MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 df0372bc4740540473f18e677c195fbc121a6bc1a9de0be2258ab936f2d161c7. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	df0372bc4740540473f18e677c195fbc121a6bc1a9de0be2258ab936f2d161c7
SHA3-384 hash:	17f9bab6ee0ec4f3dd8a03a6a279634508659ca264605220c9ef53ddd2fb77256eac860606aef7b333a57a90221f2016
SHA1 hash:	8b9c26cc8faf28b1c341bec6f6d78ec4ccd4d854
MD5 hash:	8f5a0243b7b033c5bd7329704eb43485
humanhash:	finch-victor-eighteen-orange
File name:	EEF_Moldova_Participation_Proposal_DRAFT.vhdx
Download:	download sample
File size:	104'857'600 bytes
First seen:	2026-09-24 21:48:47 UTC
Last seen:	Never
File type:	VHDX
MIME type:	application/octet-stream
ssdeep	6144:srZn7y/EGuH/cpior6KU0N69uPBJZNEJchlRKnDufGyeVC:YUDuH/c8Sc0N3HZNE6RKD8Gy
TLSH	T1C7384B11F2644E99E8AED338C8BA1305A736FD06574292CB722CB7197F333D85E29653
Magika	iso
Reporter	smica83
Tags:	vhdx

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

11

Origin country :

HU

File Archive Information

This file archive contains 6 file(s), sorted by their relevance:

Potential files of interest 2

File name:	documentvault_leaf.exe
File size:	265'216 bytes
SHA256 hash:	5e88fb2da3af531c506a745f6ef005fde861a3ad0f95c28939ab843bd1e6916a
MD5 hash:	12d44ac52e6e39813613fdda7e874235
MIME type:	application/x-dosexec

File name:	EEF_Moldova_Participation_Proposal_DRAFT.lnk
File size:	743 bytes
SHA256 hash:	18ac4c74e145bd6c07c82fde19d9978ee033ad2165bea46e1518566920ba0abf
MD5 hash:	748ce660fd7a994d38dc7118bd1c7097
MIME type:	application/octet-stream

Other files 4

File name:	documentvault_EEF_Moldova_Participation_Proposal_DRAFT.pdf
File size:	115'040 bytes
SHA256 hash:	21e91863a61b7c3b872fccb57d8eaff5befab987de50276c6cbcc5323fc43362
MD5 hash:	353fe7ad4fad3c353d58cd594ac270dc
MIME type:	application/pdf

File name:	_RECYCLE.BIN_S-1-5-21-4080033715-524121986-3969075855-500_desktop.ini
File size:	129 bytes
SHA256 hash:	e1b9ce9b57957b1a0607a72a057d6b7a9b34ea60f3f8aa8f38a3af979bd23066
MD5 hash:	a526b9e7c716b3489d8cc062fbce4005
MIME type:	application/x-wine-extension-ini

File name:	System_Volume_Information_WPSettings.dat
File size:	12 bytes
SHA256 hash:	222cdbdd5872f9f561b22ad7111f55733635808a171781e02b01446082e100f6
MD5 hash:	af3a94a4941e3a424c73bfdb740c810a
MIME type:	application/octet-stream

File name:	documentvault_EEF_Moldova_Participation_Proposal_DRAFT.bat
File size:	96 bytes
SHA256 hash:	bdc798b27edc8fad63f12191092ee4167f0552829058dcb2a7203d7b7903325f
MD5 hash:	877bf98d9d373ef22b3a478698044448
MIME type:	text/plain

Vendor Threat Intelligence

CyberFortress Clean

Verdict:

Clean

Score:

99.9%

Link:

https://cyber-fortress.com/docs/result/index.php?id=6acdfc167378c656ff4d9310

Tags:

n/a

Kaspersky OpenTIP Unknown

Verdict:

Unknown

File Type:

discimage.vhdx

Link:

https://opentip.kaspersky.com/df0372bc4740540473f18e677c195fbc121a6bc1a9de0be2258ab936f2d161c7/results?tab=lookup

CERT.PL MWDB

Gathering data

ReversingLabs TitaniumCloud Win64.Malware.Generic

Threat name:

Win64.Malware.Generic

Alert

Create hunting rule

Status:

Suspicious

First seen:

2026-09-24 21:00:17 UTC

File Type:

Binary (Archive)

Extracted files:

46

AV detection:

1 of 38 (2.63%)

Threat level:

  2/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=34bxfpchibkai47rrztxygk7xqjbu26bvhpaxyrfrk4tn4wrmhdq._file

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.