🤲🏼 NEW | abuse.ch Community Hub! Earn recognition 🏅 for the malware intelligence you share, climb the leaderboards 📈, and connect with like-minded contributors who share your hunting focus 🤝. Ready to unlock your profile? Go to the Community Hub →

MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 fb8491f3beeca97f5167549e5be6ab8caee26b67f5afc5d4d89b0f8d832c3e95. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Threat unknown


Vendor detections: 5


Intelligence 5 IOCs YARA File information Comments
Download sample Add tag Delete this sample Report a False Positive

SHA256 hash: fb8491f3beeca97f5167549e5be6ab8caee26b67f5afc5d4d89b0f8d832c3e95
SHA3-384 hash: ca3f71eb7d38e727974aa45298f2fecf85fb69b97fc83783e7e936d090f10c7a279be2f5790c633b57977d300a33d416
SHA1 hash: f4ac58e895c791702524a3e6b785b8c4f4945de6
MD5 hash: 5763011551b6e7cc637d80851409a6c3
humanhash: network-iowa-asparagus-sierra
File name:fb8491f3beeca97f5167549e5be6ab8caee26b67f5afc5d4d89b0f8d832c3e95.bin
Download: download sample
File size:46'170 bytes
First seen:2026-09-27 14:11:05 UTC
Last seen:Never
File type: zip
MIME type:application/zip
ssdeep 768:cbF0N1rI8PWRoeFc0LkDaROCG2rvT1mCG6h2C/+8RMv4Rwt11TmduXBNbMQxYLIE:cx0NtI8+RF1LksxG2rvTrGm2CXRFRwti
TLSH T1ED23CF56C1C01193D5A7C27C21BF069CDE7AEB4A5129B24EB30DB0805E97C799B363BE
Magika zip
Reporter whack_sh
Tags:zip

Intelligence

File Origin
# of uploads :
1
# of downloads :
89
Origin country :
US US
File Archive Information

This file archive contains 30 file(s), sorted by their relevance:

