MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 f7b18a288190b01c993f6fc9b4736a78d61a508bae87f361f48d090d42614caa. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	f7b18a288190b01c993f6fc9b4736a78d61a508bae87f361f48d090d42614caa
SHA3-384 hash:	a8009e174683ef67f8ed5e3461cb468ca095f1b78a191443fa2ccf8ec186d941c3c9ed14d669962c59289869ed7cb2dc
SHA1 hash:	77f6d7408130fe5f61625cbdc56f12f261f97c08
MD5 hash:	ef21207c87363d68de67eb07dc3ed27d
humanhash:	happy-stream-paris-red
File name:	964f5d5f02fce99e3eea78d544fd78b843e0e39cb6994e0c77b2255c773f4617.zip
Download:	download sample
File size:	785 bytes
First seen:	2025-12-10 18:29:56 UTC
Last seen:	2025-12-10 18:30:17 UTC
File type:	zip
MIME type:	application/zip
ssdeep	12:5j6wHSeQ1rjAYgmJLt/rE/EDxd8SPS2RkPgbQBICmp+ti+ni30NC+IKnEkHmdGTo:96BxjAYZHrlDTLL3gAjYjk+IlxdGU
TLSH	T10C012086D23695E0CC3B3B7E454A129CD218038C1079CBE6871D367168CBC858FA1697
Magika	zip
Reporter	JAMESWT_WT
Tags:	jmpbowl-space zip

Intelligence

---

File Origin

# of uploads :

2

# of downloads :

37

Origin country :

IT

File Archive Information

This file archive contains 1 file(s), sorted by their relevance:

Other files 1

File name:	964f5d5f02fce99e3eea78d544fd78b843e0e39cb6994e0c77b2255c773f4617.sh
File size:	1'344 bytes
SHA256 hash:	964f5d5f02fce99e3eea78d544fd78b843e0e39cb6994e0c77b2255c773f4617
MD5 hash:	16716d14235973f0fcd277d3768f4529
MIME type:	text/x-shellscript

Vendor Threat Intelligence

ACCE Zip_Archive

Details

Link:

https://research.acce.ciphertechsolutions.com/results/fd11db3b-00bc-4a9f-9c4e-abf910a65e4d/

CyberFortress Clean

Verdict:

Clean

Score:

84.2%

Link:

https://cyber-fortress.com/docs/result/index.php?id=6939b5e7bde6a3e5970fec27

Tags:

n/a

DocGuard Malicious

Result

Verdict:

Malicious

File Type:

Generic File

Link:

https://app.docguard.net/f7b18a288190b01c993f6fc9b4736a78d61a508bae87f361f48d090d42614caa/results/dashboard

Hybrid Analysis Unknown

Verdict:

Unknown

Link:

https://www.hybrid-analysis.com/sample/f7b18a288190b01c993f6fc9b4736a78d61a508bae87f361f48d090d42614caa

InQuest UNKNOWN

Result

Verdict:

UNKNOWN

Link:

https://labs.inquest.net/dfi/sha256/f7b18a288190b01c993f6fc9b4736a78d61a508bae87f361f48d090d42614caa

Kaspersky OpenTIP Malicious

Verdict:

Malicious

File Type:

zip

First seen:

2025-12-11T04:50:00Z UTC

Last seen:

2025-12-11T05:13:00Z UTC

Hits:

~10

Link:

https://opentip.kaspersky.com/f7b18a288190b01c993f6fc9b4736a78d61a508bae87f361f48d090d42614caa/results?tab=lookup

Nucleon Malprob Benign

Score:

7%

Verdict:

Benign

File Type:

ARCHIVE

Link:

https://malprob.io/report/f7b18a288190b01c993f6fc9b4736a78d61a508bae87f361f48d090d42614caa

Malva.RE inconclusive

Verdict:

inconclusive

YARA:

2 match(es)

Tags:

Zip Archive

Link:

https://app.malva.re/file/ef21207c87363d68de67eb07dc3ed27d

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/f7b18a288190b01c993f6fc9b4736a78d61a508bae87f361f48d090d42614caa/

ReversingLabs TitaniumCloud MacOS.Infostealer.Generic

Threat name:

MacOS.Infostealer.Generic

Alert

Create hunting rule

Status:

Suspicious

First seen:

2025-12-10 18:30:28 UTC

File Type:

Binary (Archive)

Extracted files:

1

AV detection:

6 of 24 (25.00%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=66yyukebscybzgj7n7e3i43kpdlbuuelv2d7gypurueq2qtbjsva._file

Hatching Triage Unknown

Result

Malware family:

n/a

Score:

  1/10

Tags:

linux

Link:

https://tria.ge/reports/251210-xl1ypsdl5z/

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.05

Link:

https://yomi.yoroi.company/submissions/f7b18a288190b01c993f6fc9b4736a78d61a508bae87f361f48d090d42614caa