MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 f48cd4256d84807ad7d4bbaf316469573cdd930e40681146ddba4c6c6761bb45. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	f48cd4256d84807ad7d4bbaf316469573cdd930e40681146ddba4c6c6761bb45
SHA3-384 hash:	9b2ce2e1367d1c1d6780075154fe7c06f6555448da37c90bf40df5da705f63ea0a2f4ccfd6e303cc569775beaa871964
SHA1 hash:	5cb114583fabae2a87d7b850688444868c443943
MD5 hash:	881b6c1ee6be6b28f1147cce9134f98a
humanhash:	nevada-london-alaska-salami
File name:	f48cd4256d84807ad7d4bbaf316469573cdd930e40681146ddba4c6c6761bb45
Download:	download sample
File size:	97'864'704 bytes
First seen:	2026-08-05 13:49:57 UTC
Last seen:	Never
File type:	exe
MIME type:	application/x-dosexec
imphash	fd6f6d07cc33ee9a2b65bda58a07bb94 (9 x NWHStealer)
ssdeep	1572864:GZa7hmguP2nG0/Vyv7UhgxIabc/x7Awby:GZa7hmguP2nUOnAwby
TLSH	T130286C43A2E751D8F0BBD17497E65323E932BC490B3469EF12944B312F72AE0A779B11
TrID	55.7% (.WLX) Total Commander Lister extension (plugin) (21500/1/6) 16.9% (.EXE) Win64 Executable (generic) (6522/11/2) 11.6% (.EXE) Win32 Executable (generic) (4504/4/1) 5.2% (.EXE) OS/2 Executable (generic) (2029/13) 5.1% (.EXE) Generic Win/DOS Executable (2002/3)
Magika	pebin
dhash icon	9170cc9296cc7001 (9 x NWHStealer, 1 x XWorm)
Reporter	adrian__luca
Tags:	exe

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

177

Origin country :

HU

Vendor Threat Intelligence

ACCE MurmurHash3_128x64 MurmurHash3_32

Details

Link:

https://research.acce.ciphertechsolutions.com/results/7523b20d-daad-47f9-b117-48f74033cd87/

ANY.RUN

Malware family:

n/a

ID:

1

File name:

exe

Verdict:

No threats detected

Analysis date:

2026-08-05 13:57:47 UTC

Tags:

n/a

Link:

https://app.any.run/tasks/78996457-825c-4950-b29d-699744a053a1

Note:

ANY.RUN is an interactive sandbox that analyzes all user actions rather than an uploaded sample

Dr. Web vxCube Malware

Result

Verdict:

Malware

Maliciousness:

Behaviour

Creating a file in the Windows subdirectories

DNS request

Connection attempt

Sending a custom TCP request

Launching a service

Query of malicious DNS domain

FileScan.io

Gathering data

Hybrid Analysis Trojan.Generic

Verdict:

Suspicious

Labled as:

Trojan.Generic

Link:

https://www.hybrid-analysis.com/sample/f48cd4256d84807ad7d4bbaf316469573cdd930e40681146ddba4c6c6761bb45

Kaspersky OpenTIP Malicious

Verdict:

Malicious

File Type:

exe x64

First seen:

2026-08-05T11:28:00Z UTC

Last seen:

2026-08-05T12:34:00Z UTC

Hits:

~100

Link:

https://opentip.kaspersky.com/f48cd4256d84807ad7d4bbaf316469573cdd930e40681146ddba4c6c6761bb45/results?tab=lookup

Nucleon Malprob Benign

Score:

0%

Verdict:

Benign

File Type:

PE

Link:

https://malprob.io/report/f48cd4256d84807ad7d4bbaf316469573cdd930e40681146ddba4c6c6761bb45

CERT.PL MWDB

Gathering data

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=6sgnijlnqsahvv6uxoxtczdjk46n3eyoibubcrw5xjggyz3bxncq._file

Hatching Triage Suspicious

Result

Malware family:

n/a

Score:

  7/10

Tags:

discovery

Link:

https://tria.ge/reports/260805-q5pw8ahj51/

Behaviour

Checks SCSI registry key(s)

Checks processor information in registry

Enumerates system info in registry

Looks up external IP address via web service

Maps connected drives based on registry

Checks computer location settings

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.