MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 d115b2e10643a728de05f9b6d1019bad1d786e842bc67471e4d73384c5cebf73. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	d115b2e10643a728de05f9b6d1019bad1d786e842bc67471e4d73384c5cebf73
SHA3-384 hash:	956e4e84cfd496a54569cca11b2067ed9191e036b2fc1ade15a6533c9c452f174110e2a4e3f54add3566a0f2006e3a88
SHA1 hash:	22ad4011b31e80930ca6db927ddda78090bda72d
MD5 hash:	a3acc70856791de592becc27694b803c
humanhash:	high-king-island-fifteen
File name:	1 Free Download Files.zip
Download:	download sample
Signature	Stealc Alert Create hunting rule
File size:	38'193'767 bytes
First seen:	2025-12-26 19:53:08 UTC
Last seen:	Never
File type:	zip
MIME type:	application/zip
ssdeep	786432:Po6f0q7abvkH/GbAmzt1n7IxbGo7u2f5CVGXP7pXhQOsYseq7goNy3EpAUnizYu/:Po6FWbAmx1ncxttYeQ7Y6VEErna/
TLSH	T11D87333D964C54C3FB0785B5EA76C14E48E61DE021A398A6FF24B6024CAF7D06736B87
TrID	46.6% (.SH3D) Sweet Home 3D Design (generic) (10500/1/3) 35.5% (.XPI) Mozilla Firefox browser extension (8000/1/1) 17.7% (.ZIP) ZIP compressed archive (4000/1)
Magika	zip
Reporter	aachum
Tags:	89-110-110-198 HIjackLoader IDATLoader RenPy RenPyLoader Stealc zip

iamaachum

https://www.mediafire.com/file/9wvmf0o78u81w0n/Free+Download+Files.zip/file

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

44

Origin country :

ES

Vendor Threat Intelligence

ACCE Zip_Archive

Details

Link:

https://research.acce.ciphertechsolutions.com/results/49f08165-45c5-470f-beb6-0ad054dfacd7/

CyberFortress Clean

Verdict:

Clean

Score:

99.9%

Link:

https://cyber-fortress.com/docs/result/index.php?id=694ee7c0038f10550b561d44

Tags:

n/a

Hybrid Analysis Unknown

Verdict:

Unknown

Link:

https://www.hybrid-analysis.com/sample/d115b2e10643a728de05f9b6d1019bad1d786e842bc67471e4d73384c5cebf73

Kaspersky OpenTIP Malicious

Verdict:

Malicious

File Type:

zip

First seen:

2025-12-26T04:24:00Z UTC

Last seen:

2025-12-27T04:14:00Z UTC

Hits:

~100

Link:

https://opentip.kaspersky.com/d115b2e10643a728de05f9b6d1019bad1d786e842bc67471e4d73384c5cebf73/results?tab=lookup

Nucleon Malprob Susipicious

Score:

67%

Verdict:

Susipicious

File Type:

ARCHIVE

Link:

https://malprob.io/report/d115b2e10643a728de05f9b6d1019bad1d786e842bc67471e4d73384c5cebf73

CERT.PL MWDB

Gathering data

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=2ek3fyigiotsrxqf7g3ncam3vuoxq3uefpdhi4pe24zyjroox5zq._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  3/10

Tags:

macos

Link:

https://tria.ge/reports/251226-y59wdsxkcl/

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.00

Link:

https://yomi.yoroi.company/submissions/d115b2e10643a728de05f9b6d1019bad1d786e842bc67471e4d73384c5cebf73