	text/x-c++
Signature	ACRStealer

File name:	VsGraphicsNativeUtils.dll
File size:	223'624 bytes
SHA256 hash:	b885c134dc3af6a806899b3ce63a4616859c2ed39c385023fbb3068b3404228a
MD5 hash:	01c9d3f698e9f6893c31fcd0b56c5fcd
MIME type:	application/x-dosexec
Signature	ACRStealer

File name:	tar_makegz.phpt
File size:	772 bytes
SHA256 hash:	4fe8228a140a372629299f310ec23eb8baa8708d54cd58e18866f828c4ae7195
MD5 hash:	003540e1543847049f10bb374958dd0e
MIME type:	text/plain
Signature	ACRStealer

File name:	System.Linq.Queryable.dll
File size:	231'584 bytes
SHA256 hash:	2444aa33cfa73d78395913458541c913ca094a24d83f8e5cf4cb428f2b574889
MD5 hash:	fad10667ed1e484c5a9073df2927629c
MIME type:	application/x-dosexec
Signature	ACRStealer

File name:	Setup.exe
Pumped file	This file is pumped. MalwareBazaar has de-pumped it.
File size:	755'479'810 bytes
SHA256 hash:	dd32784e90ec60428c01c1c57a8961762788800533936918dceaf8a6c8a0c5f8
MD5 hash:	4433ee1ee6d7fd4834643812510e9977
De-pumped file size:	355'328 bytes (Vs. original size of 755'479'810 bytes)
De-pumped SHA256 hash:	0fdb512ee88d71cc5bce03be7cd51df0009131dd2110b10243d62aacc48e4a72
De-pumped MD5 hash:	262eb122dbae0c4bd212ccebfd88561f
MIME type:	application/x-dosexec
Signature	ACRStealer

Vendor Threat Intelligence

Verdict:

Malicious

Score:

70%

Link:

https://cyber-fortress.com/docs/result/index.php?id=681ba84b91991ead82b5e961

Tags:

infosteal

Gathering data

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=zw6bkznqs75gzepvpzbwdx6hnjhrerdt6wk5hzrf3s5w5w3xhd3q._file

Please note that we are no longer able to provide a coverage score for Virus Total.

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/cdbc1565b097fa6c91f57e4361dfc76a4f124473f595d3e625dcbb6edb7738f7

YARA Signatures

MalwareBazaar uses YARA rules from several public and non-public repositories, such as YARAhub and Malpedia. Those are being matched against malware samples uploaded to MalwareBazaar as well as against any suspicious process dumps they may create. Please note that only results from TLP:CLEAR rules are being displayed.

Rule name:	Sus_Obf_Enc_Spoof_Hide_PE Create hunting rule
Author:	XiAnzheng
Description:	Check for Overlay, Obfuscating, Encrypting, Spoofing, Hiding, or Entropy Technique(can create FP)