MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 e408c88bbc1a287a4d42718389bab721084a03d36a955070b6677c8edd434d75. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	e408c88bbc1a287a4d42718389bab721084a03d36a955070b6677c8edd434d75
SHA3-384 hash:	2befbdbd0b26e3b0c784a2167d333cbc0cff26740945a838a527c6048548bdbb54de690fe5d9f3915cb7744437498db1
SHA1 hash:	ff8a5d9f9c0d97f6facdda29a9e4f658e0fba148
MD5 hash:	3b7a93024fcd02a7badd6228eb35f456
humanhash:	hawaii-hamper-fourteen-maryland
File name:	Game.exe
Download:	download sample
File size:	92'976'128 bytes
First seen:	2025-12-23 07:48:42 UTC
Last seen:	Never
File type:	exe
MIME type:	application/x-dosexec
imphash	15759d909431a737cd0ba268e8d3270b
ssdeep	393216:E7eIv64rGOW4JCcjB7nWNVVoNcU+kUWWyAH4p1NQu58EASEhoIaE2lShu9XPTA0L:EVvz0yT1AMQJhG688SEVBxOWr
TLSH	T101186B4267FA0185E9F79A3489F65213D673BC0A6B3086CF364C176A1F736E08E76721
TrID	48.7% (.EXE) Win64 Executable (generic) (10522/11/4) 23.3% (.EXE) Win16 NE executable (generic) (5038/12/1) 9.3% (.EXE) OS/2 Executable (generic) (2029/13) 9.2% (.EXE) Generic Win/DOS Executable (2002/3) 9.2% (.EXE) DOS Executable Generic (2000/1)
Magika	pebin
Reporter	abuse_ch
Tags:	de-pumped exe

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

82

Origin country :

NL

Vendor Threat Intelligence

ACCE MurmurHash3_128x64

Details

Link:

https://research.acce.ciphertechsolutions.com/results/416ecb21-7efe-45f4-a3f0-0753e4d9c7e9/

ANY.RUN

Malware family:

n/a

ID:

1

File name:

Game.exe

Verdict:

No threats detected

Analysis date:

2025-12-23 07:53:41 UTC

Tags:

n/a

Link:

https://app.any.run/tasks/deefe368-babb-4f53-a9b9-f87e8b74d3b1

Note:

ANY.RUN is an interactive sandbox that analyzes all user actions rather than an uploaded sample

CyberFortress Clean

Verdict:

Clean

Score:

99.9%

Link:

https://cyber-fortress.com/docs/result/index.php?id=694a49a41f45795757239d20

Tags:

n/a

FileScan.IO Likely Malicious

Verdict:

Likely Malicious

Threat level:

  7.5/10

Confidence:

100%

Tags:

adaptive-context anti-debug crypto expand fingerprint installer-heuristic lolbin microsoft_visual_cc packed

Link:

https://www.filescan.io/uploads/694a498be126b9ff438ddabb/reports/4af6aa70-91fc-431c-bab1-182a5ea215d4/overview

Hybrid Analysis TR/W64.Malware

Verdict:

Malicious

Labled as:

TR/W64.Malware

Link:

https://www.hybrid-analysis.com/sample/e408c88bbc1a287a4d42718389bab721084a03d36a955070b6677c8edd434d75

Kaspersky OpenTIP Clean

Verdict:

Clean

File Type:

exe x64

First seen:

2025-12-23T05:06:00Z UTC

Last seen:

2025-12-23T05:50:00Z UTC

Hits:

~10

Link:

https://opentip.kaspersky.com/e408c88bbc1a287a4d42718389bab721084a03d36a955070b6677c8edd434d75/results?tab=lookup

Joe Sandbox clean

Result

Threat name:

n/a

Detection:

clean

Classification:

n/a

Score:

2 / 100

Link:

https://www.joesandbox.com/analysis/1838117

Behaviour

Behavior Graph:

n/a

Nucleon Malprob Benign

Score:

0%

Verdict:

Benign

File Type:

PE

Link:

https://malprob.io/report/e408c88bbc1a287a4d42718389bab721084a03d36a955070b6677c8edd434d75

CERT.PL MWDB

Gathering data

Neiki Clean

Verdict:

Clean

Link:

https://tip.neiki.dev/file/e408c88bbc1a287a4d42718389bab721084a03d36a955070b6677c8edd434d75

ReversingLabs TitaniumCloud Win64.Trojan.Generic

Threat name:

Win64.Trojan.Generic

Alert

Create hunting rule

Status:

Suspicious

First seen:

2025-12-23 07:50:40 UTC

File Type:

PE+ (Exe)

Extracted files:

9

AV detection:

4 of 24 (16.67%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=4qemrc54diuhutkcogbytovxeeeeua6tnkkva4fwm56i5xkdjv2q._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  3/10

Tags:

n/a

Link:

https://tria.ge/reports/251223-jnzxjayjas/

Threat.Zone Suspicious

Verdict:

Suspicious

Tags:

n/a

YARA:

n/a

Link:

https://app.threat.zone/submission/bc8a3610-c734-4757-bbe2-1e586c54942b

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.