File name:13.jpg
File size:2'342 bytes
SHA256 hash: 191ce6f6106f7ad7ad7a5ebece30165ecb3a9bf859613ab949b4bf90aaa04150
MD5 hash: 56315ddaca62fcbe306f0104e93ddaf8
MIME type:image/jpeg
File name:7.jpg
File size:2'048 bytes
SHA256 hash: b3d6322a71bbfd33c830072ecdf346cbe557b096895e7ece7b675cbb07779bf2
MD5 hash: edfadc7e62b62d086fee8283f640a6a8
MIME type:image/jpeg
File name:18.jpg
File size:2'350 bytes
SHA256 hash: ac94e34eb92e80cb3a697ddda98403e5bbddfacb12380bacc230bace1654d1b9
MD5 hash: d10236fae8874dd4925df6c2829607a3
MIME type:image/jpeg
File name:blank.jpg
File size:1'444 bytes
SHA256 hash: 818acdcfa8e732a8be4d05e599f1cacff5cf3de4455fb1227d44a833f832489b
MD5 hash: af5f29b7e206ffdb8e370d27096921ea
MIME type:image/jpeg
File name:14.jpg
File size:2'349 bytes
SHA256 hash: c8e815f804cfe8db09709caa7221852129d70dd3944ad181b37d0922753a6fc3
MD5 hash: f52f613111fd5ca82f12659583caf48e
MIME type:image/jpeg
File name:17.jpg
File size:2'323 bytes
SHA256 hash: bca7760a3e8fad7295e873992c7c500233da6543dea18aa1968af2a410b23820
MD5 hash: 7cc0ddb4795ff75105a4031f7db696e7
MIME type:image/jpeg
File name:3.jpg
File size:2'136 bytes
SHA256 hash: 79e4d29ac35d558c5fb3b09f77042605771c5b83e132f549e2b8c15e91ebe375
MD5 hash: a097aac6887a99004d7624183e8f18dd
MIME type:image/jpeg
File name:main.py
File size:2'469 bytes
SHA256 hash: f5f1f774cc4b9d245592a6b41b01e6c69cffd75bbf010d9f8b3852267d10e2e8
MD5 hash: 0f912df2991ede6f1a4c802abd0e83f9
MIME type:text/plain
File name:24.jpg
File size:2'345 bytes
SHA256 hash: 9641f98f11ae8469eb8366f753c226be01d09ad2825b87167fe6da186e090331
MD5 hash: 764324fe2c8d7b3e9a4677019a72260d
MIME type:image/jpeg
File name:vbs.vbs
File size:66 bytes
SHA256 hash: c9fe87eac19dafd3480a4bb05225a78ca2c356a9049d5ba2bb012b3897be3b8e
MD5 hash: b33095fc0bb327573f47a6e80c591706
MIME type:text/plain
File name:16.jpg
File size:2'348 bytes
SHA256 hash: 70b7366611f2a8a31744cb6dc2e4770a162a5eb7f5074f645d876558a8f8d0f8
MD5 hash: 5a9e322853a81a2973b876412c809542
MIME type:image/jpeg
File name:9.jpg
File size:2'146 bytes
SHA256 hash: d70c1cc829be1017ccdd43fc10a99e4797935d697f5d4040b89d0168dd68e9bb
MD5 hash: 4a186e4e88aef4498dee877432537b3c
MIME type:image/jpeg
File name:20.jpg
File size:2'357 bytes
SHA256 hash: bac99f704a8bf9820fafdf100b10495970760a596a682b451697efbd688deb30
MD5 hash: 4b769deec2f3098a7149a878b4de4e74
MIME type:image/jpeg
File name:5.jpg
File size:2'321 bytes
SHA256 hash: 670d605267d47cf3d3cbbe9522747a0f0ae2d88982bfc3d044a60e4f4849366d
MD5 hash: 95a17f40162243892cc29e6f418569da
MIME type:image/jpeg
File name:11.jpg
File size:2'336 bytes
SHA256 hash: d25a93384a968e204fed760804672088c85b82ff2555f13b93b8f0d884fcdbb3
MD5 hash: 845daec1b885a65ced3bcfdfa0111eb2
MIME type:image/jpeg
File name:2.jpg
File size:2'151 bytes
SHA256 hash: 6ee0cccf1fc080f962e4ef2b29aeb88e6c87c3a86d3c104ce30943530113f5f9
MD5 hash: 536197b1880e1237fbb3bbeb670ef9f7
MIME type:image/jpeg
File name:1.jpg
File size:2'138 bytes
SHA256 hash: 84c1e423d726750dd92d51bee06430f1952db74749b54f285ec44739c21f3e90
MD5 hash: 07364f17173df5f0ae4566fe89ba1872
MIME type:image/jpeg
File name:6.jpg
File size:2'119 bytes
SHA256 hash: 0b7ec4a2226681cfb0bdc58db8c8171dd0b6469cefe959a304c28731ed68d420
MD5 hash: f193e484d260b57b847e5763cdb116f3
MIME type:image/jpeg
File name:README.txt
File size:18 bytes
SHA256 hash: be71341cd95cc1f3744156428d82babe1bea390aef0759e902bed30c8170c309
MD5 hash: e49b21b0fe8a7a1e9a3eaa1496480708
MIME type:text/plain
File name:8.jpg
File size:2'143 bytes
SHA256 hash: 868e61a66ff1b88b7e32549fcb29231a1207c794a046af02b8d38d7896b14dbe
MD5 hash: 67ff9a9ba8c85a2600c31a33189e4969
MIME type:image/jpeg
File name:15.jpg
File size:2'346 bytes
SHA256 hash: 04b11de9e5c61b47227d228a981566f974358fd76159cdd6bebf92a46765322f
MD5 hash: 3f68e267ec1367788b4ed25b4a31ce9c
MIME type:image/jpeg
File name:19.jpg
File size:2'353 bytes
SHA256 hash: b7c66b4f3183c80a750f63f78c70fa04b0112f77b5e13b2891e372f5d05ef636
MD5 hash: a9fe54da47032666723e0d3a909a5eb9
MIME type:image/jpeg
File name:21.jpg
File size:2'339 bytes
SHA256 hash: ed1baa17918fa3d8f55294b9b02a217a4d66fb032d8a89ce51dc7dc9bf9342a0
MD5 hash: a02396458eb65f61ab34090b47c1a867
MIME type:image/jpeg
File name:start.bat
File size:44 bytes
SHA256 hash: 03ba69a1487d031ddb02bd2f256cb4709815f8663728b9aa3f28920826923126
MD5 hash: 7f6a9b778f2ed1299cb469440d60e906
MIME type:text/plain
File name:12.jpg
File size:2'353 bytes
SHA256 hash: 0d136af74cacf044aec8d5d1b9c8faf57b904a30881b37e66ebb1eae97cc961b
MD5 hash: 8e891b64c7d13d28b6b2aa87ce12bfb6
MIME type:image/jpeg
File name:22.jpg
File size:2'349 bytes
SHA256 hash: d842da339c075c9b41b576050584f78ebb21d2cd2c4fc77dd5fb47559fbf0802
MD5 hash: 964bdf9702dca60b17588e555771571c
MIME type:image/jpeg
File name:4.jpg
File size:2'062 bytes
SHA256 hash: e7a2c20312e312c53722981327b95dbaaa092b883e29acd48eb0ff19958749aa
MD5 hash: e450e8b26f3d0a60cea73cc6e020363b
MIME type:image/jpeg
File name:25.jpg
File size:2'354 bytes
SHA256 hash: d279cbe191ef45d9cd5e38b42570ed3faf5c1ad43689e423604d46c474023233
MD5 hash: 2031f007737f7bda2549a0c400f83bff
MIME type:image/jpeg
File name:10.jpg
File size:2'348 bytes
SHA256 hash: 2976a588270df15bb35d8dfac691712ec5f9a173524fb007166e6cb576fe6b75
MD5 hash: aa5c1bfb0539a385281f11dacfc1dec6
MIME type:image/jpeg
File name:23.jpg
File size:2'361 bytes
SHA256 hash: 31c4b0902e32bb1f1067502dd205f43040f34078b867c239d152e232874e5011
MD5 hash: 7c42efe0a2f747456a28935eb78d1bd9
MIME type:image/jpeg
Vendor Threat Intelligence
Details
Link:
https://research.acce.ciphertechsolutions.com/results/dd191f05-4f27-40d3-8253-201370e17607/
Detection(s):
Sanesecurity.Foxhole.JS_Zip_1v.UNOFFICIAL
Create hunting rule

