MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 e642783e0cf4a0903373f689871de22d8bb6913e9fd331c8c8674a9857cd5e60. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	e642783e0cf4a0903373f689871de22d8bb6913e9fd331c8c8674a9857cd5e60
SHA3-384 hash:	7e32f21e393c0fab772cc655933e00d79985b3ed4de74304fbfe8b7430466741d7831916d3e937a0fec54d4893e0ad8e
SHA1 hash:	d4d91d1833d7dca144c61e82f19b4a4756ff0b3e
MD5 hash:	9d54c85fe96844fdf25a89c8a98c10d9
humanhash:	colorado-jig-coffee-tango
File name:	e642783e0cf4a0903373f689871de22d8bb6913e9fd331c8c8674a9857cd5e60.bin
Download:	download sample
File size:	19'208 bytes
First seen:	2026-09-30 10:12:24 UTC
Last seen:	Never
File type:	zip
MIME type:	application/zip
ssdeep	384:i0zDeeqPXyaFANZBITX3MSgWAc0ZItEFHcAH+s4P5DKTQ5UkU76VRTK2G:i0ePMNZyQtTcCjH2P5MtkL1KV
TLSH	T14282AE6AF6125479D143A7FDC8300903E52EF2ABD59C3F0395395E868C03E76613AB6B
Magika	zip
Reporter	whack_sh
Tags:	zip

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

76

Origin country :

US

File Archive Information

This file archive contains 10 file(s), sorted by their relevance:

Potential files of interest 1

File name:	BriefFormatter.exe
File size:	32'768 bytes
SHA256 hash:	cf71e60e25c851b9697ed830ab089e09bd471fe04a12d7dfb06b85759be8684e
MD5 hash:	af4b2e3658379cace952a27ae11733f5
MIME type:	application/x-dosexec

Other files 9

File name:	StdAfx.cpp
File size:	216 bytes
SHA256 hash:	a3136dcfed3966339b17586a85b84e853b5a13d3346e31001d3d766935842a4a
MD5 hash:	d326c4e1053a082c353edc2f41f791ad
MIME type:	text/x-c

File name:	BriefFormatterDlg.h
File size:	1'567 bytes
SHA256 hash:	3fb122e96e16ea59fc8990c6b1be34135020968c78977ed87f3f3766ca88c8b9
MD5 hash:	4efc6aa574f6bec0da9fddcf308170f0
MIME type:	text/x-c++

File name:	BriefFormatterDlg.cpp
File size:	9'262 bytes
SHA256 hash:	297027a6fe4b3dae309d51ea3175e4c8fae8cc562b0524034720b3de5e12e126
MD5 hash:	7d42778cb6f394f9596279506c55ad8c
MIME type:	text/x-c++

File name:	BriefFormatter.rc
File size:	6'056 bytes
SHA256 hash:	118ade9f0ba9bfcbde77dfb53f0e1d5beae60616a0a40582d6624efe8ac0d508
MD5 hash:	d8c0b31f64e354d8b6282ee334447e98
MIME type:	text/x-c

File name:	StdAfx.h
File size:	999 bytes
SHA256 hash:	17382afbde86e34451f551d36241fc714a07517519b6c81a6cb2ac867ee2b36f
MD5 hash:	a99c7c53e621681412a04b06e3917f3b
MIME type:	text/x-c

File name:	BriefFormatter.dsw
File size:	553 bytes
SHA256 hash:	78e1313ee382cb130a3be13ed4bd1c0d43951445877ecc7a50fb5439834a42a0
MD5 hash:	941f1fd8c2642438f21a1484ae760a77
MIME type:	text/plain

File name:	resource.h
File size:	1'241 bytes
SHA256 hash:	3a61e0f7502358cea3658729451a78262e790a153f11c11dd93ffe58b6be1dfd
MD5 hash:	5f6f3c72b4f513ae19441454a0d69abe
MIME type:	text/x-c

File name:	BriefFormatter.cpp
File size:	2'144 bytes
SHA256 hash:	0e7f0c2f96212a4531fd5e72c28d76e74ae003cbb814e8cea6db4a76188e38ae
MD5 hash:	34daea4489732c408da3651975841a64
MIME type:	text/x-c

File name:	BriefFormatter.dsp
File size:	4'303 bytes
SHA256 hash:	d33e6e19aa9c5fd5dc5429909d0a4de69d100e3790d99ac12424969786347f0a
MD5 hash:	3c26d7efcaaeaae11d3f39591902eb36
MIME type:	text/plain

Vendor Threat Intelligence

ACCE Zip_Archive

Details

Link:

https://research.acce.ciphertechsolutions.com/results/13c6ef84-21f0-4381-bee5-f64b6936272c/

DocGuard Clean

Result

Verdict:

Clean

File Type:

PE File

Link:

https://app.docguard.net/e642783e0cf4a0903373f689871de22d8bb6913e9fd331c8c8674a9857cd5e60/results/dashboard

Hybrid Analysis Unknown

Verdict:

Unknown

Link:

https://www.hybrid-analysis.com/sample/e642783e0cf4a0903373f689871de22d8bb6913e9fd331c8c8674a9857cd5e60

Nucleon Malprob Benign

Score:

2%

Verdict:

Benign

File Type:

ARCHIVE

Link:

https://malprob.io/report/e642783e0cf4a0903373f689871de22d8bb6913e9fd331c8c8674a9857cd5e60

Malva.RE inconclusive

Verdict:

inconclusive

YARA:

3 match(es)

Tags:

Executable PE (Portable Executable) PE File Layout Zip Archive

Link:

https://app.malva.re/file/9d54c85fe96844fdf25a89c8a98c10d9

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/e642783e0cf4a0903373f689871de22d8bb6913e9fd331c8c8674a9857cd5e60/

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=4zbhqpqm6sqjam3t62eyohpcfwf3nej6t7jtdsgim5fjqv6nlzqa._file

Hatching Triage Suspicious

Result

Malware family:

n/a

Score:

  4/10

Tags:

discovery

Link:

https://tria.ge/reports/260930-na2w7asemh/

Behaviour

Modifies registry class

Suspicious use of SetWindowsHookEx

Enumerates physical storage devices

System Location Discovery: System Language Discovery

Drops file in Windows directory

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Malicious File

Threat name:

Malicious File

Score:

0.85

Link:

https://yomi.yoroi.company/submissions/e642783e0cf4a0903373f689871de22d8bb6913e9fd331c8c8674a9857cd5e60