MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 dab444d80bebe46adad8760050f66e3b973cbdadbc87680a67d8f08e15eaa2b0. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	dab444d80bebe46adad8760050f66e3b973cbdadbc87680a67d8f08e15eaa2b0
SHA3-384 hash:	aa9be6dc2e364b5ef8c721e8b32e929b7f5eb5cc5d0667f659590e2855da4e4ae2512f328dd5bd2754d5da91ff0c9d24
SHA1 hash:	2b6c5458d7950e66800171a7bc6d2154de9a8a97
MD5 hash:	26a92a6f041e7d5ba60f7441232d0fad
humanhash:	nineteen-may-twelve-connecticut
File name:	ed8e97d3cac699a0a76d159742ac247f8121506de2fa197b5df46418b87c225b.7z
Download:	download sample
File size:	78'757'136 bytes
First seen:	2026-03-16 19:25:41 UTC
Last seen:	Never
File type:	7z
MIME type:	application/x-7z-compressed
ssdeep	1572864:+EEmBnEeCLsmN52exPpJZEm3i7bssx3cwjefW4aaaQW4DsR27REoWajPklE1pi:Gquss524pJZExbXx3clfaaFvMeXLklE6
TLSH	T1910833C5193CA3F3B53950B37EFC1036323F8E79BA64655AA14B17AACFA414646E01F8
TrID	57.1% (.7Z) 7-Zip compressed archive (v0.4) (8000/1) 42.8% (.7Z) 7-Zip compressed archive (gen) (6000/1)
Magika	sevenzip
Reporter	JAMESWT_WT
Tags:	185-246-223-71 7z 94-156-170-255 flowy-zip rezipped

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

65

Origin country :

IT

Vendor Threat Intelligence

ACCE Unknown

No detections

CyberFortress Clean

Verdict:

Clean

Score:

99.9%

Link:

https://cyber-fortress.com/docs/result/index.php?id=69b8597193b644ca466ab436

Tags:

n/a

Hybrid Analysis Unknown

Verdict:

Unknown

Link:

https://www.hybrid-analysis.com/sample/dab444d80bebe46adad8760050f66e3b973cbdadbc87680a67d8f08e15eaa2b0

Kaspersky OpenTIP Malicious

Verdict:

Malicious

File Type:

7z

Link:

https://opentip.kaspersky.com/dab444d80bebe46adad8760050f66e3b973cbdadbc87680a67d8f08e15eaa2b0/results?tab=lookup

Nucleon Malprob Benign

Score:

0%

Verdict:

Benign

File Type:

ARCHIVE

Link:

https://malprob.io/report/dab444d80bebe46adad8760050f66e3b973cbdadbc87680a67d8f08e15eaa2b0

CERT.PL MWDB

Gathering data

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=3k2ejwal5psgvwwyoyafb5toholtzpnnxsdwqcth3dyi4fpkukya._file

Hatching Triage Suspicious

Result

Malware family:

n/a

Score:

  6/10

Tags:

discovery persistence

Link:

https://tria.ge/reports/260316-y2a8nacx4w/

Behaviour

Checks processor information in registry

Enumerates system info in registry

Modifies data under HKEY_USERS

Modifies registry class

Suspicious behavior: EnumeratesProcesses

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary

Suspicious use of FindShellTrayWindow

Suspicious use of SendNotifyMessage

Suspicious use of WriteProcessMemory

Browser Information Discovery

System Time Discovery

Drops file in Program Files directory

Drops file in Windows directory

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.