MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 ddfb4b9b8feb74bea278e7320aa66417823cfb7f3853322ba5f6e33b00e9c08a. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	ddfb4b9b8feb74bea278e7320aa66417823cfb7f3853322ba5f6e33b00e9c08a
SHA3-384 hash:	fa4e162885457627673dad02cf21ff354ef6c496d1f53c480b71f92f8804c1cb50225a1a8af2c1c4a52c41eea97fe779
SHA1 hash:	fd4cc54451a0c84df3fc799efa7dfac5044c4668
MD5 hash:	a3e346a25198f2d3d18caf0587515239
humanhash:	hamper-spaghetti-fix-cola
File name:	source code of carbanak backdoor discovered.7z
Download:	download sample
Signature	Vidar Alert Create hunting rule
File size:	17'161'971 bytes
First seen:	2026-03-18 21:52:12 UTC
Last seen:	Never
File type:	7z
MIME type:	application/x-7z-compressed
ssdeep	393216:BwNCBTd5B739kxj5vR6t/sTgFN8ZxqPnBhZhq6H/QfYc7cgdRApX5XhR/0:BzBTdr9kLvR05FGE+6Jc7j3Ihrc
TLSH	T16007338E4F28246CB3B53F1A5419DAC3D9E0F954C5F8794F0ECD6B9B2BC86272661087
TrID	57.1% (.7Z) 7-Zip compressed archive (v0.4) (8000/1) 42.8% (.7Z) 7-Zip compressed archive (gen) (6000/1)
Magika	sevenzip
Reporter	aachum
Tags:	7z 95-85-239-146 AsgardProtector file-pumped GoLoader LummaStealer pw-3306

iamaachum

https://media.hushholidays.online/Source+Code+of+CARBANAK+backdoor+discovered.zip

GoLoader C2: http://95.85.239.146:3000/V7sjDtINFKvD

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

56

Origin country :

ES

Vendor Threat Intelligence

ACCE Unknown

No detections

CyberFortress Clean

Verdict:

Clean

Score:

99.9%

Link:

https://cyber-fortress.com/docs/result/index.php?id=69bb1f2888c80c01586bcc61

Tags:

n/a

Hybrid Analysis Unknown

Verdict:

Unknown

Link:

https://www.hybrid-analysis.com/sample/ddfb4b9b8feb74bea278e7320aa66417823cfb7f3853322ba5f6e33b00e9c08a

InQuest

Result

Gathering data

Malva.RE

Gathering data

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/ddfb4b9b8feb74bea278e7320aa66417823cfb7f3853322ba5f6e33b00e9c08a/

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=3x5uxg4p5n2l5ity44zavjtec6bdz637hbjtek5f63rtwahjycfa._file

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.