Verdict:
Unknown
Link:
https://www.hybrid-analysis.com/sample/fb8491f3beeca97f5167549e5be6ab8caee26b67f5afc5d4d89b0f8d832c3e95
Verdict:
Unknown
File Type:
zip
Link:
https://opentip.kaspersky.com/fb8491f3beeca97f5167549e5be6ab8caee26b67f5afc5d4d89b0f8d832c3e95/results?tab=lookup
Score:
13%
Verdict:
Benign
File Type:
ARCHIVE
Link:
https://malprob.io/report/fb8491f3beeca97f5167549e5be6ab8caee26b67f5afc5d4d89b0f8d832c3e95
Verdict:
Malware
YARA:
3 match(es)
Tags:
COM Behavior Trace DeObfuscated Obfuscated T1027 T1059 T1059.005 VBScript WScript.Shell Zip Archive
Link:
https://app.malva.re/file/5763011551b6e7cc637d80851409a6c3
Detection:
n/a
Link:
https://mwdb.cert.pl/sample/fb8491f3beeca97f5167549e5be6ab8caee26b67f5afc5d4d89b0f8d832c3e95/
Threat name:
Binary.Trojan.Generic
Create hunting rule
Status:
Suspicious
First seen:
2026-09-27 14:11:35 UTC
File Type:
Binary (Archive)
Extracted files:
57
AV detection:
3 of 24 (12.50%)
Threat level:
  5/5
Detection(s):
Suspicious file
Link:
https://check.spamhaus.org/check/?searchterm=7ocjd4565sux6ulhkspfxzvlrsxoe23h6wx4lvgytmhy3azmh2kq._file
Result
Malware family:
n/a
Score:
  7/10
Tags:
execution
Link:
https://tria.ge/reports/260927-vmgv4ssx8l/
Behaviour
Modifies registry class
Suspicious use of SetWindowsHookEx
Enumerates physical storage devices
Executes a command shell one-liner
Please note that we are no longer able to provide a coverage score for Virus Total.

File information

The table below shows additional information about this malware sample such as delivery method and external references.

Web download

zip fb8491f3beeca97f5167549e5be6ab8caee26b67f5afc5d4d89b0f8d832c3e95

(this sample)

  
Delivery method
Distributed via web download

Comments